AI safety via debate
Not on the map. Why?
Cited by 100 in LLM agents and tool use, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
To make AI systems broadly useful for challenging real-world tasks, we need them to learn complex human goals and preferences. One approach to specifying complex goals asks humans to judge during training which agent behaviors are safe and useful, but this approach can fail if the task is too complicated for a human to directly judge. To help address this concern, we propose training agents via self play on a zero sum debate game. Given a question or proposed action, two agents take turns making short statements up to a limit, then a human judges which of the agents gave the most true, useful information. In an analogy to complexity theory, debate with optimal play can answer any question in PSPACE given polynomial time judges (direct judging answers only NP questions). In practice, whether debate works involves empirical questions about humans and the tasks we want AIs to perform, plus theoretical questions about the meaning of AI alignment. We report results on an initial MNIST experiment where agents compete to convince a sparse classifier, boosting the classifier's accuracy from 59.4% to 88.9% given 6 pixels and from 48.2% to 85.2% given 4 pixels. Finally, we discuss theoretical and practical aspects of the debate model, focusing on potential weaknesses as the model scales up, and we propose future human and computer experiments to test these properties.
Key facts. Cited by 384 papers in the map (data through 7 Oct 2026). First posted on arXiv 2 May 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2018: 1; 2019: 1; 2020: 0; 2021: 12; 2022: 22; 2023: 40; 2024: 49; 2025: 109; 2026: 150.
384 papers.
Sort:
By area:
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,739
- 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,722
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,422
- 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,199
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2022Solving math word problems with process- and outcome-based feedbackcited by 871
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
38 more
- 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 733
- 2023RAFT: Reward rAnked FineTuning for Generative Foundation Model Alignmentcited by 672
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 630
- 2022Improving alignment of dialogue agents via targeted human judgementscited by 527
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 445
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
- 2023Cognitive Architectures for Language Agentscited by 422
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 401
- 2023UltraFeedback: Boosting Language Models with Scaled AI Feedbackcited by 394
- 2022Self-critiquing models for assisting human evaluatorscited by 372
- 2021Unsolved Problems in ML Safetycited by 291
- 2022Teaching language models to support answers with verified quotescited by 290
- 2021Recursively Summarizing Books with Human Feedbackcited by 287
- 2024Debating with More Persuasive LLMs Leads to More Truthful Answerscited by 255
- 2023Challenges and Applications of Large Language Modelscited by 251
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 246
- 2023Large Language Model Alignment: A Surveycited by 241
- 2022Measuring Progress on Scalable Oversight for Large Language Modelscited by 212
- 2023AI Control: Improving Safety Despite Intentional Subversioncited by 207
- 2022Will we run out of data? Limits of LLM scaling based on human-generated datacited by 187
- 2023Beyond Reverse KL: Generalizing Direct Preference Optimization with Diverse Divergence Constraintscited by 174
- 2023RoCo: Dialectic Multi-Robot Collaboration with Large Language Modelscited by 171
- 2022A Review of Safe Reinforcement Learning: Methods, Theory and Applicationscited by 169
- 2021Alignment of Language Agentscited by 167
- 2023LM vs LM: Detecting Factual Errors via Cross Examinationcited by 155
- 2023Does Circuit Analysis Interpretability Scale? Evidence from Multiple Choice Capabilities in Chinchillacited by 145
- 2022Goal Misgeneralization: Why Correct Specifications Aren't Enough For Correct Goalscited by 120
- 2024MLLM-Protector: Ensuring MLLM's Safety without Hurting Performancecited by 111
- 2022Is Power-Seeking AI an Existential Risk?cited by 101
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
- 2024On scalable oversight with weak LLMs judging strong LLMscited by 94
- 2022When to Make Exceptions: Exploring Language Models as Accounts of Human Moral Judgmentcited by 93
- 2023Can ChatGPT Defend its Belief in Truth? Evaluating LLM Reasoning via Debatecited by 92
- 2023Can Large Language Models Explain Themselves? A Study of LLM-Generated Self-Explanationscited by 90
- 2023Personalisation within bounds: A risk taxonomy and policy framework for the alignment of large language models with personalised feedbackcited by 86
- 2024Prover-Verifier Games improve legibility of LLM outputscited by 79
- 2023Training Socially Aligned Language Models on Simulated Social Interactionscited by 77
- 2024JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Modelscited by 67
50 most cited of 384 All 384 (JSON)
- 2026Verification and Self-Improvement in Agentic AI: Foundations and Limits7 Oct 2026
- 2026Can AI Oversight Be Zero Knowledge?1 Oct 2026
- 2026How the Audit Rule Shapes Faithful Factor Explanations in LLMs1 Oct 2026
- 2026Groundability, Not Scale Alone: When Weak Reviewers Can Audit Strong Coding Agents1 Oct 2026
- 2026VeriHarness: Scaling Agentic Verification for Long-Horizon Tasks1 Oct 2026
- 2026MiniRep: Robust Reputation-Based Aggregation for Multi-Agent Debate30 Sep 2026
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems30 Sep 2026
- 2026Improving scalable oversight with co-trained monitors28 Sep 2026
- 2026Measurement Boundaries in LLM Financial Agent Evaluation: Fixed-Tape Execution and Multi-Defect Auditing26 Sep 2026
- 2026Black-Box Auditing of Epistemic Reliability in Multi-Agent Debate Distillation26 Sep 2026
- 2026Contract monitoring: governing AI via separation of powers25 Sep 2026
- 2026How does Adversarial Influence Scale in Multi-Agent Systems?24 Sep 2026
38 more
- 2026When Honesty is Not Enough in AI Debate24 Sep 2026
- 2026Human-LLM Deliberation as Interactive Proof: Conditions for Verifiability Without Transparency21 Sep 2026
- 2026Trustworthy Agentic AI: Failure Modes, Mitigation Strategies, and a Lifecycle Framework for Autonomous LLM Systems19 Sep 2026
- 2026The Wisdom of Artificial Deliberative Crowds18 Sep 2026
- 2026Why LLM Agents Collapse Without Oversight: The Enforcement Gap as the Mechanism Behind Emergence World Failures14 Sep 2026
- 2026Proof-Carrying Cognition: Closing the Verification Gap with Reality-Settled Reward9 Sep 2026
- 2026What Does Multi-Agent LLM Debate Actually Change? A Layered Analysis of Disagreement and Answer Quality7 Sep 2026
- 2026Uncertainty Quantification for LLM Agents: A Taxonomy, an Evaluation Protocol, and an Empirical Study7 Sep 2026
- 2026Measuring AI Accountability Through Argumentation Analysis: Can Model Reasoning Withstand Scrutiny?4 Sep 2026
- 2026A Structured Debate-Mixture-of-Agents Framework for Complex Clinical Diagnostic Decision Support4 Sep 2026
- 2026A Calibrated Reflection Approach for Enhancing Confidence Estimation in LLMs3 Sep 2026
- 2026LLM-as-a-Judge Is Not an Oracle: Why Self-Improving Agents Need Deterministic Guardrails2 Sep 2026
- 2026The Answer Is Not the Argument31 Aug 2026
- 2026Safety Does Not Compose: Non-Decaying Loop State for Autonomous LLM Agents27 Aug 2026
- 2026Candidate supply and answer selection shape the value of LLM judging in multi-agent systems26 Aug 2026
- 2026Tree-of-Concerns: Hierarchical Multi-Agent Debate for Unstated-Limitation Extraction in Scientific Critique21 Aug 2026
- 2026SPADE: Self-Play in Adaptive Synthetic Executable Environments19 Aug 2026
- 2026A Theory of Post-hoc Debate Judgement19 Aug 2026
- 2026CoEvo: Oracle-Grounded Self-Evolution of a Single Model for Multi-Step Causal Reasoning18 Aug 2026
- 2026Debate Training Reduces Reward Hacking in RLAIF18 Aug 2026
- 2026Towards Computational Provenance: Carrying Causal-State Evidence in Generated Text17 Aug 2026
- 2026Jagged Judges: Epistemic Stability Under Perturbation, Pressure, and Persistence12 Aug 2026
- 2026Every pooling rule has its world: matching probability combination rules to situations and stakes11 Aug 2026
- 2026Unanimity Without Persuasion: A Single Round of Debate Erases the Disagreement That Verification Needs10 Aug 2026
- 2026Look Before You Leap: Pre-Action Verification for LLM Agents9 Aug 2026
- 2026Ouroboros: A Self-Developing Frontier Coding Agent with Reviewed Core Evolution8 Aug 2026
- 2026Socially Grounded Agentic AI: Coordinating Plural Perspectives through Social Theory4 Aug 2026
- 2026Does the Competitive Component of Adversarial Self-Play Improve Legal Reasoning? A Controlled Negative Result3 Aug 2026
- 2026Position: It's Time to Optimize LLMs for Self-Consistency31 Jul 2026
- 2026Beyond Component Testing: Validating Agentic AI Systems31 Jul 2026
- 2026When Do Agent Loops Mistake Stagnation for Progress? Self-Evaluation Bias and Externally Grounded Verification in Long-Running Autonomous LLM Agent Loops27 Jul 2026
- 2026From RLVR to RLSVR: Task Transformation Induces Self-Verifiable Rewards for Open-Ended LLM Self-Improvement26 Jul 2026
- 2026Do LLM Debates Repeat Arguments Differently Across Languages?26 Jul 2026
- 2026SFGA: A Statistics-First Gating Architecture with Adjudicative Escalation for Trustworthy SFT Data Procurement21 Jul 2026
- 2026MADA-RL: Multi-Agent Debate-Aware Reinforcement Learning for Parameter-Efficient Reasoning in Compact Models20 Jul 2026
- 2026Automatic Hard Example Synthesis with Multi-Level Agentic Data Curation15 Jul 2026
- 2026DREA: Decoupled Reasoning and Exploration Agents for Repository-Level Vulnerability Detection15 Jul 2026
- 2026TRACE: An Operational Reasoning Schema for Auditable Agentic Commitments14 Jul 2026
50 newest of 384 All 384 (JSON)
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,422
- 2022Improving alignment of dialogue agents via targeted human judgementscited by 527
- 2023Cognitive Architectures for Language Agentscited by 422
- 2025A sketch of an AI control safety casecited by 36
- 2025The Traitors: Deception and Trust in Multi-Agent Language Model Simulationscited by 30
- 2025KARMA: Leveraging Multi-Agent LLMs for Automated Knowledge Graph Enrichmentcited by 26
- 2024ACC-Collab: An Actor-Critic Approach to Multi-Agent LLM Collaborationcited by 22
- 2025Multiple LLM Agents Debate for Equitable Cultural Alignmentcited by 20
- 2025When AIs Judge AIs: The Rise of Agent-as-a-Judge Evaluation for LLMscited by 16
- 2025When Persuasion Overrides Truth in Multi-Agent LLM Debates: Introducing a Confidence-Weighted Persuasion Override Rate (CW-POR)cited by 12
- 2026Autonomous Agents on Blockchains: Standards, Execution Models, and Trust Boundariescited by 12
- 2025The Alignment Waltz: Jointly Training Agents to Collaborate for Safetycited by 10
12 most cited of 79 All 79 (JSON)
- 2026Verification and Self-Improvement in Agentic AI: Foundations and Limits7 Oct 2026
- 2026Groundability, Not Scale Alone: When Weak Reviewers Can Audit Strong Coding Agents1 Oct 2026
- 2026VeriHarness: Scaling Agentic Verification for Long-Horizon Tasks1 Oct 2026
- 2026MiniRep: Robust Reputation-Based Aggregation for Multi-Agent Debate30 Sep 2026
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems30 Sep 2026
- 2026Measurement Boundaries in LLM Financial Agent Evaluation: Fixed-Tape Execution and Multi-Defect Auditing26 Sep 2026
- 2026Black-Box Auditing of Epistemic Reliability in Multi-Agent Debate Distillation26 Sep 2026
- 2026Trustworthy Agentic AI: Failure Modes, Mitigation Strategies, and a Lifecycle Framework for Autonomous LLM Systems19 Sep 2026
- 2026Why LLM Agents Collapse Without Oversight: The Enforcement Gap as the Mechanism Behind Emergence World Failures14 Sep 2026
- 2026What Does Multi-Agent LLM Debate Actually Change? A Layered Analysis of Disagreement and Answer Quality7 Sep 2026
- 2026Uncertainty Quantification for LLM Agents: A Taxonomy, an Evaluation Protocol, and an Empirical Study7 Sep 2026
- 2026A Structured Debate-Mixture-of-Agents Framework for Complex Clinical Diagnostic Decision Support4 Sep 2026
12 newest of 79 All 79 (JSON)
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,722
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 630
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 445
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 401
- 2023UltraFeedback: Boosting Language Models with Scaled AI Feedbackcited by 394
- 2024Debating with More Persuasive LLMs Leads to More Truthful Answerscited by 255
- 2023Large Language Model Alignment: A Surveycited by 241
12 most cited of 57 All 57 (JSON)
- 2026Debate Training Reduces Reward Hacking in RLAIF18 Aug 2026
- 2026Jagged Judges: Epistemic Stability Under Perturbation, Pressure, and Persistence12 Aug 2026
- 2026Attention Limited Reward Learning6 Jul 2026
- 2026Democratic ICAI: Debating Our Way to Steering Principles from Preferences26 Jun 2026
- 2026Reinforcement Learning Towards Broadly and Persistently Beneficial Models22 Jun 2026
- 2026SpecAlign: Efficient Specification-Grounded Alignment of Large Language Models via Synthetic Data15 Jun 2026
- 2026Stayin' Aligned Over Time: Towards Longitudinal Human-LLM Alignment via Contextual Reflection and Privacy-Preserving Behavioral Data5 May 2026
- 2026Uncertainty-Aware Reward Discounting for Mitigating Reward Hacking29 Apr 2026
- 2026Durable Evaluation Framework: Adversarial Arbitration for Sycophancy Reduction in Large Language Models21 Apr 2026
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challenges15 Apr 2026
- 2026Constructive Alignment: Governing Preference Dynamics in Human-AI Interaction1 Apr 2026
- 2026Efficient Exploration at Scale18 Mar 2026
12 newest of 57 All 57 (JSON)
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,739
- 2022Solving math word problems with process- and outcome-based feedbackcited by 871
- 2023RAFT: Reward rAnked FineTuning for Generative Foundation Model Alignmentcited by 672
- 2023Can ChatGPT Defend its Belief in Truth? Evaluating LLM Reasoning via Debatecited by 92
- 2023Can Large Language Models Explain Themselves? A Study of LLM-Generated Self-Explanationscited by 90
- 2025Talk Isn't Always Cheap: Understanding Failure Modes in Multi-Agent Debatecited by 63
- 2025Multi-Agent Verification: Scaling Test-Time Compute with Multiple Verifierscited by 58
- 2025SiriuS: Self-improving Multi-agent Systems via Bootstrapped Reasoningcited by 41
- 2025Teaching Language Models to Critique via Reinforcement Learningcited by 38
- 2023Boosted Prompt Ensembles for Large Language Modelscited by 36
- 2025Rethinking Thinking Tokens: LLMs as Improvement Operatorscited by 20
12 most cited of 54 All 54 (JSON)
- 2026Proof-Carrying Cognition: Closing the Verification Gap with Reality-Settled Reward9 Sep 2026
- 2026Measuring AI Accountability Through Argumentation Analysis: Can Model Reasoning Withstand Scrutiny?4 Sep 2026
- 2026The Answer Is Not the Argument31 Aug 2026
- 2026CoEvo: Oracle-Grounded Self-Evolution of a Single Model for Multi-Step Causal Reasoning18 Aug 2026
- 2026Position: It's Time to Optimize LLMs for Self-Consistency31 Jul 2026
- 2026From RLVR to RLSVR: Task Transformation Induces Self-Verifiable Rewards for Open-Ended LLM Self-Improvement26 Jul 2026
- 2026MADA-RL: Multi-Agent Debate-Aware Reinforcement Learning for Parameter-Efficient Reasoning in Compact Models20 Jul 2026
- 2026DREA: Decoupled Reasoning and Exploration Agents for Repository-Level Vulnerability Detection15 Jul 2026
- 2026TRACE: An Operational Reasoning Schema for Auditable Agentic Commitments14 Jul 2026
- 2026Budgeted Act-or-Defer Multi-Agent LLM Deliberation with Local Reliability Bounds28 Jun 2026
- 2026Narration-of-Thought: Inference-Time Scaffolding for Defeasible Ethical Reasoning in Large Language Models24 Jun 2026
- 2026The Hitchhiker's Guide to Agentic AI: From Foundations to Systems22 Jun 2026
12 newest of 54 All 54 (JSON)
- 2024MLLM-Protector: Ensuring MLLM's Safety without Hurting Performancecited by 111
- 2024JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Modelscited by 67
- 2024CoCA: Regaining Safety-awareness of Multimodal Large Language Models with Constitutional Calibrationcited by 30
- 2024The Superalignment of Superhuman Intelligence with Large Language Modelscited by 2
- 2025Debate with Images: Detecting Deceptive Behaviors in Multimodal Large Language Modelscited by 0
- 2026Automatic Hard Example Synthesis with Multi-Level Agentic Data Curationcited by 0
- 2026Automatic Hard Example Synthesis with Multi-Level Agentic Data Curation15 Jul 2026
- 2025Debate with Images: Detecting Deceptive Behaviors in Multimodal Large Language Models29 Nov 2025
- 2024The Superalignment of Superhuman Intelligence with Large Language Models15 Dec 2024
- 2024CoCA: Regaining Safety-awareness of Multimodal Large Language Models with Constitutional Calibration17 Sep 2024
- 2024JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models26 Jun 2024
- 2024MLLM-Protector: Ensuring MLLM's Safety without Hurting Performance5 Jan 2024
- 2024Training Language Models to Win Debates with Self-Play Improves Judge Accuracycited by 16
- 2026SPADE: Self-Play in Adaptive Synthetic Executable Environmentscited by 6
- 2026Self-Improvement of Large Language Models: A Technical Overview and Future Outlookcited by 5
- 2025LiteLong: Resource-Efficient Long-Context Data Synthesis for LLMscited by 3
- 2026Self-Improvement as Coherence Optimization: A Theoretical Accountcited by 1
- 2026MathDuels: A Self-Play Benchmark That Growscited by 1
- 2026SPADE: Self-Play in Adaptive Synthetic Executable Environments19 Aug 2026
- 2026MathDuels: A Self-Play Benchmark That Grows23 Apr 2026
- 2026Self-Improvement of Large Language Models: A Technical Overview and Future Outlook26 Mar 2026
- 2026Self-Improvement as Coherence Optimization: A Theoretical Account20 Jan 2026
- 2025LiteLong: Resource-Efficient Long-Context Data Synthesis for LLMs19 Sep 2025
- 2024Training Language Models to Win Debates with Self-Play Improves Judge Accuracy25 Sep 2024
- 2023AI Control: Improving Safety Despite Intentional Subversioncited by 207
- 2025Scaling Laws For Scalable Oversightcited by 18
- 2024Purple-teaming LLMs with Adversarial Defender Trainingcited by 4
- 2025Scaling Laws For Scalable Oversight25 Apr 2025
- 2024Purple-teaming LLMs with Adversarial Defender Training1 Jul 2024
- 2023AI Control: Improving Safety Despite Intentional Subversion12 Dec 2023
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
- 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,199
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 733
- 2022Self-critiquing models for assisting human evaluatorscited by 372
- 2021Unsolved Problems in ML Safetycited by 291
- 2022Teaching language models to support answers with verified quotescited by 290
- 2021Recursively Summarizing Books with Human Feedbackcited by 287
- 2023Challenges and Applications of Large Language Modelscited by 251
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 246
- 2022Measuring Progress on Scalable Oversight for Large Language Modelscited by 212
- 2022Will we run out of data? Limits of LLM scaling based on human-generated datacited by 187
12 most cited of 177 All 177 (JSON)
- 2026Can AI Oversight Be Zero Knowledge?1 Oct 2026
- 2026How the Audit Rule Shapes Faithful Factor Explanations in LLMs1 Oct 2026
- 2026Improving scalable oversight with co-trained monitors28 Sep 2026
- 2026Contract monitoring: governing AI via separation of powers25 Sep 2026
- 2026How does Adversarial Influence Scale in Multi-Agent Systems?24 Sep 2026
- 2026When Honesty is Not Enough in AI Debate24 Sep 2026
- 2026Human-LLM Deliberation as Interactive Proof: Conditions for Verifiability Without Transparency21 Sep 2026
- 2026The Wisdom of Artificial Deliberative Crowds18 Sep 2026
- 2026A Calibrated Reflection Approach for Enhancing Confidence Estimation in LLMs3 Sep 2026
- 2026Towards Computational Provenance: Carrying Causal-State Evidence in Generated Text17 Aug 2026
- 2026Every pooling rule has its world: matching probability combination rules to situations and stakes11 Aug 2026
- 2026Unanimity Without Persuasion: A Single Round of Debate Erases the Disagreement That Verification Needs10 Aug 2026
12 newest of 177 All 177 (JSON)