Honesty Is the Best Policy: Defining and Mitigating AI Deception
Not on the map. Why?
Abstract (arXiv)
Deceptive agents are a challenge for the safety, trustworthiness, and cooperation of AI systems. We focus on the problem that agents might deceive in order to achieve their goals (for instance, in our experiments with language models, the goal of being evaluated as truthful). There are a number of existing definitions of deception in the literature on game theory and symbolic AI, but there is no overarching theory of deception for learning agents in games. We introduce a formal definition of deception in structural causal games, grounded in the philosophy literature, and applicable to real-world machine learning systems. Several examples and results illustrate that our formal definition aligns with the philosophical and commonsense meaning of deception. Our main technical result is to provide graphical criteria for deception. We show, experimentally, that these results can be used to mitigate deception in reinforcement learning agents and language models.
Key facts. Cited by 40 papers in the map (data through 14 Oct 2026). Builds on 40 of its 128 references that are in the map. First posted on arXiv 3 Dec 2023.
Builds on
40 of 128 references.
References · 40
- 2017Attention Is All You Needcited by 60,361
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2022Training Compute-Optimal Large Language Modelscited by 3,019
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,150
- 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,202
- 2022In-context Learning and Induction Headscited by 964
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 836
- 2022Using DeepSpeed and Megatron to Train Megatron-Turing NLG 530B, A Large-Scale Generative Language Modelcited by 559
28 more
- 2017Certified Defenses for Data Poisoning Attackscited by 303
- 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 258
- 2023An Overview of Catastrophic AI Riskscited by 222
- 2017Deal or No Deal? End-to-End Learning for Negotiation Dialoguescited by 209
- 2018Do GANs leave artificial fingerprints?cited by 190
- 2022Talking About Large Language Modelscited by 175
- 2020Open Problems in Cooperative AIcited by 168
- 2021Alignment of Language Agentscited by 168
- 2023Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigationscited by 158
- 2023Taken out of context: On measuring situational awareness in LLMscited by 143
- 2022Mastering the Game of Stratego with Model-Free Multiagent Reinforcement Learningcited by 131
- 2021Truthful AI: Developing and governing AI that does not liecited by 113
- 2019Reward Tampering Problems and Solutions in Reinforcement Learning: A Causal Influence Diagram Perspectivecited by 108
- 2022Is Power-Seeking AI an Existential Risk?cited by 105
- 2023How to Catch an AI Liar: Lie Detection in Black-Box LLMs by Asking Unrelated Questionscited by 83
- 2023Still No Lie Detector for Language Models: Probing Empirical and Conceptual Roadblockscited by 78
- 2021Agent Incentives: A Causal Perspectivecited by 51
- 2023Characterizing Manipulation from AI Systemscited by 43
- 2016The AGI Containment Problemcited by 36
- 2018Towards Formal Definitions of Blameworthiness, Intention, and Moral Responsibilitycited by 32
- 2022Discovering Agentscited by 28
- 2022Path-Specific Objectives for Safer Agent Incentivescited by 20
- 2023Reasoning about Causality in Gamescited by 20
- 2021Equilibrium Refinements for Multi-Agent Influence Diagrams: Theory and Practicecited by 9
- 2021Definitions of intent suitable for algorithmscited by 8
- 2018Unpacking the Social Media Bot: A Typology to Guide Research and Policycited by 7
- 2020Studying Dishonest Intentions in Brazilian Portuguese Textscited by 2
- 2021Extending counterfactual accounts of intent to include oblique intentcited by 2
Built on by
Citing papers per year: 2024: 17; 2025: 14; 2026: 9.
40 papers.
Sort:
By area:
- 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluationscited by 145
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganographycited by 113
- 2024Robust agents learn causal world modelscited by 81
- 2024AI-LieDar: Examine the Trade-off Between Utility and Truthfulness in LLM Agentscited by 31
- 2024Standards for Belief Representations in LLMscited by 30
- 2024The Probabilities Also Matter: A More Faithful Metric for Faithfulness of Free-Text Explanations in Large Language Modelscited by 29
- 2024The Reasons that Agents Act: Intention and Instrumental Goalscited by 23
- 2024A Survey on the Honesty of Large Language Modelscited by 23
- 2025General agents contain world modelscited by 17
- 2024From Imitation to Introspection: Probing Self-Consciousness in Language Modelscited by 14
- 2025Difficulties with Evaluating a Deception Detector for AIscited by 13
- 2025Seven Security Challenges in Cross-domain Multi-agent LLM Systemscited by 12
28 more
- 2024Language Models can Subtly Deceive Without Lying: A Case Study on Strategic Phrasing in Legislationcited by 10
- 2025The Secret Agenda: LLMs Strategically Lie and Our Current Safety Tools Are Blindcited by 8
- 2024Measuring Goal-Directednesscited by 7
- 2025Collaborate, Deliberate, Evaluate: How LLM Alignment Affects Coordinated Multi-Agent Outcomescited by 7
- 2025LH-Deception: Simulating and Understanding LLM Deceptive Behaviors in Long-Horizon Interactionscited by 7
- 2024Towards Safe and Honest AI Agents with Neural Self-Other Overlapcited by 6
- 2024An Assessment of Model-On-Model Deceptioncited by 5
- 2025OpenDeception: Learning Deception and Trust in Human-AI Interaction via Multi-Agent Simulationcited by 5
- 2025Exploring Consciousness in LLMs: A Systematic Survey of Theories, Implementations, and Frontier Riskscited by 5
- 2025Enhancing LLM Agent Safety via Causal Influence Promptingcited by 5
- 2025Beyond Prompt-Induced Lies: Investigating LLM Deception on Benign Promptscited by 5
- 2024Observation Interference in Partially Observable Assistance Gamescited by 4
- 2024Possible Principles for Aligned Structure Learning Agentscited by 3
- 2025A Principle of Targeted Intervention for Multi-Agent Reinforcement Learningcited by 3
- 2025PRISON: Unmasking the Criminal Potential of Large Language Modelscited by 2
- 2025Learning "Partner-Aware" Collaborators in Multi-Party Collaborationcited by 2
- 2026Persuasion Attacks Can Decrease Effectiveness of CoT Monitoringcited by 2
- 2026Knowledge-Verified Emergent Deception in LLM Agents Under Conflicting Incentivescited by 2
- 2024Attaining Human`s Desirable Outcomes in Human-AI Interaction via Structural Causal Gamescited by 1
- 2025Higher-Order Belief in Incomplete Information MAIDscited by 1
- 2026SPADE-Bench: Evaluating Spontaneous Strategic Deception in Agents via Plan-Action Divergencecited by 1
- 2026The Impossibility of Eliciting Latent Knowledgecited by 1
- 2024Evaluating Language Model Character Traitscited by 0
- 2026Intentional Deception as Controllable Capability in LLM Agentscited by 0
- 2026DeceptGuard :A Constitutional Oversight Framework For Detecting Deception in LLM Agentscited by 0
- 2026A Model of Multi-turn Human Persuadability Using Probabilistic Belief Tracingcited by 0
- 2026When Agents Lie: Premeditation, Persistence, and Exploitation in Repeated Gamescited by 0
- 2026Flout at Your Own Risk: LLMs Struggle with Pragmatic Cooperativity Under Epistemic Asymmetrycited by 0
- 2026Knowledge-Verified Emergent Deception in LLM Agents Under Conflicting Incentives26 Aug 2026
- 2026Flout at Your Own Risk: LLMs Struggle with Pragmatic Cooperativity Under Epistemic Asymmetry13 Jul 2026
- 2026Persuasion Attacks Can Decrease Effectiveness of CoT Monitoring9 Jul 2026
- 2026When Agents Lie: Premeditation, Persistence, and Exploitation in Repeated Games6 Jul 2026
- 2026The Impossibility of Eliciting Latent Knowledge10 Jun 2026
- 2026A Model of Multi-turn Human Persuadability Using Probabilistic Belief Tracing3 Jun 2026
- 2026SPADE-Bench: Evaluating Spontaneous Strategic Deception in Agents via Plan-Action Divergence1 Jun 2026
- 2026DeceptGuard :A Constitutional Oversight Framework For Detecting Deception in LLM Agents14 Mar 2026
- 2026Intentional Deception as Controllable Capability in LLM Agents8 Mar 2026
- 2025Difficulties with Evaluating a Deception Detector for AIs27 Nov 2025
- 2025Learning "Partner-Aware" Collaborators in Multi-Party Collaboration26 Oct 2025
- 2025A Principle of Targeted Intervention for Multi-Agent Reinforcement Learning20 Oct 2025
28 more
- 2025LH-Deception: Simulating and Understanding LLM Deceptive Behaviors in Long-Horizon Interactions5 Oct 2025
- 2025The Secret Agenda: LLMs Strategically Lie and Our Current Safety Tools Are Blind23 Sep 2025
- 2025Collaborate, Deliberate, Evaluate: How LLM Alignment Affects Coordinated Multi-Agent Outcomes7 Sep 2025
- 2025Beyond Prompt-Induced Lies: Investigating LLM Deception on Benign Prompts8 Aug 2025
- 2025Enhancing LLM Agent Safety via Causal Influence Prompting1 Jul 2025
- 2025PRISON: Unmasking the Criminal Potential of Large Language Models19 Jun 2025
- 2025General agents contain world models2 Jun 2025
- 2025Seven Security Challenges in Cross-domain Multi-agent LLM Systems28 May 2025
- 2025Exploring Consciousness in LLMs: A Systematic Survey of Theories, Implementations, and Frontier Risks26 May 2025
- 2025OpenDeception: Learning Deception and Trust in Human-AI Interaction via Multi-Agent Simulation18 Apr 2025
- 2025Higher-Order Belief in Incomplete Information MAIDs8 Mar 2025
- 2024Observation Interference in Partially Observable Assistance Games23 Dec 2024
- 2024Towards Safe and Honest AI Agents with Neural Self-Other Overlap20 Dec 2024
- 2024Measuring Goal-Directedness6 Dec 2024
- 2024From Imitation to Introspection: Probing Self-Consciousness in Language Models24 Oct 2024
- 2024Evaluating Language Model Character Traits5 Oct 2024
- 2024Possible Principles for Aligned Structure Learning Agents30 Sep 2024
- 2024A Survey on the Honesty of Large Language Models27 Sep 2024
- 2024AI-LieDar: Examine the Trade-off Between Utility and Truthfulness in LLM Agents13 Sep 2024
- 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluations11 Jun 2024
- 2024Standards for Belief Representations in LLMs31 May 2024
- 2024Attaining Human`s Desirable Outcomes in Human-AI Interaction via Structural Causal Games26 May 2024
- 2024An Assessment of Model-On-Model Deception10 May 2024
- 2024Language Models can Subtly Deceive Without Lying: A Case Study on Strategic Phrasing in Legislation7 May 2024
- 2024The Probabilities Also Matter: A More Faithful Metric for Faithfulness of Free-Text Explanations in Large Language Models4 Apr 2024
- 2024Robust agents learn causal world models16 Feb 2024
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganography12 Feb 2024
- 2024The Reasons that Agents Act: Intention and Instrumental Goals11 Feb 2024
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganographycited by 113
- 2024AI-LieDar: Examine the Trade-off Between Utility and Truthfulness in LLM Agentscited by 31
- 2024The Reasons that Agents Act: Intention and Instrumental Goalscited by 23
- 2025Seven Security Challenges in Cross-domain Multi-agent LLM Systemscited by 12
- 2025Collaborate, Deliberate, Evaluate: How LLM Alignment Affects Coordinated Multi-Agent Outcomescited by 7
- 2024Towards Safe and Honest AI Agents with Neural Self-Other Overlapcited by 6
- 2025OpenDeception: Learning Deception and Trust in Human-AI Interaction via Multi-Agent Simulationcited by 5
- 2025Enhancing LLM Agent Safety via Causal Influence Promptingcited by 5
- 2025Learning "Partner-Aware" Collaborators in Multi-Party Collaborationcited by 2
- 2026Knowledge-Verified Emergent Deception in LLM Agents Under Conflicting Incentivescited by 2
- 2026SPADE-Bench: Evaluating Spontaneous Strategic Deception in Agents via Plan-Action Divergencecited by 1
- 2026Intentional Deception as Controllable Capability in LLM Agentscited by 0
12 most cited of 14 All 14 (JSON)
- 2026Knowledge-Verified Emergent Deception in LLM Agents Under Conflicting Incentives26 Aug 2026
- 2026When Agents Lie: Premeditation, Persistence, and Exploitation in Repeated Games6 Jul 2026
- 2026SPADE-Bench: Evaluating Spontaneous Strategic Deception in Agents via Plan-Action Divergence1 Jun 2026
- 2026DeceptGuard :A Constitutional Oversight Framework For Detecting Deception in LLM Agents14 Mar 2026
- 2026Intentional Deception as Controllable Capability in LLM Agents8 Mar 2026
- 2025Learning "Partner-Aware" Collaborators in Multi-Party Collaboration26 Oct 2025
- 2025Collaborate, Deliberate, Evaluate: How LLM Alignment Affects Coordinated Multi-Agent Outcomes7 Sep 2025
- 2025Enhancing LLM Agent Safety via Causal Influence Prompting1 Jul 2025
- 2025Seven Security Challenges in Cross-domain Multi-agent LLM Systems28 May 2025
- 2025OpenDeception: Learning Deception and Trust in Human-AI Interaction via Multi-Agent Simulation18 Apr 2025
- 2024Towards Safe and Honest AI Agents with Neural Self-Other Overlap20 Dec 2024
- 2024AI-LieDar: Examine the Trade-off Between Utility and Truthfulness in LLM Agents13 Sep 2024
12 newest of 14 All 14 (JSON)
- 2024Robust agents learn causal world modelscited by 81
- 2025General agents contain world modelscited by 17
- 2025General agents contain world models2 Jun 2025
- 2024Robust agents learn causal world models16 Feb 2024
- 2024A Survey on the Honesty of Large Language Modelscited by 23
- 2024A Survey on the Honesty of Large Language Models27 Sep 2024
- 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluationscited by 145
- 2024Standards for Belief Representations in LLMscited by 30
- 2024The Probabilities Also Matter: A More Faithful Metric for Faithfulness of Free-Text Explanations in Large Language Modelscited by 29
- 2024From Imitation to Introspection: Probing Self-Consciousness in Language Modelscited by 14
- 2025Difficulties with Evaluating a Deception Detector for AIscited by 13
- 2024Language Models can Subtly Deceive Without Lying: A Case Study on Strategic Phrasing in Legislationcited by 10
- 2025The Secret Agenda: LLMs Strategically Lie and Our Current Safety Tools Are Blindcited by 8
- 2024Measuring Goal-Directednesscited by 7
- 2025LH-Deception: Simulating and Understanding LLM Deceptive Behaviors in Long-Horizon Interactionscited by 7
- 2024An Assessment of Model-On-Model Deceptioncited by 5
- 2025Exploring Consciousness in LLMs: A Systematic Survey of Theories, Implementations, and Frontier Riskscited by 5
- 2024Observation Interference in Partially Observable Assistance Gamescited by 4
12 most cited of 21 All 21 (JSON)
- 2026Flout at Your Own Risk: LLMs Struggle with Pragmatic Cooperativity Under Epistemic Asymmetry13 Jul 2026
- 2026The Impossibility of Eliciting Latent Knowledge10 Jun 2026
- 2026A Model of Multi-turn Human Persuadability Using Probabilistic Belief Tracing3 Jun 2026
- 2025Difficulties with Evaluating a Deception Detector for AIs27 Nov 2025
- 2025A Principle of Targeted Intervention for Multi-Agent Reinforcement Learning20 Oct 2025
- 2025LH-Deception: Simulating and Understanding LLM Deceptive Behaviors in Long-Horizon Interactions5 Oct 2025
- 2025The Secret Agenda: LLMs Strategically Lie and Our Current Safety Tools Are Blind23 Sep 2025
- 2025PRISON: Unmasking the Criminal Potential of Large Language Models19 Jun 2025
- 2025Exploring Consciousness in LLMs: A Systematic Survey of Theories, Implementations, and Frontier Risks26 May 2025
- 2025Higher-Order Belief in Incomplete Information MAIDs8 Mar 2025
- 2024Observation Interference in Partially Observable Assistance Games23 Dec 2024
- 2024Measuring Goal-Directedness6 Dec 2024
12 newest of 21 All 21 (JSON)