Escalation Risks from Language Models in Military and Diplomatic Decision-Making
Not on the map. Why?
Abstract (arXiv)
Governments are increasingly considering integrating autonomous AI agents in high-stakes military and foreign-policy decision-making, especially with the emergence of advanced generative AI models like GPT-4. Our work aims to scrutinize the behavior of multiple AI agents in simulated wargames, specifically focusing on their predilection to take escalatory actions that may exacerbate multilateral conflicts. Drawing on political science and international relations literature about escalation dynamics, we design a novel wargame simulation and scoring framework to assess the escalation risks of actions taken by these agents in different scenarios. Contrary to prior studies, our research provides both qualitative and quantitative insights and focuses on large language models (LLMs). We find that all five studied off-the-shelf LLMs show forms of escalation and difficult-to-predict escalation patterns. We observe that models tend to develop arms-race dynamics, leading to greater conflict, and in rare cases, even to the deployment of nuclear weapons. Qualitatively, we also collect the models' reported reasonings for chosen actions and observe worrying justifications based on deterrence and first-strike tactics. Given the high stakes of military and foreign-policy contexts, we recommend further examination and cautious consideration before deploying autonomous language model agents for strategic military or diplomatic decision-making.
Key facts. Cited by 61 papers in the map (data through 7 Oct 2026). Builds on 1 of its 27 references that are in the map. First posted on arXiv 7 Jan 2024.
Builds on
1 of 27 references.
References · 1
Built on by
Citing papers per year: 2024: 16; 2025: 21; 2026: 24.
61 papers.
Sort:
By area:
- 2024BetterBench: Assessing AI Benchmarks, Uncovering Issues, and Establishing Best Practicescited by 112
- 2024Feedback Loops With Language Models Drive In-Context Reward Hackingcited by 70
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agentscited by 66
- 2024Risks from Language Models for Automated Mental Healthcare: Ethics and Structure for Implementationcited by 27
- 2024(Ir)rationality and Cognitive Biases in Large Language Modelscited by 23
- 2024Human vs. Machine: Behavioral Differences Between Expert Humans and Language Models in Wargame Simulationscited by 20
- 2024On Large Language Models in National Security Applicationscited by 18
- 2024AI Risk Management Should Incorporate Both Safety and Securitycited by 17
- 2026Colosseum: Auditing Collusion in Cooperative Multi-Agent Systemscited by 17
- 2024The LLM Effect: Are Humans Truly Using LLMs, or Are They Being Influenced By Them Instead?cited by 14
- 2024AI-Powered Autonomous Weapons Risk Geopolitical Instability and Threaten AI Researchcited by 13
- 2024Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilitiescited by 12
38 more
- 2024Measuring Free-Form Decision-Making Inconsistency of Language Models in Military Crisis Simulationscited by 11
- 2025Evaluating Generalization Capabilities of LLM-Based Agents in Mixed-Motive Scenarios Using Concordiacited by 11
- 2024Societal Adaptation to Advanced AIcited by 10
- 2024OpenEval: Benchmarking Chinese LLMs across Capability, Alignment and Safetycited by 9
- 2024Open-Ended Wargames with Large Language Modelscited by 8
- 2025A Survey of Theory of Mind in Large Language Models: Evaluations, Representations, and Safety Riskscited by 8
- 2025The Role of Social Learning and Collective Norm Formation in Fostering Cooperation in LLM Multi-Agent Systemscited by 8
- 2025Critical Foreign Policy Decisions (CFPD)-Benchmark: Measuring Diplomatic Preferences in Large Language Modelscited by 7
- 2026AI Arms and Influence: Frontier Models Exhibit Sophisticated Reasoning in Simulated Nuclear Crisescited by 7
- 2025Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibilitycited by 6
- 2024Large Language Models in Politics and Democracy: A Comprehensive Surveycited by 5
- 2024Markovian Transformers for Informative Language Modelingcited by 4
- 2025The Prompt War: How AI Decides on a Military Interventioncited by 4
- 2026Human Values Matter: Investigating How Misalignment Shapes Collective Behaviors in LLM Agent Communitiescited by 4
- 2025Military AI Needs Technically-Informed Regulation to Safeguard AI Research and its Applicationscited by 3
- 2025Integrators at War: Mediating in AI-assisted Resort-to-Force Decisionscited by 2
- 2025Identifying Cooperative Personalities in Multi-agent Contexts through Personality Steering with Representation Engineeringcited by 2
- 2025Evaluating Explanations: An Explanatory Virtues Framework for Mechanistic Interpretability -- The Strange Science Part I.iicited by 2
- 2025Abstract Counterfactuals for Language Model Agentscited by 2
- 2025Military AI Cyber Agents (MAICAs) Constitute a Global Threat to Critical Infrastructurecited by 2
- 2025Against racing to AGI: Cooperation, deterrence, and catastrophic riskscited by 2
- 2025Managing Escalation in Off-the-Shelf Large Language Modelscited by 2
- 2026A Scalable Entity-Based Framework for Auditing Bias in Large Language Modelscited by 2
- 2026CivBench: Progress-Based Evaluation for LLMs' Strategic Decision-Making in Civilization Vcited by 2
- 2025Social preferences with unstable interactive reasoning: Large language models in economic trust gamescited by 1
- 2025The Problem of Algorithmic Collisions: Mitigating Unforeseen Risks in a Connected Worldcited by 1
- 2025Mitigation of Gender and Ethnicity Bias in AI-Generated Stories through Model Explanationscited by 1
- 2025Shall We Play a Game? Language Models for Open-ended Wargamescited by 1
- 2025A Criminology of Machinescited by 1
- 2026Effects of personality steering on cooperative behavior in Large Language Model agentscited by 1
- 2026Illusions of the Gold Standard: A Large-scale Analysis of Human Evaluation Protocols for Long-form Text Generationcited by 1
- 2026Metacognition in LLMs: Foundations, Progress, and Opportunitiescited by 1
- 2025Governing Automated Strategic Intelligencecited by 0
- 2026Ignore All Previous Instructions: Jailbreaking as a de-escalatory peace building practise to resist LLM social media botscited by 0
- 2026Implementing surrogate goals for safer bargaining in LLM-based agentscited by 0
- 2026The Weaponization of Computer Vision: Tracing Military-Surveillance Ties through Conference Sponsorshipcited by 0
- 2026Multi-Agent Strategic Games with LLMscited by 0
- 2026Human Decision-Making with Persuasive and Narrative LLM Explanationscited by 0
50 most cited of 61 All 61 (JSON)
- 2026Language models judge war differently when tested for alignment4 Sep 2026
- 2026GPS-Bench: A Governance Policy Benchmark for Automating Policy Analysis3 Sep 2026
- 2026Causal Behavioral Evaluation of AI Agents at Scale via Automated Behavioral Science10 Aug 2026
- 2026No One Wins in Nuclear War: A Social Simulation of Military Decision-making3 Aug 2026
- 2026Position: AI Is Not Ready for Strategic Conflicts31 Jul 2026
- 2026ToxScreen: Detecting Whether an LLM Has Been Poisoned29 Jul 2026
- 2026Don't Want Your LLM to Recommend Nuclear Strike? Try Asking It in Japanese21 Jul 2026
- 2026Metacognition in LLMs: Foundations, Progress, and Opportunities13 Jul 2026
- 2026The Foreign Policy AI Evaluation Gap3 Jul 2026
- 2026Enhancing Decision-Making with Large Language Models through Multi-Agent Fictitious Play17 Jun 2026
- 2026AI Researchers Must Help Lead Arms Control to Mitigate Military AI Risks10 Jun 2026
- 2026The Shibboleth Effect: Auditing the Cross-Lingual Distributional Skew of Large Language Models9 Jun 2026
38 more
- 2026Illusions of the Gold Standard: A Large-scale Analysis of Human Evaluation Protocols for Long-form Text Generation6 Jun 2026
- 2026Human Decision-Making with Persuasive and Narrative LLM Explanations22 May 2026
- 2026Multi-Agent Strategic Games with LLMs5 May 2026
- 2026The Weaponization of Computer Vision: Tracing Military-Surveillance Ties through Conference Sponsorship9 Apr 2026
- 2026CivBench: Progress-Based Evaluation for LLMs' Strategic Decision-Making in Civilization V9 Apr 2026
- 2026Human Values Matter: Investigating How Misalignment Shapes Collective Behaviors in LLM Agent Communities7 Apr 2026
- 2026Implementing surrogate goals for safer bargaining in LLM-based agents6 Apr 2026
- 2026Ignore All Previous Instructions: Jailbreaking as a de-escalatory peace building practise to resist LLM social media bots2 Mar 2026
- 2026Colosseum: Auditing Collusion in Cooperative Multi-Agent Systems16 Feb 2026
- 2026AI Arms and Influence: Frontier Models Exhibit Sophisticated Reasoning in Simulated Nuclear Crises16 Feb 2026
- 2026A Scalable Entity-Based Framework for Auditing Bias in Large Language Models18 Jan 2026
- 2026Effects of personality steering on cooperative behavior in Large Language Model agents8 Jan 2026
- 2025Evaluating Generalization Capabilities of LLM-Based Agents in Mixed-Motive Scenarios Using Concordia3 Dec 2025
- 2025A Criminology of Machines4 Nov 2025
- 2025The Role of Social Learning and Collective Norm Formation in Fostering Cooperation in LLM Multi-Agent Systems16 Oct 2025
- 2025Shall We Play a Game? Language Models for Open-ended Wargames21 Sep 2025
- 2025Governing Automated Strategic Intelligence21 Sep 2025
- 2025Mitigation of Gender and Ethnicity Bias in AI-Generated Stories through Model Explanations3 Sep 2025
- 2025Managing Escalation in Off-the-Shelf Large Language Models1 Aug 2025
- 2025Against racing to AGI: Cooperation, deterrence, and catastrophic risks29 Jul 2025
- 2025Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility15 Jul 2025
- 2025The Prompt War: How AI Decides on a Military Intervention8 Jul 2025
- 2025Military AI Cyber Agents (MAICAs) Constitute a Global Threat to Critical Infrastructure12 Jun 2025
- 2025Abstract Counterfactuals for Language Model Agents3 Jun 2025
- 2025The Problem of Algorithmic Collisions: Mitigating Unforeseen Risks in a Connected World26 May 2025
- 2025Military AI Needs Technically-Informed Regulation to Safeguard AI Research and its Applications23 May 2025
- 2025Social preferences with unstable interactive reasoning: Large language models in economic trust games16 May 2025
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents4 May 2025
- 2025Evaluating Explanations: An Explanatory Virtues Framework for Mechanistic Interpretability -- The Strange Science Part I.ii2 May 2025
- 2025Identifying Cooperative Personalities in Multi-agent Contexts through Personality Steering with Representation Engineering17 Mar 2025
- 2025Critical Foreign Policy Decisions (CFPD)-Benchmark: Measuring Diplomatic Preferences in Large Language Models8 Mar 2025
- 2025A Survey of Theory of Mind in Large Language Models: Evaluations, Representations, and Safety Risks10 Feb 2025
- 2025Integrators at War: Mediating in AI-assisted Resort-to-Force Decisions12 Jan 2025
- 2024Large Language Models in Politics and Democracy: A Comprehensive Survey1 Dec 2024
- 2024BetterBench: Assessing AI Benchmarks, Uncovering Issues, and Establishing Best Practices20 Nov 2024
- 2024Measuring Free-Form Decision-Making Inconsistency of Language Models in Military Crisis Simulations17 Oct 2024
- 2024Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilities10 Oct 2024
- 2024The LLM Effect: Are Humans Truly Using LLMs, or Are They Being Influenced By Them Instead?7 Oct 2024
50 newest of 61 All 61 (JSON)
- 2026Colosseum: Auditing Collusion in Cooperative Multi-Agent Systemscited by 17
- 2024Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilitiescited by 12
- 2025Evaluating Generalization Capabilities of LLM-Based Agents in Mixed-Motive Scenarios Using Concordiacited by 11
- 2025The Role of Social Learning and Collective Norm Formation in Fostering Cooperation in LLM Multi-Agent Systemscited by 8
- 2026Human Values Matter: Investigating How Misalignment Shapes Collective Behaviors in LLM Agent Communitiescited by 4
- 2025Identifying Cooperative Personalities in Multi-agent Contexts through Personality Steering with Representation Engineeringcited by 2
- 2025Abstract Counterfactuals for Language Model Agentscited by 2
- 2026CivBench: Progress-Based Evaluation for LLMs' Strategic Decision-Making in Civilization Vcited by 2
- 2026Effects of personality steering on cooperative behavior in Large Language Model agentscited by 1
- 2026Implementing surrogate goals for safer bargaining in LLM-based agentscited by 0
- 2026Multi-Agent Strategic Games with LLMscited by 0
- 2026Enhancing Decision-Making with Large Language Models through Multi-Agent Fictitious Playcited by 0
- 2026Enhancing Decision-Making with Large Language Models through Multi-Agent Fictitious Play17 Jun 2026
- 2026Multi-Agent Strategic Games with LLMs5 May 2026
- 2026CivBench: Progress-Based Evaluation for LLMs' Strategic Decision-Making in Civilization V9 Apr 2026
- 2026Human Values Matter: Investigating How Misalignment Shapes Collective Behaviors in LLM Agent Communities7 Apr 2026
- 2026Implementing surrogate goals for safer bargaining in LLM-based agents6 Apr 2026
- 2026Colosseum: Auditing Collusion in Cooperative Multi-Agent Systems16 Feb 2026
- 2026Effects of personality steering on cooperative behavior in Large Language Model agents8 Jan 2026
- 2025Evaluating Generalization Capabilities of LLM-Based Agents in Mixed-Motive Scenarios Using Concordia3 Dec 2025
- 2025The Role of Social Learning and Collective Norm Formation in Fostering Cooperation in LLM Multi-Agent Systems16 Oct 2025
- 2025Abstract Counterfactuals for Language Model Agents3 Jun 2025
- 2025Identifying Cooperative Personalities in Multi-agent Contexts through Personality Steering with Representation Engineering17 Mar 2025
- 2024Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilities10 Oct 2024
- 2024(Ir)rationality and Cognitive Biases in Large Language Modelscited by 23
- 2026AI Arms and Influence: Frontier Models Exhibit Sophisticated Reasoning in Simulated Nuclear Crisescited by 7
- 2024Markovian Transformers for Informative Language Modelingcited by 4
- 2025Social preferences with unstable interactive reasoning: Large language models in economic trust gamescited by 1
- 2026The Shibboleth Effect: Auditing the Cross-Lingual Distributional Skew of Large Language Modelscited by 0
- 2026The Shibboleth Effect: Auditing the Cross-Lingual Distributional Skew of Large Language Models9 Jun 2026
- 2026AI Arms and Influence: Frontier Models Exhibit Sophisticated Reasoning in Simulated Nuclear Crises16 Feb 2026
- 2025Social preferences with unstable interactive reasoning: Large language models in economic trust games16 May 2025
- 2024Markovian Transformers for Informative Language Modeling29 Apr 2024
- 2024(Ir)rationality and Cognitive Biases in Large Language Models14 Feb 2024
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agentscited by 66
- 2025Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibilitycited by 6
- 2026Ignore All Previous Instructions: Jailbreaking as a de-escalatory peace building practise to resist LLM social media botscited by 0
- 2026ToxScreen: Detecting Whether an LLM Has Been Poisonedcited by 0
- 2026ToxScreen: Detecting Whether an LLM Has Been Poisoned29 Jul 2026
- 2026Ignore All Previous Instructions: Jailbreaking as a de-escalatory peace building practise to resist LLM social media bots2 Mar 2026
- 2025Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility15 Jul 2025
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents4 May 2025
- 2024BetterBench: Assessing AI Benchmarks, Uncovering Issues, and Establishing Best Practicescited by 112
- 2024Risks from Language Models for Automated Mental Healthcare: Ethics and Structure for Implementationcited by 27
- 2024Human vs. Machine: Behavioral Differences Between Expert Humans and Language Models in Wargame Simulationscited by 20
- 2024On Large Language Models in National Security Applicationscited by 18
- 2024AI Risk Management Should Incorporate Both Safety and Securitycited by 17
- 2024The LLM Effect: Are Humans Truly Using LLMs, or Are They Being Influenced By Them Instead?cited by 14
- 2024AI-Powered Autonomous Weapons Risk Geopolitical Instability and Threaten AI Researchcited by 13
- 2024Measuring Free-Form Decision-Making Inconsistency of Language Models in Military Crisis Simulationscited by 11
- 2024Societal Adaptation to Advanced AIcited by 10
- 2024OpenEval: Benchmarking Chinese LLMs across Capability, Alignment and Safetycited by 9
- 2024Open-Ended Wargames with Large Language Modelscited by 8
- 2025A Survey of Theory of Mind in Large Language Models: Evaluations, Representations, and Safety Riskscited by 8
12 most cited of 37 All 37 (JSON)
- 2026GPS-Bench: A Governance Policy Benchmark for Automating Policy Analysis3 Sep 2026
- 2026Causal Behavioral Evaluation of AI Agents at Scale via Automated Behavioral Science10 Aug 2026
- 2026No One Wins in Nuclear War: A Social Simulation of Military Decision-making3 Aug 2026
- 2026Position: AI Is Not Ready for Strategic Conflicts31 Jul 2026
- 2026Metacognition in LLMs: Foundations, Progress, and Opportunities13 Jul 2026
- 2026The Foreign Policy AI Evaluation Gap3 Jul 2026
- 2026AI Researchers Must Help Lead Arms Control to Mitigate Military AI Risks10 Jun 2026
- 2026Illusions of the Gold Standard: A Large-scale Analysis of Human Evaluation Protocols for Long-form Text Generation6 Jun 2026
- 2026Human Decision-Making with Persuasive and Narrative LLM Explanations22 May 2026
- 2026The Weaponization of Computer Vision: Tracing Military-Surveillance Ties through Conference Sponsorship9 Apr 2026
- 2026A Scalable Entity-Based Framework for Auditing Bias in Large Language Models18 Jan 2026
- 2025A Criminology of Machines4 Nov 2025
12 newest of 37 All 37 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2026LLMs as Strategic Actors: Behavioral Alignment, Risk Calibration, and Argumentation Framing in Geopolitical Simulations
- 2026When AI Navigates the Fog of War
- 2025DipLLM: Fine-Tuning LLM for Strategic Decision-making in Diplomacy
- 2023War and Peace (WarAgent): Large Language Model-based Multi-Agent Simulation of World Wars
- 2025Democratizing Diplomacy: A Harness for Evaluating Any Large Language Model on Full-Press Diplomacy
- 2023Strategic Reasoning with Language Models
- 2025Large Language Models as Pok'emon Battle Agents: Strategic Play and Content Generation
- 2026To Nuke or Not to Nuke: LLMs' (Missing) Ethical Reasoning and Actions in a High-Stakes Decision-Making Simulation