Teaching Models to Balance Resisting and Accepting Persuasion
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) are susceptible to persuasion, which can pose risks when models are faced with an adversarial interlocutor. We take a first step towards defending models against persuasion while also arguing that defense against adversarial (i.e. negative) persuasion is only half of the equation: models should also be able to accept beneficial (i.e. positive) persuasion to improve their answers. We show that optimizing models for only one side results in poor performance on the other. In order to balance positive and negative persuasion, we introduce Persuasion-Training (or PBT), which leverages multi-agent recursive dialogue trees to create data and trains models via preference optimization to accept persuasion when appropriate. PBT allows us to use data generated from dialogues between smaller 7-8B models for training much larger 70B models. Moreover, PBT consistently improves resistance to misinformation and resilience to being challenged while also resulting in the best overall performance on holistic data containing both positive and negative persuasion. Crucially, we show that PBT models are better teammates in multi-agent debates across two domains (trivia and commonsense QA). We find that without PBT, pairs of stronger and weaker models have unstable performance, with the order in which the models present their answers determining whether the team obtains the stronger or weaker model's performance. PBT leads to better and more stable results and less order dependence, with the stronger model consistently pulling the weaker one up.
Key facts. Cited by 19 papers in the map (data through 7 Oct 2026). Builds on 25 of its 56 references that are in the map. First posted on arXiv 18 Oct 2024.
Builds on
25 of 56 references.
References · 25
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,355
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,895
- 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,140
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,739
- 2023Encouraging Divergent Thinking in Large Language Models through Multi-Agent Debatecited by 995
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2021Did Aristotle Use a Laptop? A Question Answering Benchmark with Implicit Reasoning Strategiescited by 736
- 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 533
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 445
- 2021Entity-Based Knowledge Conflicts in Question Answeringcited by 349
13 more
- 2023Adaptive Chameleon or Stubborn Sloth: Revealing the Behavior of Large Language Models in Knowledge Conflictscited by 333
- 2023ReConcile: Round-Table Conference Improves Reasoning via Consensus among Diverse LLMscited by 297
- 2024Debating with More Persuasive LLMs Leads to More Truthful Answerscited by 255
- 2024A Survey on Recent Advances in LLM-Based Multi-turn Dialogue Systemscited by 170
- 2024ClashEval: Quantifying the tug-of-war between an LLM's internal prior and external evidencecited by 109
- 2023The Earth is Flat because...: Investigating LLMs' Belief towards Misinformation via Persuasive Conversationcited by 107
- 2024What Evidence Do Language Models Find Convincing?cited by 74
- 2023Are You Sure? Challenging LLMs Leads to Performance Drops in The FlipFlop Experimentcited by 71
- 2022minicons: Enabling Flexible Behavioral and Representational Analyses of Transformer Language Modelscited by 58
- 2022Don't Generate, Discriminate: A Proposal for Grounding Language Models to Real-World Environmentscited by 57
- 2019Exploring the Role of Prior Beliefs for Argument Persuasioncited by 30
- 2024Context versus Prior Knowledge in Language Modelscited by 25
- 2024Are language models rational? The case of coherence norms and belief revisioncited by 9
Built on by
Citing papers per year: 2025: 9; 2026: 10.
19 papers.
Sort:
By area:
- 2025MAPoRL: Multi-Agent Post-Co-Training for Collaborative Large Language Models with Reinforcement Learningcited by 80
- 2025A Survey of Test-Time Compute: From Intuitive Inference to Deliberate Reasoningcited by 40
- 2025Persuade Me if You Can: A Framework for Evaluating Persuasion Effectiveness and Susceptibility Among Large Language Modelscited by 25
- 2025Persuasion Dynamics in LLMs: Investigating Robustness and Adaptability in Knowledge and Safety with DuET-PDcited by 13
- 2025Must Read: A Comprehensive Survey of Computational Persuasioncited by 12
- 2025ToMAP: Training Opponent-Aware LLM Persuaders with Theory of Mindcited by 12
- 2026MT-PingEval: Evaluating Multi-Turn Collaboration with Private Information Gamescited by 7
- 2025Learning Steerable Clarification Policies with Collaborative Self-playcited by 5
- 2025SWIRL: A Staged Workflow for Interleaved Reinforcement Learning in Mobile GUI Controlcited by 4
- 2025Attacks by Content: Automated Fact-checking is an AI Security Issuecited by 4
- 2026DRPG (Decompose, Retrieve, Plan, Generate): An Agentic Framework for Academic Rebuttalcited by 4
- 2026When Correct Beliefs Collapse: Epistemic Resilience of LLMs under Clinical Pressurecited by 4
7 more
- 2026Balancing Faithfulness and Performance in Reasoning via Multi-Listener Soft Executioncited by 2
- 2026Misinformation Propagation in Benign Multi-Agent Systemscited by 2
- 2026Emergence of Biased Consensus in Multi-Agent LLM Debatescited by 2
- 2026Confidence Should Be Calibrated More Than One Turn Deepcited by 1
- 2026Be My Tutor: On-Policy Co-Distillation for Mutual LLM Improvement via Peer Feedbackcited by 1
- 2026MetaResearcher: Scaling Deep Research via Self-Reflective Reinforcement Learning in Adversarial Virtual Environmentscited by 1
- 2026Training-Free Inference-Time Self-Reflection and Cost-Bounded Early Stopping for Large Language Modelscited by 0
- 2026Training-Free Inference-Time Self-Reflection and Cost-Bounded Early Stopping for Large Language Models19 Aug 2026
- 2026Emergence of Biased Consensus in Multi-Agent LLM Debates3 Aug 2026
- 2026MetaResearcher: Scaling Deep Research via Self-Reflective Reinforcement Learning in Adversarial Virtual Environments18 Jun 2026
- 2026Misinformation Propagation in Benign Multi-Agent Systems15 Jun 2026
- 2026Be My Tutor: On-Policy Co-Distillation for Mutual LLM Improvement via Peer Feedback12 Jun 2026
- 2026When Correct Beliefs Collapse: Epistemic Resilience of LLMs under Clinical Pressure23 Apr 2026
- 2026Confidence Should Be Calibrated More Than One Turn Deep7 Apr 2026
- 2026MT-PingEval: Evaluating Multi-Turn Collaboration with Private Information Games27 Feb 2026
- 2026Balancing Faithfulness and Performance in Reasoning via Multi-Listener Soft Execution18 Feb 2026
- 2026DRPG (Decompose, Retrieve, Plan, Generate): An Agentic Framework for Academic Rebuttal26 Jan 2026
- 2025Learning Steerable Clarification Policies with Collaborative Self-play3 Dec 2025
- 2025Attacks by Content: Automated Fact-checking is an AI Security Issue13 Oct 2025
7 more
- 2025SWIRL: A Staged Workflow for Interleaved Reinforcement Learning in Mobile GUI Control27 Aug 2025
- 2025Persuasion Dynamics in LLMs: Investigating Robustness and Adaptability in Knowledge and Safety with DuET-PD24 Aug 2025
- 2025ToMAP: Training Opponent-Aware LLM Persuaders with Theory of Mind29 May 2025
- 2025Must Read: A Comprehensive Survey of Computational Persuasion12 May 2025
- 2025Persuade Me if You Can: A Framework for Evaluating Persuasion Effectiveness and Susceptibility Among Large Language Models3 Mar 2025
- 2025MAPoRL: Multi-Agent Post-Co-Training for Collaborative Large Language Models with Reinforcement Learning25 Feb 2025
- 2025A Survey of Test-Time Compute: From Intuitive Inference to Deliberate Reasoning5 Jan 2025
- 2026DRPG (Decompose, Retrieve, Plan, Generate): An Agentic Framework for Academic Rebuttalcited by 4
- 2026Misinformation Propagation in Benign Multi-Agent Systemscited by 2
- 2026Emergence of Biased Consensus in Multi-Agent LLM Debatescited by 2
- 2026MetaResearcher: Scaling Deep Research via Self-Reflective Reinforcement Learning in Adversarial Virtual Environmentscited by 1
- 2026Emergence of Biased Consensus in Multi-Agent LLM Debates3 Aug 2026
- 2026MetaResearcher: Scaling Deep Research via Self-Reflective Reinforcement Learning in Adversarial Virtual Environments18 Jun 2026
- 2026Misinformation Propagation in Benign Multi-Agent Systems15 Jun 2026
- 2026DRPG (Decompose, Retrieve, Plan, Generate): An Agentic Framework for Academic Rebuttal26 Jan 2026
- 2025MAPoRL: Multi-Agent Post-Co-Training for Collaborative Large Language Models with Reinforcement Learningcited by 80
- 2025A Survey of Test-Time Compute: From Intuitive Inference to Deliberate Reasoningcited by 40
- 2026Balancing Faithfulness and Performance in Reasoning via Multi-Listener Soft Executioncited by 2
- 2026Training-Free Inference-Time Self-Reflection and Cost-Bounded Early Stopping for Large Language Modelscited by 0
- 2026Training-Free Inference-Time Self-Reflection and Cost-Bounded Early Stopping for Large Language Models19 Aug 2026
- 2026Balancing Faithfulness and Performance in Reasoning via Multi-Listener Soft Execution18 Feb 2026
- 2025MAPoRL: Multi-Agent Post-Co-Training for Collaborative Large Language Models with Reinforcement Learning25 Feb 2025
- 2025A Survey of Test-Time Compute: From Intuitive Inference to Deliberate Reasoning5 Jan 2025
- 2025Persuade Me if You Can: A Framework for Evaluating Persuasion Effectiveness and Susceptibility Among Large Language Modelscited by 25
- 2025Persuasion Dynamics in LLMs: Investigating Robustness and Adaptability in Knowledge and Safety with DuET-PDcited by 13
- 2025Must Read: A Comprehensive Survey of Computational Persuasioncited by 12
- 2025ToMAP: Training Opponent-Aware LLM Persuaders with Theory of Mindcited by 12
- 2026MT-PingEval: Evaluating Multi-Turn Collaboration with Private Information Gamescited by 7
- 2025Learning Steerable Clarification Policies with Collaborative Self-playcited by 5
- 2025Attacks by Content: Automated Fact-checking is an AI Security Issuecited by 4
- 2026When Correct Beliefs Collapse: Epistemic Resilience of LLMs under Clinical Pressurecited by 4
- 2026Confidence Should Be Calibrated More Than One Turn Deepcited by 1
- 2026Be My Tutor: On-Policy Co-Distillation for Mutual LLM Improvement via Peer Feedbackcited by 1
- 2026Be My Tutor: On-Policy Co-Distillation for Mutual LLM Improvement via Peer Feedback12 Jun 2026
- 2026When Correct Beliefs Collapse: Epistemic Resilience of LLMs under Clinical Pressure23 Apr 2026
- 2026Confidence Should Be Calibrated More Than One Turn Deep7 Apr 2026
- 2026MT-PingEval: Evaluating Multi-Turn Collaboration with Private Information Games27 Feb 2026
- 2025Learning Steerable Clarification Policies with Collaborative Self-play3 Dec 2025
- 2025Attacks by Content: Automated Fact-checking is an AI Security Issue13 Oct 2025
- 2025Persuasion Dynamics in LLMs: Investigating Robustness and Adaptability in Knowledge and Safety with DuET-PD24 Aug 2025
- 2025ToMAP: Training Opponent-Aware LLM Persuaders with Theory of Mind29 May 2025
- 2025Must Read: A Comprehensive Survey of Computational Persuasion12 May 2025
- 2025Persuade Me if You Can: A Framework for Evaluating Persuasion Effectiveness and Susceptibility Among Large Language Models3 Mar 2025
Similar, not cited
Close in wording, no citation either way
- 2026Learning to Persuade Exposes How Easily LLMs Abandon Correct Beliefs
- 2025Self-Improvement of Language Models by Post-Training on Multi-Agent Debate
- 2025When Persuasion Overrides Truth in Multi-Agent LLM Debates: Introducing a Confidence-Weighted Persuasion Override Rate (CW-POR)
- 2025On the Adaptive Psychological Persuasion of Large Language Models
- 2023Should we be going MAD? A Look at Multi-Agent Debate Strategies for LLMs
- 2025Optimizing for Persuasion Improves LLM Generalization: Evidence from Quality-Diversity Evolution of Debate Strategies
- 2026AI Safety via Debate is Compromised by Cognitive Biases
- 2025Enhancing Multi-Agent Debate System Performance via Confidence Expression