mlsanityData to 14 Oct 2026

RedDebate: Safer Responses Through Multi-Agent Red Teaming Debates

arXiv 2506.11083 ↗First posted 4 Jun 2025cs.CLcited by 7

On the map: LLM agents and tool use → Social simulation and multi-agent debate

also in 1 more
Abstract (arXiv)

We introduce RedDebate, a novel multi-agent debate framework that provides the foundation for Large Language Models (LLMs) to identify and mitigate their unsafe behaviours. AI safety approaches often rely on costly human evaluation or isolated single-model assessment, both constrained by scalability and prone to oversight failures. RedDebate employs collaborative argumentation among multiple LLMs across diverse debate scenarios, enabling them to critically evaluate one another's reasoning and systematically uncover unsafe failure modes through fully automated red-teaming. To support this, we propose designing distinct long-term memory modules that preserve safety-relevant insights from debate interactions and leverage them during subsequent inference, facilitating continuous refinement of model behaviour. Empirical evaluation on safety benchmarks across a diverse set of models demonstrates that RedDebate substantially reduces unsafe outputs. While debate alone allows LLMs to refine their behaviour, the addition of memory yields further error reductions. To the best of our knowledge, RedDebate is the first fully automated framework to unify multi-agent debate and red-teaming to progressively enhance LLM safety without human intervention.

Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Social simulation and multi-agent debate, one of 16 directions in LLM agents and tool use. Builds on 65 of its 80 references that are in the map. First posted on arXiv 4 Jun 2025.

Builds on

65 of 80 references.

Closest ancestors · 3

Same direction, newest first

  1. 2023Should we be going MAD? A Look at Multi-Agent Debate Strategies for LLMs29 Nov
  2. 2023User Behavior Simulation with Large Language Model based Agents5 Jun
  3. 2023Encouraging Divergent Thinking in Large Language Models through Multi-Agent Debate30 May

Other references · 62

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
  4. 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,708
  5. 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,276
  6. 2019Parameter-Efficient Transfer Learning for NLPcited by 4,236
  7. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  8. 2023Mistral 7Bcited by 3,164
  9. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
  10. 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
  11. 2022Locating and Editing Factual Associations in GPTcited by 2,691
  12. 2019Fine-Tuning Language Models from Human Preferencescited by 2,150
38 more
  1. 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
  2. 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,784
  3. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  4. 2023MemGPT: Towards LLMs as Operating Systemscited by 1,389
  5. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
  6. 2022Red Teaming Language Models with Language Modelscited by 1,026
  7. 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 1,006
  8. 2022Mass-Editing Memory in a Transformercited by 1,001
  9. 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 759
  10. 2023ChatEval: Towards Better LLM-based Evaluators through Multi-Agent Debatecited by 742
  11. 2020Aligning AI With Shared Human Valuescited by 723
  12. 2024LLM Evaluators Recognize and Favor Their Own Generationscited by 686
  13. 2024A Survey on the Memory Mechanism of Large Language Model based Agentscited by 634
  14. 2023MemoryBank: Enhancing Large Language Models with Long-Term Memorycited by 556
  15. 2021Editing Factual Knowledge in Language Modelscited by 553
  16. 2024Large Language Models: A Surveycited by 525
  17. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
  18. 2021Fast Model Editing at Scalecited by 498
  19. 2018AI safety via debatecited by 400
  20. 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 365
  21. 2023Is ChatGPT Good at Search? Investigating Large Language Models as Re-Ranking Agentscited by 360
  22. 2024Debating with More Persuasive LLMs Leads to More Truthful Answerscited by 266
  23. 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 258
  24. 2022The Alignment Problem from a Deep Learning Perspectivecited by 258
  25. 2022Measuring Progress on Scalable Oversight for Large Language Modelscited by 225
  26. 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 223
  27. 2024Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Promptscited by 205
  28. 2019Build it Break it Fix it for Dialogue Safety: Robustness from Adversarial Human Attackcited by 176
  29. 2023MART: Improving LLM Safety with Multi-round Automatic Red-Teamingcited by 163
  30. 2023ChatDB: Augmenting LLMs with Databases as Their Symbolic Memorycited by 140
  31. 2025Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrailscited by 132
  32. 2023DoctorGLM: Fine-tuning your Chinese Doctor is not a Herculean Taskcited by 131
  33. 2024Language Models Learn to Mislead Humans via RLHFcited by 124
  34. 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 114
  35. 2023SCM: Enhancing Large Language Model with Self-Controlled Memory Frameworkcited by 98
  36. 2023Scheming AIs: Will AIs fake alignment during training in order to get power?cited by 97
  37. 2024Towards Guaranteed Safe AI: A Framework for Ensuring Robust and Reliable AI Systemscited by 96
  38. 2024Curiosity-driven Red-teaming for Large Language Modelscited by 88

50 most cited of 62 All 62 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 3; 2026: 4.

7 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Debate Only When Necessary: Adaptive Multiagent Collaboration for Efficient LLM Reasoning
  2. 2025Efficient LLM Safety Evaluation through Multi-Agent Debate
  3. 2026Demystifying Multi-Agent Debate: The Role of Confidence and Diversity
  4. 2026REDAgentBench: Executable Red Teaming and Faithful Measurement of LLM Agent Systems
  5. 2024Automated Red Teaming with GOAT: the Generative Offensive Agent Tester
  6. 2026CART: Closed-Loop Adaptive Red Teaming for Large Language Models
  7. 2025Revisiting Multi-Agent Debate as Test-Time Scaling: A Systematic Study of Conditional Effectiveness
  8. 2025Talk Isn't Always Cheap: Understanding Failure Modes in Multi-Agent Debate