RedDebate: Safer Responses Through Multi-Agent Red Teaming Debates
On the map: LLM agents and tool use → Social simulation and multi-agent debate
also in 1 more
Abstract (arXiv)
We introduce RedDebate, a novel multi-agent debate framework that provides the foundation for Large Language Models (LLMs) to identify and mitigate their unsafe behaviours. AI safety approaches often rely on costly human evaluation or isolated single-model assessment, both constrained by scalability and prone to oversight failures. RedDebate employs collaborative argumentation among multiple LLMs across diverse debate scenarios, enabling them to critically evaluate one another's reasoning and systematically uncover unsafe failure modes through fully automated red-teaming. To support this, we propose designing distinct long-term memory modules that preserve safety-relevant insights from debate interactions and leverage them during subsequent inference, facilitating continuous refinement of model behaviour. Empirical evaluation on safety benchmarks across a diverse set of models demonstrates that RedDebate substantially reduces unsafe outputs. While debate alone allows LLMs to refine their behaviour, the addition of memory yields further error reductions. To the best of our knowledge, RedDebate is the first fully automated framework to unify multi-agent debate and red-teaming to progressively enhance LLM safety without human intervention.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Social simulation and multi-agent debate, one of 16 directions in LLM agents and tool use. Builds on 65 of its 80 references that are in the map. First posted on arXiv 4 Jun 2025.
Builds on
65 of 80 references.
Closest ancestors · 3
Same direction, newest first
- 2023Should we be going MAD? A Look at Multi-Agent Debate Strategies for LLMs29 Nov
- 2023User Behavior Simulation with Large Language Model based Agents5 Jun
- 2023Encouraging Divergent Thinking in Large Language Models through Multi-Agent Debate30 May
Other references · 62
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
- 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,708
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,276
- 2019Parameter-Efficient Transfer Learning for NLPcited by 4,236
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2023Mistral 7Bcited by 3,164
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
- 2022Locating and Editing Factual Associations in GPTcited by 2,691
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,150
38 more
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
- 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,784
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2023MemGPT: Towards LLMs as Operating Systemscited by 1,389
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2022Red Teaming Language Models with Language Modelscited by 1,026
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 1,006
- 2022Mass-Editing Memory in a Transformercited by 1,001
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 759
- 2023ChatEval: Towards Better LLM-based Evaluators through Multi-Agent Debatecited by 742
- 2020Aligning AI With Shared Human Valuescited by 723
- 2024LLM Evaluators Recognize and Favor Their Own Generationscited by 686
- 2024A Survey on the Memory Mechanism of Large Language Model based Agentscited by 634
- 2023MemoryBank: Enhancing Large Language Models with Long-Term Memorycited by 556
- 2021Editing Factual Knowledge in Language Modelscited by 553
- 2024Large Language Models: A Surveycited by 525
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
- 2021Fast Model Editing at Scalecited by 498
- 2018AI safety via debatecited by 400
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 365
- 2023Is ChatGPT Good at Search? Investigating Large Language Models as Re-Ranking Agentscited by 360
- 2024Debating with More Persuasive LLMs Leads to More Truthful Answerscited by 266
- 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 258
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 258
- 2022Measuring Progress on Scalable Oversight for Large Language Modelscited by 225
- 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 223
- 2024Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Promptscited by 205
- 2019Build it Break it Fix it for Dialogue Safety: Robustness from Adversarial Human Attackcited by 176
- 2023MART: Improving LLM Safety with Multi-round Automatic Red-Teamingcited by 163
- 2023ChatDB: Augmenting LLMs with Databases as Their Symbolic Memorycited by 140
- 2025Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrailscited by 132
- 2023DoctorGLM: Fine-tuning your Chinese Doctor is not a Herculean Taskcited by 131
- 2024Language Models Learn to Mislead Humans via RLHFcited by 124
- 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 114
- 2023SCM: Enhancing Large Language Model with Self-Controlled Memory Frameworkcited by 98
- 2023Scheming AIs: Will AIs fake alignment during training in order to get power?cited by 97
- 2024Towards Guaranteed Safe AI: A Framework for Ensuring Robust and Reliable AI Systemscited by 96
- 2024Curiosity-driven Red-teaming for Large Language Modelscited by 88
50 most cited of 62 All 62 (JSON)
Built on by
Citing papers per year: 2025: 3; 2026: 4.
7 papers.
- 2025Distributional AGI Safetycited by 12
- 2025The Alignment Waltz: Jointly Training Agents to Collaborate for Safetycited by 10
- 2026SafeGuard: A Multi-Agent Perception-Reasoning Framework for Social-Risk AI-Generated Video Detectioncited by 2
- 2025More Agents Improve Math Problem Solving but Adversarial Robustness Gap Persistscited by 1
- 2026JMedEthicBench: A Multi-Turn Conversational Benchmark for Evaluating Medical Safety in Japanese Large Language Modelscited by 1
- 2026Heterogeneous Agent Cohorts for Safe Open-Ended Exploration with Runtime Constraint Memorycited by 0
- 2026Adversarial Stress Testing of Role-Playing Language Agents using Multi-Agent Evaluationcited by 0
- 2026Adversarial Stress Testing of Role-Playing Language Agents using Multi-Agent Evaluation4 Aug 2026
- 2026Heterogeneous Agent Cohorts for Safe Open-Ended Exploration with Runtime Constraint Memory13 Jul 2026
- 2026SafeGuard: A Multi-Agent Perception-Reasoning Framework for Social-Risk AI-Generated Video Detection3 Jul 2026
- 2026JMedEthicBench: A Multi-Turn Conversational Benchmark for Evaluating Medical Safety in Japanese Large Language Models4 Jan 2026
- 2025Distributional AGI Safety18 Dec 2025
- 2025More Agents Improve Math Problem Solving but Adversarial Robustness Gap Persists10 Nov 2025
- 2025The Alignment Waltz: Jointly Training Agents to Collaborate for Safety9 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2025Debate Only When Necessary: Adaptive Multiagent Collaboration for Efficient LLM Reasoning
- 2025Efficient LLM Safety Evaluation through Multi-Agent Debate
- 2026Demystifying Multi-Agent Debate: The Role of Confidence and Diversity
- 2026REDAgentBench: Executable Red Teaming and Faithful Measurement of LLM Agent Systems
- 2024Automated Red Teaming with GOAT: the Generative Offensive Agent Tester
- 2026CART: Closed-Loop Adaptive Red Teaming for Large Language Models
- 2025Revisiting Multi-Agent Debate as Test-Time Scaling: A Systematic Study of Conditional Effectiveness
- 2025Talk Isn't Always Cheap: Understanding Failure Modes in Multi-Agent Debate