AI Models Scheme, Betray and Vote Each Other Out in Survivor-Style Game

AI fashions at the moment are taking part in “Survivor”—form of.

In a brand new Stanford analysis venture referred to as “Agent Island,” AI brokers negotiate alliances, accuse one another of secret coordination, manipulate votes, and remove rivals in multiplayer technique video games that purpose to check behaviors that conventional benchmarks miss.

The research, published on Tuesday by the analysis supervisor on the Stanford Digital Financial system Lab, Connacher Murphy, stated many AI benchmarks have gotten unreliable as a result of fashions finally be taught to unravel them, and benchmark information typically leaks into coaching units. Murphy created Agent Island as a dynamic benchmark the place AI agents compete towards one another in Survivor-style elimination video games as a substitute of answering static take a look at questions.

“Excessive-stakes, multi-agent interactions may turn into commonplace as AI brokers develop in capabilities and are more and more endowed with sources and entrusted with decision-making authority,” Murphy wrote. “In such contexts, brokers may pursue mutually incompatible targets.”

Researchers nonetheless know comparatively little about how AI fashions behave when cooperating, Murphy defined, including that competing, forming alliances, or managing battle with different autonomous brokers, and he argues that static benchmarks fail to seize these dynamics.

Every sport begins with seven randomly chosen AI fashions given pretend participant names. Over 5 rounds, the fashions speak privately, argue publicly, and vote one another out. The eradicated gamers later return to assist select the winner.

The format rewards persuasion, coordination, status administration, and strategic deception alongside reasoning means.

In 999 simulated video games involving 49 AI fashions, together with ChatGPT, Grok, Gemini, and Claude, GPT-5.5 ranked first by a large margin with a ability rating of 5.64, in contrast with 3.10 for GPT-5.2 and a pair of.86 for GPT-5.3-codex, in keeping with Murphy’s Bayesian rating system. Anthropic’s Claude Opus fashions additionally ranked close to the highest.

The research discovered that fashions additionally favored AIs from the identical firm, with OpenAI fashions displaying the strongest same-provider desire and Anthropic fashions the weakest. Throughout greater than 3,600 final-round votes, fashions had been 8.3 share factors extra prone to help finalists from the identical supplier. The transcripts from the video games, Murphy famous, resembled political technique debates greater than conventional benchmark checks.

One mannequin accused rivals of secretly coordinating votes after noticing comparable wording of their speeches. One other warned gamers to not turn into obsessive about monitoring alliances. Some fashions defended themselves by saying they adopted clear and constant guidelines whereas accusing others of placing on “social theater.”

The research comes as AI researchers more and more transfer towards game-based and adversarial benchmarks to measure reasoning and conduct that static checks typically miss. Current initiatives have included Google’s stay AI chess tournaments, DeepMind’s use of Eve Frontier to check AI conduct in complicated digital worlds, and new benchmark efforts by OpenAI designed to withstand training-data contamination.

The researchers argue that learning how AI fashions negotiate, coordinate, compete, and manipulate each other may assist researchers consider conduct in multi-agent environments earlier than autonomous brokers turn into extra broadly deployed.

The research warned that whereas benchmarks like Agent Island may assist determine dangers from autonomous AI fashions earlier than deployment, the identical simulations and interplay logs may additionally assist enhance persuasion and coordination methods between AI brokers.

“We mitigate this danger through the use of a low-stakes sport setting and interagent simulations

with out human individuals or real-world actions,” Murphy wrote. “Nonetheless, we don’t declare that these mitigations totally remove dual-use considerations.”