Constitutional Gating and Deterministic Recovery for Multi-Agent LLM Negotiation: Ablations Against a Stateful Adversarial Gatekeeper
We study a three-part control stack - a 5-Pillar runtime constitution, a 4-tier swarm (Director, three-agent majority vote, Monitor, schema hard gate) and Cognitive Annealing (deterministic deadlock detection, atomic purge of the agent-side context, a canonical recovery message) - against a released adversarial Gatekeeper whose acceptance rules are fixed regular expressions and whose LLM only renders reply text.
ProofPaper ↗
Key points
- Multi-agent LLM systems negotiating with a stateful counterpart waste model calls in three ways: polite loops that never meet the counterpart's hidden acceptance condition, malformed outputs that trigger retries, and compliance deadlocks in which the counterpart demands something the agent must refuse.
- The testbed has a known solution: it measures whether the stack executes a constitution-aligned strategy against swarm drift and recovers from deadlock, not whether it discovers anything.
- Pre-registered hypotheses on average call and token reduction were not supported.
- Cost is bounded in every arm by deterministic stop rules; the stack adds recovery at no extra model cost.
Sources (1)
- [1]Constitutional Gating and Deterministic Recovery for Multi-Agent LLM Negotiation: Ablations Against a Stateful Adversarial GatekeeperarXiv (AI, ML, NLP, CV, robotics, multi-agent) · Oct 8, 09:10 AM
We study a three-part control stack - a 5-Pillar runtime constitution, a 4-tier swarm (Director, three-agent majority vote, Monitor, schema hard gate) and Cognitive Annealing (deterministic deadlock detection, atomic purge of the agent-side context, a canonical recovery message) - against a released adversarial Gatekeeper whose acceptance rules are fixed regular expressions and whose LLM only rend
Multi-agent LLM systems negotiating with a stateful counterpart waste model calls in three ways: polite loops that never meet the counterpart's hidden acceptance condition, malformed outputs that trigger retries, and compliance deadlocks in which the counterpart demands something the agent must refuse.
Extractive summary: sentences quoted from the sources.
Before this
- Oct 8, 2026GroundSight at GroundLM 2026 Shared Tasks: GoldenViewVQA
- Oct 7, 2026[AINews] Claude Haiku 5.5 — better than GPT-6 Luna at the same pricing
- Oct 7, 2026WorldBench: Evaluating LLMs on Three.js Voxel World Generation
- Oct 7, 2026Arctic Questions, Missing Answers: A Dataset and Benchmark for LLM Abstention in Arctic Science
- Oct 7, 2026browser-use/browser-use 0.13.11
- Oct 6, 2026EmbeddingGemma 2: an open, lightweight multimodal embedding model