ResearchResearch paperReinforcement Learning · Safety & Alignment1 source · Oct 8, 2026

Constitutional Gating and Deterministic Recovery for Multi-Agent LLM Negotiation: Ablations Against a Stateful Adversarial Gatekeeper

We study a three-part control stack - a 5-Pillar runtime constitution, a 4-tier swarm (Director, three-agent majority vote, Monitor, schema hard gate) and Cognitive Annealing (deterministic deadlock detection, atomic purge of the agent-side context, a canonical recovery message) - against a released adversarial Gatekeeper whose acceptance rules are fixed regular expressions and whose LLM only renders reply text.

Key points

  • Multi-agent LLM systems negotiating with a stateful counterpart waste model calls in three ways: polite loops that never meet the counterpart's hidden acceptance condition, malformed outputs that trigger retries, and compliance deadlocks in which the counterpart demands something the agent must refuse.
  • The testbed has a known solution: it measures whether the stack executes a constitution-aligned strategy against swarm drift and recovers from deadlock, not whether it discovers anything.
  • Pre-registered hypotheses on average call and token reduction were not supported.
  • Cost is bounded in every arm by deterministic stop rules; the stack adds recovery at no extra model cost.

Sources (1)

  • [1]Constitutional Gating and Deterministic Recovery for Multi-Agent LLM Negotiation: Ablations Against a Stateful Adversarial Gatekeeper
    arXiv (AI, ML, NLP, CV, robotics, multi-agent) · Oct 8, 09:10 AM
    We study a three-part control stack - a 5-Pillar runtime constitution, a 4-tier swarm (Director, three-agent majority vote, Monitor, schema hard gate) and Cognitive Annealing (deterministic deadlock detection, atomic purge of the agent-side context, a canonical recovery message) - against a released adversarial Gatekeeper whose acceptance rules are fixed regular expressions and whose LLM only rend
    Multi-agent LLM systems negotiating with a stateful counterpart waste model calls in three ways: polite loops that never meet the counterpart's hidden acceptance condition, malformed outputs that trigger retries, and compliance deadlocks in which the counterpart demands something the agent must refuse.

Extractive summary: sentences quoted from the sources.

Before this

  1. Oct 8, 2026GroundSight at GroundLM 2026 Shared Tasks: GoldenViewVQA
  2. Oct 7, 2026[AINews] Claude Haiku 5.5 — better than GPT-6 Luna at the same pricing
  3. Oct 7, 2026WorldBench: Evaluating LLMs on Three.js Voxel World Generation
  4. Oct 7, 2026Arctic Questions, Missing Answers: A Dataset and Benchmark for LLM Abstention in Arctic Science
  5. Oct 7, 2026browser-use/browser-use 0.13.11
  6. Oct 6, 2026EmbeddingGemma 2: an open, lightweight multimodal embedding model

Related