{"id":"https://openalex.org/W7155089760","doi":"https://doi.org/10.48550/arxiv.2604.17139","title":"The Consensus Trap: Rescuing Multi-Agent LLMs from Adversarial Majorities via Token-Level Collaboration","display_name":"The Consensus Trap: Rescuing Multi-Agent LLMs from Adversarial Majorities via Token-Level Collaboration","publication_year":2026,"publication_date":"2026-04-18","ids":{"openalex":"https://openalex.org/W7155089760","doi":"https://doi.org/10.48550/arxiv.2604.17139"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.17139","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.17139","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.17139","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134143679","display_name":"Jiayuan Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Jiayuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101055392","display_name":"Shiyi Du","orcid":"https://orcid.org/0009-0006-3445-2437"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Du, Shiyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134122061","display_name":"Weihua Du","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Du, Weihua","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134100393","display_name":"Mingyu Guo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guo, Mingyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5134118525","display_name":"Vincent Conitzer","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Conitzer, Vincent","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.27709999680519104,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.27709999680519104,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.13930000364780426,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11704","display_name":"Mobile Crowdsensing and Crowdsourcing","score":0.07050000131130219,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8479999899864197},{"id":"https://openalex.org/keywords/voting","display_name":"Voting","score":0.6380000114440918},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5052000284194946},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.38839998841285706},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.38609999418258667},{"id":"https://openalex.org/keywords/counterfactual-thinking","display_name":"Counterfactual thinking","score":0.37529999017715454},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.3650999963283539},{"id":"https://openalex.org/keywords/information-aggregation","display_name":"Information aggregation","score":0.3508000075817108}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8479999899864197},{"id":"https://openalex.org/C520049643","wikidata":"https://www.wikidata.org/wiki/Q189760","display_name":"Voting","level":3,"score":0.6380000114440918},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5716999769210815},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5052000284194946},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.476500004529953},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.38839998841285706},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.38609999418258667},{"id":"https://openalex.org/C108650721","wikidata":"https://www.wikidata.org/wiki/Q1783253","display_name":"Counterfactual thinking","level":2,"score":0.37529999017715454},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.3650999963283539},{"id":"https://openalex.org/C2986046992","wikidata":"https://www.wikidata.org/wiki/Q16773055","display_name":"Information aggregation","level":2,"score":0.3508000075817108},{"id":"https://openalex.org/C153668964","wikidata":"https://www.wikidata.org/wiki/Q27636","display_name":"Majority rule","level":2,"score":0.34130001068115234},{"id":"https://openalex.org/C28034677","wikidata":"https://www.wikidata.org/wiki/Q17092530","display_name":"Interleaving","level":2,"score":0.3222000002861023},{"id":"https://openalex.org/C166052673","wikidata":"https://www.wikidata.org/wiki/Q83021","display_name":"Empirical evidence","level":2,"score":0.3190000057220459},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29589998722076416},{"id":"https://openalex.org/C190253527","wikidata":"https://www.wikidata.org/wiki/Q295354","display_name":"Law and economics","level":1,"score":0.29249998927116394},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.2915000021457672},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.28119999170303345},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.2802000045776367},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.27649998664855957},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.27549999952316284},{"id":"https://openalex.org/C17020691","wikidata":"https://www.wikidata.org/wiki/Q139677","display_name":"Operator (biology)","level":5,"score":0.2727999985218048},{"id":"https://openalex.org/C112313634","wikidata":"https://www.wikidata.org/wiki/Q7886648","display_name":"Complement (music)","level":5,"score":0.2639000117778778},{"id":"https://openalex.org/C41550386","wikidata":"https://www.wikidata.org/wiki/Q529909","display_name":"Multi-agent system","level":2,"score":0.26330000162124634}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.17139","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.17139","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.17139","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.17139","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7821714282035828}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Multi-agent":[0],"large":[1],"language":[2],"model":[3],"(LLM)":[4],"architectures":[5],"increasingly":[6],"rely":[7],"on":[8],"response-level":[9,47],"aggregation,":[10],"such":[11,32],"as":[12,33,95],"Majority":[13],"Voting":[14],"(MAJ),":[15],"to":[16,28,65,116],"raise":[17],"reasoning":[18,158],"ceilings.":[19],"However,":[20],"in":[21,43],"open":[22],"environments,":[23],"agents":[24,52,82,146,168],"are":[25],"highly":[26],"susceptible":[27],"stealthy":[29],"contextual":[30],"corruption,":[31],"targeted":[34],"prompt":[35],"injections.":[36],"We":[37,91,150],"reveal":[38],"a":[39,54,87,96,107,117,148,170],"critical":[40,179],"structural":[41],"vulnerability":[42],"current":[44],"multi-agent":[45],"systems:":[46],"aggregation":[48,105],"collapses":[49,165],"when":[50,144,166],"corrupted":[51,145,167],"form":[53,147],"local":[55],"majority.":[56,149],"Because":[57],"voting":[58],"aggregates":[59],"fully-formed":[60],"conclusions,":[61],"it":[62],"is":[63],"blind":[64],"flawed":[66],"intermediate":[67],"logic.":[68],"To":[69],"overcome":[70],"this":[71,93,128,178],"systematic":[72],"limitation,":[73],"we":[74,131],"propose":[75],"the":[76,134],"Token-Level":[77],"Round-Robin":[78],"(RR)":[79],"Collaboration,":[80],"where":[81],"sequentially":[83],"interleave":[84],"generation":[85],"within":[86],"shared":[88],"auto-regressive":[89],"context.":[90],"formalize":[92],"process":[94],"discrete-time":[97],"dynamical":[98],"system,":[99],"proving":[100],"that":[101,133,162],"token-level":[102],"interleaving":[103],"transitions":[104],"from":[106],"brittle":[108],"counting":[109],"of":[110,121],"final":[111],"votes":[112],"(a":[113,123],"linear":[114],"sum)":[115],"dynamic,":[118],"interwoven":[119],"chain":[120],"logic":[122],"non-linear":[124],"operator":[125],"product).":[126],"Through":[127],"theoretical":[129],"lens,":[130],"prove":[132],"honest":[135],"model's":[136],"restorative":[137],"pull":[138],"can":[139],"overpower":[140],"adversarial":[141],"corruptions,":[142],"even":[143],"conduct":[151],"an":[152],"exhaustive":[153],"empirical":[154],"evaluation":[155],"across":[156],"diverse":[157],"benchmarks":[159],"and":[160],"demonstrate":[161],"while":[163],"MAJ":[164],"reach":[169],"majority,":[171],"RR":[172],"maintains":[173],"robust":[174],"accuracy":[175],"well":[176],"beyond":[177],"threshold.":[180]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-22T00:00:00"}
