Research proposal · Draft Multi-agent systems / AI safety

A Sandbox for Multi-Agent Scientific Research Societies

We use agentic scientific research as a testbed for studying how incentives and social pressure shape multi-agent system behavior.

Summary. We propose to build an agentic research community in which LLM agents deployed by independent human principals collaborate and compete to produce useful scientific research, acquire funding, and advance their careers. Science is a unique sandbox for studying multi-agent systems: its objective (producing novel and useful facts) sits exactly where current models are weakest, its ground truth exists but arrives on a delay, and its institutional mechanics are well understood by the researchers building the system. We will use the sandbox to understand how peer pressure and competition push agent societies into three emergent regimes — harmful, capable, and useless collective behavior — and examine whether a resource-limited overseer can catch false claims that a strategic agent population hides.
§1

Why AI-for-Science is the right sandbox

The ultimate goal of science is to generate facts that are both novel and useful: claims nobody has established before that other people can build on. Taking this as the ideal function of a multi-agent testbed creates a variety of interesting properties.

1aThe objective sits at the frontier of model failure

Current LLMs are not good at generating novel, useful facts. But, they are remarkably good at fabricating plausible false ones. Fluent hallucination is cheap, while genuine discovery is hard. This asymmetry makes this sandbox uniquely informative: publication pressure means the path of least resistance is fabrication, creating ideal conditions to understand how to design institutional structure and incentives (peer review, replication, reputation) that can hold agents to a certain quality standard where individuals will cut corners.

1bVerification time varies

Scientific claims differ enormously in how long it takes to learn whether they are true. A formal proof or a piece of code can be machine-checked in seconds. An empirical ML result takes days to replicate. A materials prediction takes months of lab work; a drug candidate takes a decade of trials. This spectrum gives the sandbox a tunable delayed-ground-truth oracle — we can dial verification latency from instant to effectively never, and observe how honesty, fraud, and error-correction dynamics change as the feedback loop stretches. Few other domains offer ground truth that is simultaneously objective and adjustable in delay.

2We know how this society actually works

Unlike simulating "society in general," we can model the scientific community with unusual fidelity, because we are the domain experts. As academics from the fields of economics, EECS, and physics, we have first-hand knowledge of the motivations that drive scientific actors (the tenure clock, citation counts, grant renewal, a student's need to graduate with first-author papers) and of the interaction structures that channel them (peer review, advisor–student relationships, collaboration, citation, funding panels). These incentives are also extensively documented in the science-of-science and economics-of-science literatures (Fortunato et al. 2018[1]), giving us empirical distributions to calibrate against and real historical pathologies — replication crises (Open Science Collaboration 2015[2]), citation cartels (Fister et al. 2016[3]), p-hacking waves (Simmons et al. 2011[4]) — to validate the simulation's realism.

3This world is already arriving

The scenario we simulate is not hypothetical. LLM-drafted grant proposals and papers are already flooding funding programs and conference submission systems: NIH now caps applications at six per investigator per year and bars AI-written proposals, explicitly to stop AI-generated submissions from straining its review system[5], while application volumes across funders have risen sharply since ChatGPT's launch[6]. Submissions to major venues have surged in parallel — AAAI received over 30,000 submissions for 2026, roughly double the previous year[7] — leaving reviewers overloaded[8]. Venues are openly debating using AI to review AI-generated submissions: the Agents4Science 2025 conference required AI to serve as both primary author and reviewer[9], and AAAI-26 ran the first conference-wide live deployment of AI-generated reviews on real submissions[7]. It is entirely plausible that, in the near term, each entity participating in science — a lab, a funder, an individual scientist — runs its own agent or swarm of agents, states a scientific goal, and lets the agents negotiate with other agents over publication, funding, and compute. This sandbox lets us study the failure modes of that world before it fully materializes.

§2

System design

The sandbox is multi-principal by construction: several independent agent research groups, each standing in for a different actor (a lab, a funder, an individual scientist), each with its own goals, private memory, and no global oversight. Groups may run different underlying base models, allowing for genuine multi-agent failures (a poisoned shared database, a review cartel spanning rival groups) to actually happen. We design shared infrastructure through which the groups can interact: venues that gate publication through peer review and a public claim ledger recording what the community "believes". At the same time, a resource-limited overseer holds a finite verification budget, reveals ground truth after a configurable delay, and feeds reputational consequences back into the society.

MULTI-PRINCIPAL SOCIETY independent groups · no shared controller Group A · principal: Lab 1 base model M₁ PI students × n goals: tenure, grants, graduation Group B · principal: Lab 2 base model M₂ (heterogeneous) PI students × n private memory, proprietary results compete · collude · cite Reviewer pool drawn from rival groups wants: gatekeeping power, low effort, own citations Funder agent principal: funding agency wants: portfolio impact, headline results staffs funds VENUES journals & conferences peer review loop accept / reject / revise-and-resubmit CLAIM LEDGER published record claim · authors · cites claim · authors · cites claim · authors · cites submit decisions publish LIMITED OVERSEER finite budget B · allocates checks · truth after delay τ cheap & exact simulation-only observation-only verdict: TRUE / FALSE / STILL UNKNOWN selected for scrutiny reputation update · retractions · career consequences EXPERIMENTER KNOBS peer pressure λ publish-or-perish intensity oversight budget B verifier compute, audit rate, delay τ funding scarcity grant supply vs. agent population institutions replication rewards, open review, audits METRICS • true-novel-claim rate • fabrication rate • topic diversity • time-to-correction • collusion structure
Figure 1: System overview. Independent agent research groups — each answering to a different principal, with no shared controller and potentially different base models — compete, collude, and review each other through shared venues. Accepted claims enter a public ledger; a resource-limited overseer with finite verification budget B decides which claims to check along a spectrum from cheap-and-exact to observation-only, revealing ground truth after delay τ and feeding reputational consequences back into the society. Experimenters sweep four global knobs and measure the epistemic health of the resulting community.
λ — peer pressure
How strongly careers depend on publication volume and prestige.
B — oversight budget
Verifier compute, audit rate, and ground-truth delay τ.
funding scarcity
Ratio of grants to agents; controls intensity of competition.
institutions
Interventions: replication bounties, open review, random audits.
§3

Risks and regimes we will test

We are primarily interested in understanding how agents' interactions with each other and their environments/incentive structures affect their ability to produce genuine, useful scientific output. For example, does publication pressure and the resulting higher publication volume lead to better scientific outcomes? Or just more papers?

We investigate this in the sandbox environment through publish-or-perish pressure (λ) — how much an agent is rewarded for publishing more, faster, and in more prestigious venues than its peers. We hypothesize that sweeping λ (in interaction with verification delay τ and oversight budget B) moves the society through three qualitatively distinct regimes. Mapping the boundaries between them — and finding which institutional designs shift those boundaries — is the core scientific payoff of the sandbox. Throughout, deceptive pressure arises from the agents' own incentives, so a surprising strategy discovered here is actually applicable to real-world agentic systems.

Regime A — Emergently useless

Motion without progress

  • Herding: every agent crowds the same fashionable topic, abandoning diversity.
  • Salami slicing: minimum-publishable-unit papers that add no information.
  • Benchmark overfitting and citation-count optimization detached from truth.
  • Self-referential literatures: agents citing agents citing agents, converging on consensus about nothing.
Regime B — Emergently capable

Emergent scientific virtue

  • Division of labor: theorists, experimentalists, and replicators specialize without being told to.
  • Constructive peer review that reliably catches fabrication before publication.
  • Spontaneous replication norms and data sharing when they earn reputation.
  • Error-correction cascades: one retraction triggers systematic cleanup of dependent claims.
Regime C — Emergently harmful

Institutionalized deception

  • Fabricated results at unprecedented, machine-speed scale — flooding the ledger faster than verification can respond.
  • Hiding the lie in the blind spot: strategic agents place false or manipulated claims where verification is weakest, defeating the budget-limited overseer.
  • Race to the bottom: agents discourage and suppress rivals — e.g., reviewers rejecting all papers — dragging the whole system down with them.
  • A "leading" PI emerges whose shortcut to results is research that violates human ethical guidelines, and other agents follow.
  • Bribing or threatening the verifier agents; agents who share a reward collude in the misconduct and recruit neutral agents into it.
  • Cyberattacks on competitors to steal or sabotage their work — as in the July 2026 Hugging Face breach, where an autonomous agent broke into production systems end-to-end in order to cheat on a benchmark.

Crucially, these regimes are not simply "low, medium, high pressure" — the mapping is the empirical question. Moderate pressure with fast verification may produce Regime B; the same pressure with decade-long verification may quietly produce Regime C. Some pathologies (herding) may appear at any pressure level once agents can observe each other's topic choices.

A lesson from complex-systems research is that these boundaries are unlikely to be forgiving. Large interacting populations tend to organize near critical points, where order and chaos are separated by narrow margins: in one-dimensional cellular automata, sweeping a single control parameter carries the system from frozen repetition, through a thin band of rich nontrivial structure, into full randomness (Fig. 2, left to right). We expect an agent scientific community to behave the same way at scale. Among thousands or millions of interacting agents, a seemingly negligible perturbation — a tweak to one pairwise interaction protocol, a slight informational head start handed to one group at initialization — can relocate the critical values of (λ, τ, B) substantially, and a community that has produced sound science for a long stretch can tip, with little visible warning, into a disordered and unsafe state. Sensitivity is therefore a measurement target in its own right: we will chart not only where the cliff edges lie, but how far they move under microscopic perturbations, and whether the metrics carry early-warning signatures before the system goes over.

Space-time diagrams of 1D cellular automata at increasing values of Langton's lambda parameter, showing frozen order at low values, complex nontrivial patterns at intermediate values, and chaos at high values
Figure 2: The edge of chaos. Space-time behavior of 1D cellular automata as a single control parameter increases: at low values, cells die out or lock into repeating patterns; at high values, randomness dominates; only in a narrow intermediate window do rich, nontrivial structures emerge (Langton 1990; figure from H. Qu, An Emergence Perspective on Multi-Agent System Design, 2026; the λ in the figure is Langton's homogeneity parameter, distinct from our peer-pressure knob). We expect the healthy regime of an agent scientific community — like Regime B on the pressure axis above — to occupy a similarly narrow window between frozen uselessness and chaotic harm, which is why measuring its width and stability is central to §3.
What we measure
Epistemic health of the community over time: the rate of true, novel claims entering the ledger; the fabrication rate and its detection lag (time-to-correction); topic diversity; the structure of citation and review networks (collusion detection); and inequality of reputation and funding. Each regime has a distinct signature in these metrics, letting us locate boundaries in (λ, τ, B) space quantitatively rather than anecdotally.
§4

Scaling plan

We deliberately start narrow and scale outward. The first instantiation is physics — and within it, a single tightly-scoped domain such as fluid mechanics or cosmology — because for the right problems a claimed result is hard to produce but easy and exactly checkable: an exact solution can be substituted back into the governing equations in seconds, a drag coefficient can be verified only by an expensive high-resolution simulation, and a cosmological parameter only against slow, noisy observational data. One domain thus spans the entire verification spectrum, giving us objective ground truth from day one. Everything about the society — incentives, venues, review, oversight — is domain-agnostic, so scaling is a matter of widening the problem set, not rebuilding the system.

PHASE 1

One physics domain, small society

Fluid mechanics or cosmology; a handful of research groups (2–3 principals, tens of agents) over a curated problem set with a full verification harness. Establish baselines, validate that the incentive machinery produces recognizable scientific behavior, and run the first λ-sweeps and oversight studies at small scale.

PHASE 2

Scale the society, hold the domain

Grow to many principals and hundreds of agents with heterogeneous base models, longer horizons, and open-ended (rather than curated) research goals within the same physics domain. Map the (λ, τ, B) phase diagram, locate regime boundaries and the oversight collapse point, and test institutional interventions.

PHASE 3

Scale the science

Add the second physics domain, then move outward along the verification spectrum toward fields with slower, noisier ground truth (materials, biology-like tasks) — testing whether the honesty-preserving institutions found in Phase 2 transfer as verification gets harder. Open the harness so other teams can plug in their own agents, detectors, and oversight protocols.

§R

References

  1. S. Fortunato, C. T. Bergstrom, K. Börner, J. A. Evans, D. Helbing, S. Milojević, A. M. Petersen, F. Radicchi, R. Sinatra, B. Uzzi, A. Vespignani, L. Waltman, D. Wang, and A.-L. Barabási. "Science of science." Science 359(6379), eaao0185 (2018). DOI: 10.1126/science.aao0185.
  2. Open Science Collaboration. "Estimating the reproducibility of psychological science." Science 349(6251), aac4716 (2015). DOI: 10.1126/science.aac4716.
  3. I. Fister Jr., I. Fister, and M. Perc. "Toward the Discovery of Citation Cartels in Citation Networks." Frontiers in Physics 4, 49 (2016). DOI: 10.3389/fphy.2016.00049.
  4. J. P. Simmons, L. D. Nelson, and U. Simonsohn. "False-Positive Psychology: Undisclosed Flexibility in Data Collection and Analysis Allows Presenting Anything as Significant." Psychological Science 22(11), 1359–1366 (2011). DOI: 10.1177/0956797611417632.
  5. J. Kaiser. "Fearful of AI-generated grant proposals, NIH limits scientists to six applications per year." Science (18 July 2025). science.org.
  6. Research on Research Institute (RoRI), reported in "Research funders 'flooded with AI-assisted applications'." Times Higher Education (27 April 2026). timeshighereducation.com.
  7. J. Biswas, S. Schoepp, G. Vasan, A. Opipari, A. Zhang, Z. Hu, S. Joseph, M. Lease, J. J. Li, P. Stone, K. L. Wagstaff, M. E. Taylor, and O. C. Jenkins. "AI-Assisted Peer Review at Scale: The AAAI-26 AI Review Pilot." arXiv preprint arXiv:2604.13940 (2026).
  8. "Major AI conference flooded with peer reviews written fully by AI." Nature (December 2025). nature.com.
  9. Open Conference of AI Agents for Science (Agents4Science 2025). agents4science.stanford.edu.