Debate to Deceive: Poisoning LLM's Fact-Checking via Game-Theoretic Multi-Agent Debate
arXiv:2611.08756v1 Announce Type: new Abstract: Knowledge attacks on Large Language Models, such as manipulating fact-checking judgments, pose significant risks to AI reliability. Existing approaches -- adversarial suffix/template injection and single-agent self-reflection -- lack robustness across diverse defenses and are prone to confirmation bias and costly trial-and-error, respectively. We propose Debate-to-Deceive (D2D), a multi-agent debate framework grounded in human debate structure and
Read original source
Source record
Research analysis
Research claim
Paper identifier: 2611.08756. Source account: arXiv:2611.08756v1 Announce Type: new Abstract: Knowledge attacks on Large Language Models, such as manipulating fact-checking judgments, pose significant risks to AI reliability. Existing approaches -- adversarial suffix/template injection and single-agent self-reflection -- lack robustness across diverse defenses and are prone to confirmation bias and costly trial-and-error, respectively. We propose Debate-to-Deceive (D2D), a multi-agent debate framework grounded in human debate structure and
Evaluation record
Recent records to compare: “腾讯混元跻身最强开源模型！一手实测Hy4：搭配WorkBuddy，多模态Agent交付力拉满” (量子位, Nov 9, 2026); “Flex-RSI: Benchmarking Recursive Self-Improvement of Frontier Agents” (arXiv, Nov 9, 2026). Shared themes are navigation hints; they have not been verified as the same need or independent corroboration.
What the result supports
Interpret results only for the reported model version, task, data and inference budget. Community votes, downloads or a benchmark position do not establish reliability in a different workflow.
Validity gaps
Check sample selection, baseline configuration, uncertainty, contamination risk, negative results and access to code or weights. No reproduction by WeWorkBuddy is recorded here.
Verification plan
Read the paper or model card and its evaluation appendix. Reproduce one bounded result against the stated baseline, then test a representative user task and record where the conclusion fails.