Epistemic Sybil Resistance: Multiplying AI Agents Without Multiplying Evidence
Abstract
Multi-agent AI systems improve inference by spawning agents and synthesizing reports. But another agent is not another observation: apparently independent reports may descend from the same evidence, and genuinely independent evidence can produce nearly identical reports. We formalize this as an epistemic Sybil problem. A report Z is an epistemic Sybil extension relative to reports R when I(Theta; Z | R) = 0. No report-only aggregator can generally distinguish replication from independent corroboration: identical reports can warrant different posteriors under unobserved ancestry. A Gaussian shared-root model shows common ancestry does not imply complete redundancy. Repeated extraction adds information toward a source-level ceiling, and correlated extraction errors, which a shared base model can induce among independent agents, lower that ceiling further. We test these predictions with more than 20,000 controlled LLM-agent report and extraction calls on synthetic evidentiary documents. Holding one evidence root fixed while report multiplicity rises from 1 to 32 collapses naive posterior coverage from 0.940 to 0.263. Holding report count fixed while evidence-root multiplicity rises from 1 to 16 closes the gap, and the aggregators are statistically indistinguishable at k = 16. The agent's replicate extraction errors are correlated (gamma_cal = 0.719, estimated out of sample), and a correlated-extraction aggregator restores calibration accordingly. A controlled manipulation isolates representation similarity from evidential ancestry. It changes a report-space deduplication mechanism's mean inferred cluster count by 1.425 (95% CI [1.363, 1.485]), whereas a fourfold change in true ancestry changes it by only 0.040 ([-0.045, 0.120]). Collective inference should therefore track evidential ancestry and dependence, not agent or report multiplicity or similarity.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Work on epistemic Sybil resistance tracks evidence ancestry to prevent copied or correlated evidence from appearing independent.
“Work on epistemic Sybil resistance tracks evidence ancestry to prevent copied or correlated evidence from appearing independent [3].”
From Authorization for Self-Modifying AI Agent Populations: Conserving Authority across Replacement, Forking, and Rollback (2026) · cites this paper as [3]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Louck, Y. (2026) · arXiv · doi:10.48550/arxiv.2606.24322 · cited 1×
“…propagation in multi-agent systems; Xu (2026) uses content-addressed lineage as a global side channel in decentralized mesh inference; Louck (2026) binds authority to origin and preserves it through subsequent transformations; Lee and Kim (2026) demonstrate a complementary failure in…”
Flagged first, then by citations
Research works printed but not linked: 27
- Berriaud, D., and Wattenhofer, R. (2026). Breaking the Illusion of Artificial Consensus: Clone-Robust Weighting for Arbitrary Metric Spaces. arXiv:2602.24024. · arXiv
- Blackwell, D. (1953). Equivalent comparisons of experiments. Annals of Mathematical Statistics, 24(2), 265-272.
- Bovens, L., and Hartmann, S. (2002). Bayesian Networks and the Problem of Unreliable Instruments. Philosophy of Science, 69(1), 29-72.
- Burnat, F. A. D., and Davidson, B. I. (2026). Quotient Semivalues for False-Name-Resistant Data Attribution. arXiv:2605.07663. · arXiv
- Cheney, J., Ahmed, A., and Acar, U. A. (2011). Provenance as dependency analysis. Mathematical Structures in Computer Science , 21(6), 1301-1337. https://doi.org/10.1017/S0960129511000211. · DOI
- Clemen, R. T., and Winkler, R. L. (1999). Combining probability distributions from experts in risk analysis. Risk Analysis, 19(2), 187-203.
- Clemen, R. T., and Winkler, R. L. (2007). Aggregating probability distributions. In W. Edwards, R. F. Miles Jr., and D. von Winterfeldt (Eds.), Advances in Decision Analysis. Cambridge University Press.
- Das Sarma, A., Dong, X. L., and Halevy, A. (2011). Data Integration with Dependent Sources. Proceedings of the 14th International Conference on Extending Database Technology (EDBT), 401-412.
- DeMarzo, P. M., Vayanos, D., and Zwiebel, J. (2003). Persuasion bias, social influence, and unidimensional opinions. Quarterly Journal of Economics, 118(3), 909-968.
- Dietrich, F., and List, C. (2004). A model of jury decisions where all jurors have the same evidence. Synthese, 142(2), 175-202. https://doi.org/10.1007/s11229-004-1276-z. · DOI
- Enke, B., and Zimmermann, F. (2019). Correlation neglect in belief formation. Review of Economic Studies, 86(1), 313-332.
- Golub, B., and Jackson, M. O. (2010). Naïve learning in social networks and the wisdom of crowds. American Economic Journal: Microeconomics, 2(1), 112-149.
- Julier, S. J., and Uhlmann, J. K. (1997). A non-divergent estimation algorithm in the presence of unknown correlations. Proceedings of the American Control Conference, 2369-2373.
- Kish, L. (1965). Survey Sampling. Wiley.
- Kong, Y., and Schoenebeck, G. (2019). An Information Theoretic Framework for Designing Information Elicitation Mechanisms That Reward Truth-telling. ACM Transactions on Economics and Computation , 7(1), Article 2, 1-33. https://doi.org/10.1145/3296670. · DOI
- Kuncheva, L. I., Whitaker, C. J., Shipp, C. A., and Duin, R. P. W. (2003). Limits on the Majority Vote Accuracy in Classifier Fusion. Pattern Analysis and Applications, 6(1), 22-31.
- Lee, D., and Kim, J. (2026). A Failure-Mode Benchmark for Polymorphic Sybil Poisoning in RAG. arXiv:2607.03739. · arXiv
- McLaughlin, S. P., Evans, R. J., and Krishnamurthy, V. (2003). Data incest removal in a survivable estimation fusion architecture. Proceedings of the Sixth International Conference of Information Fusion.
- Olsson, E. J. (2002). Corroborating Testimony, Probability and Surprise. British Journal for the Philosophy of Science, 53(2), 273-288.
- Pedroso, L., Batista, P., and Heemels, W. P. M. H. (2026). Overlapping Covariance Intersection: Fusion with Partial Structural Knowledge of Correlation from Multiple Sources. arXiv:2603.16768. · arXiv
- Ramchurn, S. D., Huynh, T. D., Wu, F., Ikuno, Y., Flann, J., Moreau, L., Fischer, J. E., Jiang, W., Rodden, T., Simpson, E., Reece, S., Roberts, S., and Jennings, N. R. (2016). A Disaster Response System based on Human-Agent Collectives. Journal of Artificial Intelligence Research, 57, 661-708.
- Sherman, J., and Morrison, W. J. (1950). Adjustment of an Inverse Matrix Corresponding to a Change in One Element of a Given Matrix. The Annals of Mathematical Statistics, 21(1), 124-127. https://doi.org/10.1214/aoms/1177729893. · DOI · Paper page
- Williams, P. L., and Beer, R. D. (2010). Nonnegative Decomposition of Multivariate Information. arXiv:1004.2515. · arXiv
- Winkler, R. L. (1981). Combining probability distributions from dependent information sources. Management Science, 27(4), 479-488.
- Wu, Z. (2026). Split the Labor: Separating Evidence Interpretation from Decision Aggregation. arXiv:2608.14509. · arXiv
- Xu, H. (2026). Mesh Inference: A Formal Model of Collective Inference Without a Center. arXiv:2606.19537. · arXiv
- Yan, C., Yue, Z., Zhao, F., Lin, E., Jia, L., Tong, H., Lyu, M., Sun, C., and Zeng, Y . (2026). When Truth Is Distributed: Misinformation Derails Collective Fact Recovery in LLM-Based Multi-Agent Systems. arXiv:2608.03421. · arXiv
Cited by
Sorted by citations
Zhu, G., & Wang, C. (2026) · arXiv · doi:10.48550/arxiv.2610.00347
- Authors
- Bara, M.
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2026
- arXiv
- 2609.01873
- References
- 1
- Type
- Preprint
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review