PreprintCited by 1

Epistemic Sybil Resistance: Multiplying AI Agents Without Multiplying Evidence

Bara, Marc·2026·arXiv

Abstract

Multi-agent AI systems improve inference by spawning agents and synthesizing reports. But another agent is not another observation: apparently independent reports may descend from the same evidence, and genuinely independent evidence can produce nearly identical reports. We formalize this as an epistemic Sybil problem. A report Z is an epistemic Sybil extension relative to reports R when I(Theta; Z | R) = 0. No report-only aggregator can generally distinguish replication from independent corroboration: identical reports can warrant different posteriors under unobserved ancestry. A Gaussian shared-root model shows common ancestry does not imply complete redundancy. Repeated extraction adds information toward a source-level ceiling, and correlated extraction errors, which a shared base model can induce among independent agents, lower that ceiling further. We test these predictions with more than 20,000 controlled LLM-agent report and extraction calls on synthetic evidentiary documents. Holding one evidence root fixed while report multiplicity rises from 1 to 32 collapses naive posterior coverage from 0.940 to 0.263. Holding report count fixed while evidence-root multiplicity rises from 1 to 16 closes the gap, and the aggregators are statistically indistinguishable at k = 16. The agent's replicate extraction errors are correlated (gamma_cal = 0.719, estimated out of sample), and a correlated-extraction aggregator restores calibration accordingly. A controlled manipulation isolates representation similarity from evidential ancestry. It changes a report-space deduplication mechanism's mean inferred cluster count by 1.425 (95% CI [1.363, 1.485]), whereas a fourfold change in true ancestry changes it by only 0.040 ([-0.045, 0.120]). Collective inference should therefore track evidential ancestry and dependence, not agent or report multiplicity or similarity.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

DataCite · 10.48550/arxiv.2609.01873

Cites

1 of 1 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 27

  1. Berriaud, D., and Wattenhofer, R. (2026). Breaking the Illusion of Artificial Consensus: Clone-Robust Weighting for Arbitrary Metric Spaces. arXiv:2602.24024. · arXiv
  2. Blackwell, D. (1953). Equivalent comparisons of experiments. Annals of Mathematical Statistics, 24(2), 265-272.
  3. Bovens, L., and Hartmann, S. (2002). Bayesian Networks and the Problem of Unreliable Instruments. Philosophy of Science, 69(1), 29-72.
  4. Burnat, F. A. D., and Davidson, B. I. (2026). Quotient Semivalues for False-Name-Resistant Data Attribution. arXiv:2605.07663. · arXiv
  5. Cheney, J., Ahmed, A., and Acar, U. A. (2011). Provenance as dependency analysis. Mathematical Structures in Computer Science , 21(6), 1301-1337. https://doi.org/10.1017/S0960129511000211. · DOI
  6. Clemen, R. T., and Winkler, R. L. (1999). Combining probability distributions from experts in risk analysis. Risk Analysis, 19(2), 187-203.
  7. Clemen, R. T., and Winkler, R. L. (2007). Aggregating probability distributions. In W. Edwards, R. F. Miles Jr., and D. von Winterfeldt (Eds.), Advances in Decision Analysis. Cambridge University Press.
  8. Das Sarma, A., Dong, X. L., and Halevy, A. (2011). Data Integration with Dependent Sources. Proceedings of the 14th International Conference on Extending Database Technology (EDBT), 401-412.
  9. DeMarzo, P. M., Vayanos, D., and Zwiebel, J. (2003). Persuasion bias, social influence, and unidimensional opinions. Quarterly Journal of Economics, 118(3), 909-968.
  10. Dietrich, F., and List, C. (2004). A model of jury decisions where all jurors have the same evidence. Synthese, 142(2), 175-202. https://doi.org/10.1007/s11229-004-1276-z. · DOI
  11. Enke, B., and Zimmermann, F. (2019). Correlation neglect in belief formation. Review of Economic Studies, 86(1), 313-332.
  12. Golub, B., and Jackson, M. O. (2010). Naïve learning in social networks and the wisdom of crowds. American Economic Journal: Microeconomics, 2(1), 112-149.
  13. Julier, S. J., and Uhlmann, J. K. (1997). A non-divergent estimation algorithm in the presence of unknown correlations. Proceedings of the American Control Conference, 2369-2373.
  14. Kish, L. (1965). Survey Sampling. Wiley.
  15. Kong, Y., and Schoenebeck, G. (2019). An Information Theoretic Framework for Designing Information Elicitation Mechanisms That Reward Truth-telling. ACM Transactions on Economics and Computation , 7(1), Article 2, 1-33. https://doi.org/10.1145/3296670. · DOI
  16. Kuncheva, L. I., Whitaker, C. J., Shipp, C. A., and Duin, R. P. W. (2003). Limits on the Majority Vote Accuracy in Classifier Fusion. Pattern Analysis and Applications, 6(1), 22-31.
  17. Lee, D., and Kim, J. (2026). A Failure-Mode Benchmark for Polymorphic Sybil Poisoning in RAG. arXiv:2607.03739. · arXiv
  18. McLaughlin, S. P., Evans, R. J., and Krishnamurthy, V. (2003). Data incest removal in a survivable estimation fusion architecture. Proceedings of the Sixth International Conference of Information Fusion.
  19. Olsson, E. J. (2002). Corroborating Testimony, Probability and Surprise. British Journal for the Philosophy of Science, 53(2), 273-288.
  20. Pedroso, L., Batista, P., and Heemels, W. P. M. H. (2026). Overlapping Covariance Intersection: Fusion with Partial Structural Knowledge of Correlation from Multiple Sources. arXiv:2603.16768. · arXiv
  21. Ramchurn, S. D., Huynh, T. D., Wu, F., Ikuno, Y., Flann, J., Moreau, L., Fischer, J. E., Jiang, W., Rodden, T., Simpson, E., Reece, S., Roberts, S., and Jennings, N. R. (2016). A Disaster Response System based on Human-Agent Collectives. Journal of Artificial Intelligence Research, 57, 661-708.
  22. Sherman, J., and Morrison, W. J. (1950). Adjustment of an Inverse Matrix Corresponding to a Change in One Element of a Given Matrix. The Annals of Mathematical Statistics, 21(1), 124-127. https://doi.org/10.1214/aoms/1177729893. · DOI · Paper page
  23. Williams, P. L., and Beer, R. D. (2010). Nonnegative Decomposition of Multivariate Information. arXiv:1004.2515. · arXiv
  24. Winkler, R. L. (1981). Combining probability distributions from dependent information sources. Management Science, 27(4), 479-488.
  25. Wu, Z. (2026). Split the Labor: Separating Evidence Interpretation from Decision Aggregation. arXiv:2608.14509. · arXiv
  26. Xu, H. (2026). Mesh Inference: A Formal Model of Collective Inference Without a Center. arXiv:2606.19537. · arXiv
  27. Yan, C., Yue, Z., Zhao, F., Lin, E., Jia, L., Tong, H., Lyu, M., Sun, C., and Zeng, Y . (2026). When Truth Is Distributed: Misinformation Derails Collective Fact Recovery in LLM-Based Multi-Agent Systems. arXiv:2608.03421. · arXiv

Authors
Bara, M.
Venue
arXiv
Publisher
arXiv
Published
2026
References
1
Type
Preprint

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review