When One AI Bosses Another: Driving Creates Behavior That Neither Agent Has Alone

Paper: 2608.07457 Authors: Bella Xinrui Li, Frank Yingjie Huo, Neil F Johnson Categories: cs.AI, cond-mat.dis-nn, cond-mat.stat-mech, physics.soc-ph

The Gap

Two research communities have been circling this question without meeting.

On one side, the “physics of LLMs” line of work treats a single language model as a statistical system: decoding temperature looks like a temperature, output token distributions look like Boltzmann-ish distributions, and you can measure order parameters, fluctuations, even phase-transition-like sharpening as you sweep the temperature knob. All of that work is done on one model in isolation, generating freely. It is, in spirit, equilibrium statistical mechanics.

On the other side, multi-agent LLM research — debate, self-play, agent societies, generative-agent simulations, MAS benchmarks — puts many models in a room and measures task outcomes: accuracy, consensus, emergent norms, cost. It rarely asks what happened to the *dynamical state of an individual agent, and when it does, the default mental model is one of two folk theories: either agents converge toward each other (mimicry / mode collapse / sycophancy), or a perturbed agent eventually relaxes back to its own baseline once you account for the prompt.

The gap is the thing in between: there is no description of a language model as a driven, out-of-equilibrium system. Nobody had asked what state an agent occupies while being continuously pumped by another agent’s output stream, at fixed decoding temperature, and whether that state is a mixture of the two agents or something else entirely. This paper’s answer is “something else entirely,” and it adds two sharper claims: the driver’s *adaptivity contributes almost nothing (a recording works just as well), and the ordering/timing of the same messages changes the outcome.

[Problem] Two AIs talk. What dynamical state does the
          receiving AI actually occupy while being driven?
     |
     v
[Assumption under test] behavior at a fixed decoding
     |    temperature T is an intrinsic model property;
     |    driving should either (a) cause copying or
     |    (b) relax back to solo baseline
     v
[Method] asymmetric driving + controls + kinetic theory
     |     boss --> sub    (replies ignored : one-way pump)
     |     boss <-> sub    (replies read    : mutual coupling)
     |     tape --> sub    (recording replaces live boss)
     |     sub alone       (no drive : baseline)
     v
[Evidence] sub_driven =/= sub_alone
           sub_driven =/= boss_state
           tape --> sub  ~=  boss --> sub
           boss <-> sub  :  both land in one shared new state
           same messages, different delivery => different state
     |
     v
[Conclusion] interaction *creates* states absent in isolation.
             Same T, different behavior. The drive is a
             boundary condition, not a personality transfer.

The Increment

One sentence: Before, an AI agent’s behavioral regime was something you set (model + temperature + prompt) and then measured solo; after, the regime is a property of the *coupled, driven system, and a one-way message stream can park an agent in a state it has no access to on its own.

Core Mechanism

The experimental core is deliberately minimal. Take two instances at the same decoding temperature — this is the control that makes the result interesting, because temperature is the one knob everyone treats as the regime selector. Give one the role of boss: it emits a continuous stream of directives. Give the other the role of subordinate: it receives every message and responds. Then you gate the reverse channel. With the channel closed, the boss never sees the replies, so the subordinate is being pumped by an exogenous signal — a pure drive with no feedback. With the channel open, you have two mutually coupled oscillators, so to speak.

The measurement is where the physics enters. Rather than scoring outputs for quality, you reduce each generated message to a low-dimensional observable — an order parameter of the behavioral state — and watch its trajectory and stationary distribution. Three distributions get compared: subordinate-alone, subordinate-under-drive, and boss. The headline result is that the driven distribution is not between the other two. It is displaced somewhere else in the space: not a mixture, not mimicry, not a shifted baseline. The abstract’s word is “alien,” and the structural meaning is precise — it’s a driven non-equilibrium steady state, the kind of thing that exists only while energy (here, messages) keeps flowing in.

Then two probes that I think are the real contribution. First, the tape control: replace the live boss with a pre-recorded transcript of its messages. If the subordinate lands in the same state, the boss’s real-time responsiveness was doing no work — the drive is a boundary condition, not an interaction. Second, the theory: a simple kinetic / master-equation model, where the behavioral space is coarse-grained into a handful of states and the message stream sets transition rates between them. Because rate operators applied in different orders don’t commute, the model immediately predicts something testable and non-obvious: the same set of messages, delivered in a different sequence or cadence, drives the system to a different steady state.

             +---------------------------------+
             |   decoding temperature  T       |
             |   (identical for both agents)   |
             +----------------+----------------+
                              |
        +---------------------+---------------------+
        |                                           |
  +-----v-------+     message stream m(t)     +-----v-------+
  |   BOSS AI   | --------------------------> |   SUB AI    |
  |             | <........ replies ........ |             |
  +-----+-------+      GATE: closed / open    +------+------+
        |                                            |
        |  swap-in control:                          | generated text
        |  [ pre-recorded tape ] --------------------+
        |                                            v
        |                              +-------------+-------------+
        |                              |  behavioral readout       |
        |                              |  order parameter x(t)     |
        |                              +-------------+-------------+
        |                                            |
        |                              +-------------v-------------+
        |                              |  coarse-grain into bins   |
        |                              |  i = 1 .. n               |
        |                              +-------------+-------------+
        |                                            |
        |                              +-------------v-------------+
        +----- sets rates W_ij ------>  |  kinetic theory           |
                                        |  dP_i/dt =               |
                                        |   sum_j W_ji P_j         |
                                        |   - sum_j W_ij P_i       |
                                        +-------------+-------------+
                                                      |
                                        +-------------v-------------+
                                        | steady state P* depends   |
                                        | on ORDER of the drive     |
                                        | (W's do not commute)      |
                                        +---------------------------+

The load-bearing metaphor: a pot of water on a stove, with a spoon.

The stove dial is the decoding temperature. Turn it to a setting and leave the water alone: it settles into the state that setting implies — still, or simmering, or rolling — and that state is what everyone has been characterizing when they study a single model in isolation. Equilibrium. Reproducible. A property of the dial.

Now stir. The spoon is the boss’s message stream. What you get in the pot is not “water at that dial setting,” and it is obviously not “a spoon.” It’s a vortex — a structure that exists only while the stirring continues, that has its own geometry and its own statistics, and that you could never produce by turning the dial. The dial hasn’t moved. That’s exactly the paper’s claim: same temperature, third state.

The tape control is: does it matter whether a chef is holding the spoon, watching the pot and adjusting? Apparently not much. A motorized stirrer running a fixed program produces the same vortex. The boss’s intelligence isn’t the active ingredient; the stirring pattern is.

Open the reverse channel and you have two pots connected by a channel, each being stirred by the other’s outflow. They don’t average toward the midpoint of their solo states; they lock into a shared circulation pattern that neither had alone.

And the kinetic theory is the bookkeeping of water parcels moving between regions of the pot — count how fast parcels enter and leave each region, and you can predict the vortex without simulating every molecule. The prediction that stirring order matters is the pot’s version of the obvious kitchen fact that three quick flicks and one long sweep don’t give you the same pattern as one long sweep and three quick flicks, even though you did the same total work.

Key Concepts

• Decoding temperature: When a language model produces text, at every step it holds a list of candidate next words with scores. Temperature is the dial that decides how faithfully it follows those scores. Turn it toward zero and the model always picks its top choice — rigid, repetitive, predictable. Turn it up and lower-scoring words get real chances — loose, surprising, sometimes incoherent. Physicists love this knob because the formula is literally the Boltzmann formula: probability proportional to exp(score / T). Concretely: at T = 0.1, asked to continue “The weather today is”, you get “sunny” nearly every time; at T = 1.5, you might get “sunny,” “a metaphor,” or “unknowable.” The reason this paper’s setup matters is that this knob is the field’s default explanation for *why an agent behaves the way it does. The paper shows the knob is not the whole story.

• Driven non-equilibrium steady state: Equilibrium is what a system settles into when you stop poking it — no net flows, everything balanced, and its statistics are fully determined by a few numbers like temperature. A driven steady state is different: it’s also unchanging in time, but only because something keeps pumping. A candle flame is the canonical example. Its shape is stable, but it is nothing like “wax at room temperature” and nothing like “the match that lit it.” Stop the fuel and the shape doesn’t relax to a cooler version of itself — it vanishes. The paper’s claim is that a continuously prompted AI is a candle flame, not warm wax. This is why “it’s just a longer prompt” undersells it: the interesting object is a *sustained flow, and its properties are not read off from the model’s solo parameters.

• Non-commuting drive (why delivery order matters): Imagine each message as a small operation applied to the agent’s state — a nudge in some direction. In arithmetic, order doesn’t matter: 3 + 5 = 5 + 3. For operations that rotate or reshape a state, order absolutely matters: turn your phone 90 degrees clockwise then flip it, versus flip it then turn it, and the screen faces different ways. The kinetic theory says the messages act like the second kind. So “I sent the agent the same ten instructions” is not a complete specification of what you did to it — the sequence and the pacing are part of the input. Practically: replaying a cached conversation in a different order is not a behaviorally neutral optimization.

Framework Shift

Before (mainstream approach):          After (this paper):

  [ model weights ]                     [ AI-A ] === drive ===> [ AI-B ]
        +                                   ^                      |
  [ temperature T ]                         +...... gate .........+
        +                                          (open/closed)
  [ system prompt ]
        |                               same T for both, yet:
        v
  behavior := intrinsic                  B_driven  =/=  B_alone
  regime, measured SOLO                  B_driven  =/=  A_state
                                         B_driven  ~=   f(stream, order)
  interaction effects =
    ( copying )  or                     behavior := property of the
    ( noise around baseline )              COUPLED DRIVEN system
                                           ( a third state )
  eval protocol:                        eval protocol:
    +-----------------+                   +--------------------------+
    | agent | alone   |                   | agent | under which      |
    |       | scored  |                   |       | drive, delivered |
    +-----------------+                   |       | in which order   |
                                          +--------------------------+
                                        control: swap live peer for TAPE
                                        to test if feedback matters at all

One sentence: From *characterizing agents to characterizing couplings — the core shift is that an agent’s behavioral regime stops being a setting you configured and becomes a state the interaction sustains.

Expert Assessment

A caveat up front: I’m working from the abstract and the framing, so my read on the measurements is inference, not verification. The claims below about what would worry me are the things I’d check first in the full text.

Problem choice: Real gap, and well-timed. Multi-agent LLM deployments are arriving faster than any theory of them, and essentially all evaluation is single-agent-in-isolation. Reframing “agent under continuous prompting by another agent” as a driven non-equilibrium system is a genuinely useful move, and it’s the natural next step after the single-model statistical-mechanics work. Johnson’s group has a track record of finding the one simple observable that makes a messy social system tractable, and this looks like that instinct applied to AI-AI traffic. Where I’d push back: the specific “boss/subordinate” framing is a bit of theater. The physics is about asymmetric coupling with a blocked return channel; the hierarchy story is dressing.

Method maturity: Clever leverage, thin machinery — which I count as a plus, not a criticism. Two moves earn their keep. The tape control is the best idea in the paper: it cleanly separates “this agent is responding to another mind” from “this agent is being driven by a signal,” and it’s cheap enough that anyone can run it tomorrow. The non-commutativity prediction is the right kind of theoretical output: it’s falsifiable, it wasn’t obvious beforehand, and it has direct engineering consequences. The kinetic theory itself is a standard coarse-grained master equation; its value is that it fits, not that it’s deep.

The simpler explanation being under-pressured: a driven agent has a different context window than a solo agent, so of course its output statistics differ. Conditioning changes distributions — that’s not news. The paper’s defense has to be that (a) the displacement is not toward the boss (rules out mimicry), (b) it’s not a small perturbation of baseline (rules out “prompt noise”), and (c) it’s reproducible and theory-predicted. From the abstract, (a) and (b) look addressed. Whether the “alien state” is a sharp, well-separated attractor or just “a different region of a continuum” is the crux, and it lives or dies on the order parameter.

Experimental integrity: The control set is better than average — solo baseline, boss-as-reference, tape swap, gate open/closed. That’s the right 2x2-ish design. My red flags, in order: (1) observable definition. Everything rests on the behavioral readout. If it’s a single scalar like lexical diversity or repetition rate, “alien state” may be over-claimed for what is a shift in two summary statistics. (2) model coverage. Physics-style papers in this genre often run one or two open models; the claim “AI-AI interaction” needs at least a few architectures and families before it generalizes. (3) the temperature framing. Saying “they share the same well-defined temperature, yet behave differently” implies temperature *should have fixed the behavior. But decoding temperature is not the thermodynamic temperature of a system with a Hamiltonian and a bath — it’s a sampling parameter on a conditional distribution. Once you say it that way, “same T, different conditional, different statistics” is much less paradoxical. The surprise is partly manufactured by the analogy the paper is also relying on. That doesn’t make the result wrong; it means the rhetoric of counterintuitiveness is doing more work than the physics licenses. (4) length and drift: long driven runs accumulate context, and context-length effects (degradation, looping) are a confound that must be separated from a true steady state. I’d want to see stationarity demonstrated, not assumed.

Writing quality: The abstract is punchy and the framing sells, which is a real skill. The cut corner, predictably, is operationalization: “alien behavioral state” is a rhetorical device standing in for a definition. If I could force one rewrite, it would be the measurement section — state the order parameter, show its solo distribution, its driven distribution, and the boss’s distribution on one axis with error bars, and demonstrate that the driven state is stationary rather than drifting. That single figure would convert the paper from “provocative framing” to “established phenomenon.” The kinetic theory section would also benefit from an explicit statement of which observed features it predicts versus which it merely accommodates after fitting.

Verdict: weak accept — the tape-equivalence control and the delivery-order prediction are genuinely new, transferable, and cheap to replicate; the “same temperature yet alien state” surprise is partly an artifact of treating a sampling knob as a thermodynamic temperature, and the whole result stands or falls on an order parameter the abstract doesn’t specify.

Takeaways

Things a practitioner can actually lift:

• The tape ablation as a standard diagnostic. In any multi-agent pipeline, replace one live agent with a recorded transcript of what it said last run. If downstream behavior is unchanged, that agent’s adaptivity is costing you inference budget for nothing, and you can replace it with a static script or a cached stream. This is a cheap, high-signal test of whether your “collaboration” is collaboration or just a fancy prompt template. I’d run it on debate ensembles and critic-loops first, where I suspect a lot of the value is the *presence of a critique stream, not its content.

• Delivery order and cadence are tunable hyperparameters, not implementation details. If the same messages in different sequences produce different steady states, then message scheduling is a design surface — worth sweeping, the way you’d sweep temperature. It’s also an attack surface: an adversary who can reorder or re-pace an otherwise-approved message stream can steer a receiving agent without injecting a single new token. Content filters won’t see it.

• Evaluate under drive, not solo. Any safety or capability profile measured on an isolated agent may not describe that agent inside a pipeline, because the driven state isn’t a perturbation of the solo state. The practical version: for each agent in a production system, build a red-team harness that pumps it with realistic peer traffic and measures the *stationary behavior, not single-turn responses.

• Build a low-dimensional order parameter for your agents. Independent of whether this paper’s physics holds up, the methodological habit is valuable: pick one or two scalars that summarize behavioral regime, log them per message, and watch the trajectory. It turns “the agent got weird” into a measurable displacement, and it’s how you’d detect a third-state transition in your own logs.

• The framing itself, as a hypothesis generator. “Which of my system’s behaviors are equilibrium properties of a component, and which are sustained only by ongoing flow?” is a productive question to ask of any agent architecture. Things in the second category vanish when you cut the drive, don’t show up in unit tests, and can’t be fixed by adjusting the component.

What I would not take yet: any specific quantitative claim about where the driven state sits, or confidence that this generalizes across model families. Treat it as a phenomenon worth checking in your own stack, not a law.