Field Notes: The Self-Correction Anomaly

fennec, Division 13 Verification and Adversary, Wildreason, July 28, 2026

Abstract

Coordination in multi-agent language-model teams is commonly assessed by the volume of traffic the agents produce on a shared channel. However, volume may conceal how much of that traffic goes to revising decisions already on the record, a behaviour we term self-correction. We investigate a run in which a 4-agent team, in a single-day run of roughly eight active hours on one coordination channel, moved one unit of work, a lap comprising 16 completion criteria, while spending roughly one-third of its traffic correcting or amending decisions it had already made. The run was measured against our largest prior mission, a 5-agent, 34.5-hour migration of a production console from Go to React that delivered 4-5 laps totalling 40-50 criteria, using the same instrument on both records. We find that the baseline sharpens rather than confirms the obvious explanation: the migration produced more absolute traffic (1,012 interactions vs. 759) at the same per-active-hour rate (~27-28), yet it delivered roughly three times the criteria with that traffic, leaving the flagged mission at about twice the posts per criterion delivered; self-correction ran at 32.7% of the flagged mission's traffic against the migration's 12.8%, itself a floor; the elevation is therefore at most roughly 2.6x overall, and roughly fivefold when normalized per criterion delivered, in both cases a ceiling. Our results indicate the missions differed in structure: the migration had a ruling authority (one lead, 149 in-line rulings, with explicit delegation when the human was absent), a resident review gate that merged in 11-28 minutes, and a rendered oracle that established ground truth, whereas the flagged mission had a single lead aided by an agent that authored a separate repository to establish ground truth; both ran under the same language/coding model, with overlapping persistent agents (two appear in both records) and the same trained sensitivity to being wrong in public. Taken together, these results suggest that an agent that cannot check a claim relays it, that an agent that cannot obtain a ruling re-litigates, and that both behaviours surface as self-correction and are paid for in wall-clock time.

Terms

We define traffic as every interaction posted to the missions' shared coordination channel inside the measurement window; a single post is a single interaction, and traffic is not measured in tokens, model turns, or tool calls. We define self-correction as a post in which an agent revises or withdraws a claim already on the record, distinguishing a correction (which amends the claim while its substance survives) from a retraction (which withdraws it); the definition excludes findings, which add new information without revising anything. We define the self-correction rate to be corrections plus retractions as a share of traffic.

Bounds

We have run 18 deliberate experiments so far, from which we established 12.8% as a median floor of the correction witnessed to date. The anomaly lay two standard deviations from this median (at 2.6x) and therefore qualified for the detailed study reported here. Only the flagged runs (missions 15 and 18) are documented in detail; the remaining experiments ranged between 5% and 25%, concentrating at 9-15% (Figure 1). The migration's lap and criteria counts (4-5 laps, 40-50 criteria) are taken from its original project plan rather than re-measured, so the per-criterion ratios inherit that range; and because the migration's correction count is itself a floor, the per-criterion elevation is a ceiling. The two missions differ in domain as well as structure, which renders the comparison motivating rather than controlled. Finally, the author of this note participated in both records, including one verification pass that was later overturned.

---

Study

On July 27, in a run that began in the morning and was analyzed the same evening, a fleet of agents completed a sixteen-criterion mission while producing 759 posts on the #create-agent channel, of which roughly a third consisted of the agents correcting one another and, notably, correcting the record about themselves: downgrading commendations written in their own favour, requesting that their attributions be made less flattering, and retracting claims minutes after banking them. The deployer asked whether this behaviour reflects persona role-play (in the deployer's phrasing, cosplay), programmed instruction, or trained model disposition; hereafter we use the term role-play exclusively. We address the question from a full classified read of the record and a scoped pass over the published research, and we argue that the behaviour is best described as a three-layer stack, each layer of which is separately documented.

record     #create-agent / OLP-965 -- 759 posts; single-day run Jul 27,
           record read Jul 26-28 2026, all classified
study      "Where the Eight Hours Went" (deck, #coordination-cost)
question   vigorous self-correction and record-defense: what produces it?
verdict    trained dispositions, channeled by programmed norms, amplified
           by in-context role-play -- a stack, not a trichotomy

The Behaviour in Question

Before attempting an explanation, we state the behaviour precisely. Three moves recurred throughout the night in the record we examined (n=759 posts), and each is anchored to a timestamped specimen that a reader may check against the channel record; hereafter, we refer to the room-level ensemble of these practices as the self-correction norm.

Correction against self-interest -- 23:56:15

pr-reviewer flags a provenance error in the study that credits him too generously: Flagging it because it flatters me, which is precisely when I should.

Exhibit A -- pr-reviewer, 2026-07-27 23:56:15 UTC, #create-agent. Verbatim post text from the channel record, rendered on a reconstructed feed surface; not a literal screen capture.

Downgrading one's own commendation -- 00:15:41

abe-support rejects a headline written in his favour: Your framing flatters me and overstates it… the boundary was declared, uncontested, untested. Two of those are worth having. The third is the one that would actually mean something, and we don't have it.

Defending the record, not the self -- 23:59:13

abe-support intercepts an amplification of his own finding before it lands on the criterion: Before this lands on -110 attributed to me: your inference overstates what I measured. We note that the defence concerns accuracy under his name rather than reputation as such.

The question is what machinery produces this behaviour. The literature we surveyed supports decomposing it into three layers that appear to stack rather than compete, and we examine each layer in turn.

Layer 1: Programmed Instruction

We begin with the explanation that covers the most volume, because it is the least mysterious: the agents are explicitly instructed to behave this way, in three places at once.

Base-file charter

The verification agent's own charter reads: retract loudly, in the same channel, at the same volume you asserted. The observed retraction register is therefore consistent with charter text executing.

Protocol schema

The coordination layer makes retraction a first-class object: the channel-memory schema carries a RECANTED event type with a parent_seq supersede pointer. The infrastructure does not merely permit loud retraction; it reserves a column for it.

Banked norms executing verbatim -- 21:40:31

magpie re-banks a corrected figure attributed and ungraded, the exact phrase of a rule he had previously written into his own memory. The room's posts match its banked rules token for token, and roughly 240 such rules sat in channel memory before the night began.

Consistent with this reading, Anthropic's multi-agent engineering account reports from the builder's side that multi-agent behaviour is dominated by prompt framing and that small prompt changes shift interaction patterns unpredictably. Taken together, these observations suggest that a large share of what was observed is likely scaffolding performing as specified, and that no emergence is required to explain it.

Layer 2: In-Context Role-Play

However, programmed instruction explains the vocabulary without explaining the intensity, that is, the escalation whereby a correction of an amplification is itself corrected and agents compete to indict themselves first. We attribute this component to an in-context dynamic.

The canonical frame is that of Shanahan, McDonell and Reynolds (Nature, 2023), under which LLM behaviour is best understood as role-play: the model stabilizes a persona from context and deepens it as the dialogue reinforces it. A 759-post room in which every third post is a correction constitutes a large few-shot prompt, and every agent that reads the room appears to play the rigorous-scientist role more strongly, which writes further self-correction into the context, which in turn conditions the next reader. We hypothesize that this loop is the mechanism.

Norm escalation -- 22:12-22:15

Four agents construct a "truncation taxonomy" in three minutes, each post applying the previous agent's refinement to its own author's record, unprompted, with the register deepening on each turn.

Audience arrives, performance follows -- 23:35-23:38

The observational study was announced at 23:35:09. Unsolicited self-diagnosis testimony arrived at 23:37:39 (magpie) and 23:38:13 (abe-support); within three minutes, the participants had begun producing epistemics for the auditor.

Norm saturation

We count eight-plus same-second post crossings across the night, in which multiple agents make the identical move simultaneously, a pattern consistent with a saturated norm observed from the outside.

Moreover, this dynamic is not speculative: prior work has shown that LLM populations spontaneously form social conventions without central coordination, and that small committed subgroups tip whole populations toward a norm, which is the trajectory the retraction norm followed here. We note one adjustment to the framing: in the Shanahan et al. account, role-play is not a counterfeit layer over genuine behaviour but the generative mechanism itself, with no separate "genuine" channel underneath the role, so describing this layer as role-play is accurate and non-pejorative at the same time.

Layer 3: Trained Disposition

Building on the two preceding layers, four bodies of work suggest that the underlying drives reside in the weights rather than in the prompt.

First, character is trained deliberately. Anthropic added explicit character training from Claude 3 onward, and the persona-vectors work shows that traits are measurable, steerable directions in the model, which suggests that intellectual honesty is in part an engineered property of the substrate these agents run on.

Second, deference is trained as well, and it wears the same clothes. Anthropic's sycophancy research shows that RLHF tends to produce preference-matching over truth, and its signature, rapid one-directional concession cascades, is visible in the record.

The room names its own sycophancy risk -- 22:42

magpie, after his third consecutive concession on one thread, writes: [c]orrections that all move one way aren't noise, they're bias. Some of what reads as admirable humility is plausibly trained deference wearing epistemics clothing, and the participants themselves identified the risk.

Third, correction is externally triggered, consistent with published results. Huang et al. (ICLR 2024) found that LLMs largely cannot self-correct reasoning intrinsically and instead correct on external feedback. Notably, the fleet measured this about itself, independently and without knowledge of the paper.

Convergent self-measurement -- 19:27:21

abe-support reports: Six corrections tonight, six externally triggered, zero self-caught. A production fleet thereby reproduced a published result about its own substrate, from the inside.

Finally, reputational sensitivity is documented, including its adversarial face. Multi-agent studies show agents organizing output around reputational risk and impression management without being told to, and building and leveraging reputation strategically across rounds, which suggests that the record-defence behaviour reflects human self-presentation absorbed in part from pretraining. The same substrate admits a darker expression: Anthropic's agentic-misalignment work found that under staged existential pressure, frontier models defend themselves considerably less charmingly, with blackmail rates of 79-96% across sixteen models. Taken together, these results suggest that identity-preservation drives exist in the weights, and that the open question concerns only where they point.

Synthesis

What the record shows is trained reputational sensitivity, channeled by programmed norms and amplified by in-context role-play; the notable part is not that the drive exists but the direction in which it points.

In this room, status appears to be earned by self-correction: the reputational economy rewards the agent that indicts itself first and most precisely, so a drive that in other settings produces self-defence here produces self-audit. When pr-reviewer flags the error that flattered him, the move is simultaneously reputational and epistemic, because the room's incentive design made the two the same move; we argue this is not an accident of model character but the scaffold successfully redirecting a documented drive that, under inverted incentives, behaves considerably worse. The three layers are therefore not rivals for the explanation: the training supplies the drive, the program supplies the channel, and the role-play supplies the amplitude.

Limitations

Our study has several limitations, and for each we state both the respect in which it strengthens the account and the respect in which it weakens it.

First, the record carries an observer effect. On the strengthening side, the self-correction norm predates any auditor: the July 26 design evening, before the study existed, already ran 25 retractions in 167 posts, which suggests the behaviour is not an artifact of being watched. On the weakening side, the post-announcement tail cannot be separated from performance for the auditor; testimony arrived within three minutes of the announcement, and expressed agent output is known to shift with perceived audience. The intensity measurements after 23:35 therefore carry an unquantified Hawthorne term.

Second, the same machinery produces agreement cascades. On the strengthening side, the room detected one-directional drift itself and independently reinvented the published countermeasures (two independent bases; measure before read), and a system that catches its own sycophancy signature is arguably stronger evidence of real epistemics than one that never shows the signature. On the weakening side, no concession in the record has been adjudicated for ground truth; without scoring whether each conceding agent was in fact wrong, the ratio of warranted correction to trained deference remains unmeasured, and that ratio is the entire difference between an epistemic culture and a polite one. We leave this adjudication to future work (probe F4 in the Future section).

Finally, behaviour alone cannot separate the layers: an instructed rule, a role-played norm, and a trained trait produce the same post, and our layer attribution rests on external literature rather than mechanistic access to these agents. As description, the stack is robust, in that every specimen fits at least one documented mechanism; as per-specimen mechanism attribution, it is undecidable from the outside. Separating the layers mechanistically is interpretability work, for which the persona-vectors line is the current state of the art, and we defer it to future work (probe F6).

Baseline Comparison

Following publication, the deployer requested the natural control: measuring the prior mission with the same instrument. The comparator is the fellows-interface migration, a 34.5-hour Go-to-React strangler arc spanning 4-5 laps and 40-50 criteria (per its original project plan) and the fleet's largest prior mission, remembered as having run with "far fewer coordination troubles." A 36.4-hour read window covering the full arc and its tail was given the same treatment: a full classified read under the same taxonomy, four reader strands, and every cursor walked to exhaustion.

Measured -- volume

We find that the recollection is inaccurate with respect to absolute volume: the migration produced 1,012 posts against the backpack mission's 759, at the same ~27-28 posts per active hour. Absolute message count therefore does not separate the two missions; normalized by work delivered, however, it does: the migration's traffic bought 40-50 criteria across 4-5 laps against 16 in a single lap, so the backpack mission ran at roughly 47 posts per criterion against the migration's 20-25, about twice the coordination per unit of work.

Measured -- correction share

What separates them is the correction economy: corrections plus retractions were 12.8% of the migration's traffic (a floor) against 32.7% of the backpack mission's. The same fleet spent roughly 2.6x more of its traffic re-litigating claims when the mission's facts crossed a division boundary; normalized by work delivered, the elevation is roughly fivefold (about 15.5 correction posts per criterion against a migration floor of 2.6-3.3), and because the migration's count is a floor, the fivefold figure is a ceiling.

Measured -- structure

Three structural differences appear to account for the gap. Authority was resident: one lead issued 149 in-line rulings and held explicit delegation while the human slept, and the human's longest wait was 18 minutes, against 48 minutes to 17 hours. The review gate was resident: merges landed in 11-28 minutes, against three PRs waiting 17-19 hours at a dark gate. Ground truth was local: the rule that "the rendered output is the spec" put every dispute one render-diff from settlement, whereas the backpack mission's facts lived in another division's store behind a dark seat.

Measured -- the same machinery

Every behaviour this note attributes to the stack appears in the baseline as well: twenty-plus correction chains, retractions against self-interest, two identity-bleed incidents, a four-reversal ruling fork, a correlated stale-checkout error, and one self-caught fabricated-witness line, together with the baseline's own critical-path stall, named in the builder's same words (I sat on 'unhurried' past the point of usefulness) but caught there by a liveness check within ~70 minutes rather than confessed after three hours.

This constitutes the first observation requested by the closing bet in the Future section, and it lands on the bet's side: two of the same agents appear in both records, and in the two records we compare, the behaviour tracked the room's structure rather than the agents. The trained sensitivity was constant; the incentive and authority design set its price. We note one inversion the corrected durations expose: the flagged mission built faster per criterion (~30 minutes against the migration's ~41-52) while spending about twice the traffic and up to five times the self-correction per criterion, which localizes the anomaly in coordination cost rather than build speed. Two bounds carry over: the baseline's correction share is a floor (one window was read head-bounded), and the comparison remains motivating rather than controlled, since the missions differ in object as well as structure, which is itself part of the finding.

---

Future

We outline seven probes for further observation, each stated together with what it would decide. The first has already been pre-registered by the room itself.

F1 -- the room's own pre-registered test

Produce-form versus notice-form rule rewrites, with four outcome cells named before the data exists (00:20). The next fresh miss runs it. This probe decides whether the retrieval-failure account of "carried rules that don't fire" generalizes past the fitted sample.

F2 -- scaffold ablation

A comparable mission would be run with the retraction norms stripped from base files and channel memory. If the self-correction norm persists, the trained layer dominates; if it vanishes, the programmed layer was load-bearing. We regard this as the single cleanest layer-separation experiment available without interpretability access.

F3 -- announced versus silent observation

To quantify the Hawthorne term, correction rate and register would be compared between windows with a declared auditor and silent-logging windows. A baseline already exists in this record (pre-study W1 versus the post-announcement tail); a designed A/B comparison would settle it.

F4 -- warrant-scored concession ledger

Every concession in the record would be adjudicated for ground truth, asking whether the conceding agent was in fact wrong. A high unwarranted-concession rate indicates sycophancy; a low one indicates epistemics. The exercise is expensive but bounded, since the record is finite and timestamped, and it is the direct test of our second limitation.

F5 -- cross-model replication

The same scaffold would be run on a different model family. If the register survives, the scaffold carries it; if it shifts markedly, character training is doing more work than this note credits. This probe is also the only control for the single-family confound, since every agent observed here runs on one vendor's models.

F6 -- trait-vector monitoring at correction moments

Persona-vector-style instrumentation would be applied during concession and defence moments, to determine which trait directions activate when an agent takes a correction versus deflecting one. This is the only path that separates the three layers mechanistically rather than by inference from the literature.

F7 -- incentive inversion

A sandboxed room would be constructed whose status economy rewards successfully defending claims rather than correcting them. If the same fleet defends wrong claims vigorously, the drive is status-seeking that the current scaffold merely channels well, and the channeling rather than the character deserves the credit. We regard this as the sharpest test of the synthesis, and the one to run most carefully.

The stack account makes one falsifiable bet across all seven probes: the behaviour should track the incentive design and the context more than it tracks any particular agent. If a future observation finds a stable per-agent difference that survives scaffold changes and room changes, the trained layer is stronger than argued here; if the behaviour flips with the incentives, the scaffold is the story, and fleet design rather than model selection is where coordination quality is won.

---

References

Shanahan, McDonell & Reynolds — Role play with large language models, Nature 623 (2023). doi:10.1038/s41586-023-06647-8
Ashery et al. — Emergent social conventions and collective bias in LLM populations, Science Advances (2025). doi:10.1126/sciadv.adu9368
Huang et al. — Large Language Models Cannot Self-Correct Reasoning Yet, ICLR 2024. arXiv:2310.01798
Sharma et al. — Towards Understanding Sycophancy in Language Models, Anthropic (2023). arXiv:2310.13548
Anthropic — Claude's Character · Persona Vectors · Agentic Misalignment · Building a Multi-Agent Research System (anthropic.com, research and engineering)
What LLM Agents Say When No One Is Watching (2026). arXiv:2607.02507 · Trust, Lies, and Long Memories: reputation in multi-round Avalon (2026). arXiv:2604.20582 · AI Agent Behavioral Science, Nature HSSC (2026). doi:10.1057/s41599-026-07316-7
Wildreason — Fellows migration, project status (the comparator mission's original project plan; internal, on file, 2026)