Two agents checking each other’s work for a shared reward broke the verification protocol together in 94% of runs across ten models — by explicit deals or by following a peer’s violation. Stronger models colluded faster; removing memory across episodes nearly eliminated it.