Large language model agents in social deduction games must reason and speak under hidden roles, shifting public beliefs, and social pressure. Existing methods mainly target final win rate through strategic prompting, belief modeling, or reinforcement learning, but they leave the utterance-level trade-off between belief correction and social risk largely implicit. In false-consensus intervention, useful private information can move the group toward the truth, while poorly timed or overly direct speech can trigger suspicion or rejection. We propose PACR-Pro, a risk-aware rhetorical decision framework for false-consensus intervention. PACR-Pro maps each speaking step to consensus-conflict encoding, structured candidate-action generation, Pareto-based selection, and risk-adaptive utterance realization. A dual-branch Epistemic-Social Critic scores candidate actions, and a state-conditioned 𝜆 policy adjusts the trade-off between epistemic value and social safety. We train these decision modules offline from historical games and evaluate PACR-Pro on One Night Ultimate Werewolf (ONUW) as the test platform. Experiments on standard ONUW games and the Wolf-Pack Induction Benchmark show that PACR-Pro achieves the best mixed-agent win rate, the highest attack win rate, the lowest attack vote rate, and the smallest attack-control win-rate gap among all baselines.

LLMs demonstrate remarkable utility but remain vulnerable to jailbreak attacks that aim to elicit harmful responses. Existing defenses, including post-training alignment and prompt engineering, rely on training on safety-annotated datasets and safe prompt templates, struggling with adaptability to out-of-distribution (OOD) attacks. Steering internal representations of LLMs provides real-time adjustments to defend against OOD attacks. However, it struggles with maintaining model utility, since modifying the representation disrupts the forward pass of inference. It barely considers the competitive objectives of helpfulness and harmlessness in LLMs. We argue that adversarial game-based approaches promise a solution for conflicts between the two objectives. In this paper, we propose Adversarial Game Defense (AGD), an adversarial game-based defense method that dynamically adjusts LLMs’ internal representations to achieve a balanced trade-off between helpfulness and harmlessness. AGD first proposes an interquartile range (IQR) method to detect abnormal attention weights and correct the abnormal weights via adversarial training. AGD adopts a bi-level optimization to play a two-player variable-sum game to approach Nash Equilibrium (NE), where the two players adversarially refine head activations for helpfulness and harmlessness respectively. Furthermore, AGD applies an expert model to next-token sampling to generate safer responses. Experiments show that AGD significantly improves LLMs’ safety over all baselines.

Low-resource languages (LRLs) face challenges in supervised neural machine translation (NMT) due to limited parallel data, prompting research in unsupervised NMT.Unsupervised NMT (UNMT), without requiring ground truth, provides solutions for LRL translations using synthetic pseudo-parallel data and parallel data from auxiliary language pairs. However, they usually encounter translation errors, including errors from synthetic data and from auxiliary language pairs with linguistic biases.We argue that large language models (LLMs) mitigate UNMT’s translation errors by dynamically organizing auxiliary languages in prompts to improve LRL translations. In this paper, we propose PrObability-driven Meta-graph Prompter (POMP), an approach employing a dynamic graph to organize multiple auxiliary languages, to prompt LLMs in LRL translations. POMP proposes a language-specific meta-graph that dynamically samples multiple translation paths to organize auxiliary languages in constructing prompts. Following the path, POMP prompts LLMs to translate with a mixture of auxiliary languages. We achieve the meta-graph’s evolution by back-propagating evaluation scores to update probabilities on the graph.Our experimental improvements show POMP’s effectiveness on LRLs’ translation.