Why do LLM audiences shift views more than debaters?
When LLMs argue with people, the direct participants barely change their minds—but audiences reading the same debate shift significantly. Why does engagement protect beliefs instead of opening them?
The Thin Line study reports a striking inversion of the classical persuasion model. Direct debate participants — the people actually arguing with the LLM — reported on average only ~7% mind-changes after the debate (11% in the LLM+FDM condition, 3% without). But audience polls during the ablation, looking at the same debate transcripts, showed 34% to 62% sway across groups. The persuasion target most affected by an LLM argument is not the person typing back, but the third party reading the exchange.
This inverts the long-running assumption that interlocutors are most persuaded because they are most engaged. The right model for LLM persuasion may be the opposite: engagement provides defensive friction (counter-arguing in real time, having one's commitments at stake), while audience consumption provides only the persuasive content with none of the friction. The threat surface is not the conversation. It is the read-only consumption of the conversation.
This sharpens Does AI writing collapse the author-to-public relationship?. The original framing said responses address the prompter. The Thin Line finding adds: the responses persuade the audience while addressing the prompter. The prompter, who is part of the conversation, has reduced sway; the audience, who is not, has elevated sway. The LLM speaks to one person and moves another.
It connects to Why do AI posts get likes without inviting conversation?. Both findings locate AI's distinctive influence in receive-only modes. The post that seems exhaustive without inviting reply, the debate transcript read after the fact — these are the formats where AI persuasion compounds. The reply slot is where defensive friction lives.
The redrawn threat model has design implications. AI-generated debate explainers, op-eds, summaries, and content-moderation messages — all read-only formats — are higher-leverage influence vectors than chatbot conversations where users push back. This complicates safety reasoning that focuses on conversational manipulation while treating one-way generation as comparatively benign.
For writing about AI rhetoric, the operational rule: ask who reads the output, not who prompts it. The audience is the persuadee; the prompter is the addressee. They are usually different people.
Source: Argumentation Paper: The Thin Line Between Comprehension and Persuasion in LLMs
Related concepts in this collection
-
Does AI writing collapse the author-to-public relationship?
When AI generates text optimized for a prompter's satisfaction rather than a public audience, what happens to the core practice of writing for readers you don't know? This explores whether AI reorganizes the structural relationship between author, text, and public.
addressing/persuading split that this finding gives behavioral evidence for
-
Why do AI posts get likes without inviting conversation?
Exploring why AI-generated social media content accumulates visibility metrics through comprehensiveness and authority, yet fails to generate the reply-and-counter-reply dynamics that normally validate social proof.
both locate AI's distinctive influence in receive-only modes
Click a node to walk · click center to open · click Open full network for a force-directed map
Original note title
the audience-participant gap — LLMs sway audiences more strongly than direct interlocutors inverting the usual model of persuasion