Beyond Accuracy: Behavioral Testing of NLP models with CheckList
Not on the map. Why?
Cited by 48 in LLM agents and tool use, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
Although measuring held-out accuracy has been the primary approach to evaluate generalization, it often overestimates the performance of NLP models, while alternative approaches for evaluating models either focus on individual tasks or on specific behaviors. Inspired by principles of behavioral testing in software engineering, we introduce CheckList, a task-agnostic methodology for testing NLP models. CheckList includes a matrix of general linguistic capabilities and test types that facilitate comprehensive test ideation, as well as a software tool to generate a large and diverse number of test cases quickly. We illustrate the utility of CheckList with tests for three tasks, identifying critical failures in both commercial and state-of-art models. In a user study, a team responsible for a commercial sentiment analysis model found new and actionable bugs in an extensively tested model. In another user study, NLP practitioners with CheckList created twice as many tests, and found almost three times as many bugs as users without it.
Key facts. Cited by 979 papers in the map (data through 7 Oct 2026). First posted on arXiv 8 May 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 151; 2022: 179; 2023: 159; 2024: 113; 2025: 114; 2026: 263.
979 papers.
Sort:
By area:
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
- 2024RULER: What's the Real Context Size of Your Long-Context Language Models?cited by 1,270
- 2023A Survey on Evaluation of Large Language Modelscited by 1,227
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2021Are NLP Models really able to Solve Simple Math Word Problems?cited by 861
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
- 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 619
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 457
- 2021Dynabench: Rethinking Benchmarking in NLPcited by 447
- 2021Measuring and Improving Consistency in Pretrained Language Modelscited by 361
- 2021AI and the Everything in the Whole Wide World Benchmarkcited by 340
38 more
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
- 2022Prompting GPT-3 To Be Reliablecited by 258
- 2021The GEM Benchmark: Natural Language Generation, its Evaluation and Metricscited by 239
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
- 2021Get Your Vitamin C! Robust Fact Verification with Contrastive Evidencecited by 222
- 2021Polyjuice: Generating Counterfactuals for Explaining, Evaluating, and Improving Modelscited by 219
- 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 218
- 2021Trustworthy AI: From Principles to Practicescited by 206
- 2021What Will it Take to Fix Benchmarking in Natural Language Understanding?cited by 200
- 2022WANLI: Worker and AI Collaboration for Natural Language Inference Dataset Creationcited by 200
- 2023"Kelly is a Warm Person, Joseph is a Role Model": Gender Biases in LLM-Generated Reference Letterscited by 196
- 2022Patching open-vocabulary models by interpolating weightscited by 187
- 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 187
- 2021Causal Inference in Natural Language Processing: Estimation, Prediction, Interpretation and Beyondcited by 177
- 2021XTREME-R: Towards More Challenging and Nuanced Multilingual Evaluationcited by 167
- 2022Dawn of the transformer era in speech emotion recognition: closing the valence gapcited by 155
- 2022Repairing the Cracked Foundation: A Survey of Obstacles in Evaluation Practices for Generated Textcited by 154
- 2021SituatedQA: Incorporating Extra-Linguistic Contexts into QAcited by 145
- 2023Should ChatGPT be Biased? Challenges and Risks of Bias in Large Language Modelscited by 144
- 2021CrossFit: A Few-shot Learning Challenge for Cross-task Generalization in NLPcited by 142
- 2022Rich Knowledge Sources Bring Complex Knowledge Conflicts: Recalibrating Models to Reflect Conflicting Evidencecited by 142
- 2023Stop Uploading Test Data in Plain Text: Practical Strategies for Mitigating Data Contamination by Evaluation Benchmarkscited by 139
- 2021VALSE: A Task-Independent Benchmark for Vision and Language Models Centered on Linguistic Phenomenacited by 134
- 2022Truncation Sampling as Language Model Desmoothingcited by 121
- 2023Increasing Diversity While Maintaining Accuracy: Text Data Generation with Large Language Models and Human Interventionscited by 121
- 2021Salient ImageNet: How to discover spurious features in Deep Learning?cited by 114
- 2022VL-CheckList: Evaluating Pre-trained Vision-Language Models with Objects, Attributes and Relationscited by 113
- 2021Robustness Gym: Unifying the NLP Evaluation Landscapecited by 107
- 2021Measure and Improve Robustness in NLP Models: A Surveycited by 107
- 2024Cognitive Bias in Decision-Making with LLMscited by 104
- 2022XAI for Transformers: Better Explanations through Conservative Propagationcited by 100
- 2023DyVal: Dynamic Evaluation of Large Language Models for Reasoning Taskscited by 100
- 2022Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLPcited by 99
- 2022State-of-the-art generalisation research in NLP: A taxonomy and reviewcited by 97
- 2021QA Dataset Explosion: A Taxonomy of NLP Resources for Question Answering and Reading Comprehensioncited by 91
- 2021Evaluating the Robustness of Neural Language Models to Input Perturbationscited by 87
- 2024CheckEval: A reliable LLM-as-a-Judge framework for evaluating text generation using checklistscited by 87
- 2021Evading the Simplicity Bias: Training a Diverse Set of Models Discovers Solutions with Superior OOD Generalizationcited by 83
50 most cited of 979 All 979 (JSON)
- 2026Do MLLM Judges Judge the Edit? Auditing Bias in Image Editing Evaluation with Verified Quality Preservation1 Oct 2026
- 2026Scoring Higher, Answering Worse: Mitigating Reward Hacking in Rubric-Based RL via Protocol-Level Rubrics30 Sep 2026
- 2026The Backdrop Exposes What the World Around an Agent Costs It29 Sep 2026
- 2026CARAT: Do Materials LLMs Reason or Recite?29 Sep 2026
- 2026It's Not What the Image Shows: Irrelevant Context Destabilises VLM Judges Without Informing Them29 Sep 2026
- 2026Active Budget Can Kill Sensitivity: Diagnosing and Repairing TopK Sparse Autoencoder Reliability29 Sep 2026
- 2026Multi-Channel Mitigation of Source-Trust Shortcuts in Fact-Checking RL Agents29 Sep 2026
- 2026Grounded Revision vs. Prior Injection: Probing Retrieval-Augmented Patent Claim Amendment29 Sep 2026
- 2026Almost Human, Except When It Matters: VoxParity and the Decisions a Voice Should Change28 Sep 2026
- 2026PairPref: When Should Memory Guide the Answer? A Benchmark for Contextual Preference Use28 Sep 2026
- 2026Prospective Interpretation Risk: Principled Communication Control Between LLMs27 Sep 2026
- 2026When Evidence Changes the Subject: Subject-Typed Claim Licensing for Learned Routing27 Sep 2026
38 more
- 2026Beyond Calibration: Do a Typed-Decision Model's Probabilities Obey the Probability Axioms?27 Sep 2026
- 2026Certifying Interventional Agreement Among Observationally Equivalent Causal Models26 Sep 2026
- 2026Solving Every Step Is Not Enough: Milestone Oracles Reveal a Composition Gap in LLM Math Reasoning26 Sep 2026
- 2026Do Evidence-Reading Diagnostics Improve Interface Selection in Small LLM Recommenders?25 Sep 2026
- 2026On Evaluating and Improving Conversational Agents in Production25 Sep 2026
- 2026Evaluating the accuracy of KV cache reuse techniques25 Sep 2026
- 2026JevAdvBench: A Benchmark and Black-Box Attacks for Reinforcement Learning for Calibrated Decisions Models25 Sep 2026
- 2026SWE-Prometheus: Measuring Engineering Governance Improvements in Real-World Repositories24 Sep 2026
- 2026Claim-Gated Source-Risk Auditing for Generative Search24 Sep 2026
- 2026Same Scores, Different Decisions: Evaluating JEV and Language Models for Legal Document Understanding23 Sep 2026
- 2026PotARCin: Multi-Dimensional Evaluation of Skill Acquisition in Abstract Reasoning Tasks23 Sep 2026
- 2026MICRO: Multi-Fidelity Active Search for Severe Error Discovery22 Sep 2026
- 2026SSP-Bench: A Hybrid Data Generation Framework for Safety, Security, and Privacy Evaluation21 Sep 2026
- 2026TimeLitmus: A Diagnostic Benchmark for Cross-Modal Understanding and Explanation Faithfulness in Event-Conditioned Time-Series Prediction21 Sep 2026
- 2026MAWILE: Multi-Axis Workbench for Inspecting LLM Evaluators18 Sep 2026
- 2026Beyond the Leaderboard: Counterfactual Diagnosis of End-to-End and VLA Driving Policies Under Domain Shift18 Sep 2026
- 2026QuranicMMLU: A Cognitively-Aware Benchmark for Evaluating Generative AI Solutions on Quranic Linguistic Knowledge18 Sep 2026
- 2026Hallucination-R1: Robustness-Oriented Paraphrase Generation for Factual Consistency18 Sep 2026
- 2026Evaluating Communicative Success in Machine-Translated Conversation17 Sep 2026
- 2026LocQE: Principled Domain Adaptation for Localisation Quality Estimation by Leveraging Post-Edits16 Sep 2026
- 2026Bad Genius: Counterfactual-Guided Harness Evolution Beyond Task-Specific Shortcuts16 Sep 2026
- 2026AURA: Agentic Diagnosis and Refinement for Production Recommender Systems at Scale15 Sep 2026
- 2026PIDS-Bench: Evaluating Prompt-Injection Detectors Under Over-Defense, Obfuscation, and Distribution Shift14 Sep 2026
- 2026Thought without systematicity? Evaluating reasoning models on rule induction tasks12 Sep 2026
- 2026From Token Probabilities to Semantic Constraints: Towards Declarative Probabilistic Evaluation of Language Models11 Sep 2026
- 2026GroundBench: A Factorized, Counterfactual Benchmark for Locating VLM Affordance Failures10 Sep 2026
- 2026GAUGE: When Not to Trust LLM-as-a-Judge in User-Simulated Evaluation of Task-Oriented Agents10 Sep 2026
- 2026New Evidence, Same Choice: Testing Physical Experiment Selection in Vision Language Models10 Sep 2026
- 2026Used, Mentioned, or Condemned? A Controlled Contrast-Set Diagnostic for the Use-Mention Distinction in Code-Mixed Hinglish Misogyny Detection6 Sep 2026
- 2026Measuring GEO Visibility: Prompt Corpora Define the Answer Market6 Sep 2026
- 2026Broken on Arrival: Silently Defective LLM Artifacts in Public Model Registries and How to Catch Them5 Sep 2026
- 2026The Normalization of Deviance in AI Development4 Sep 2026
- 2026Beyond Aggregate Scores: Behavioral Correctness Assumptions for Assessing Reference-Based Automatic Evaluation Methods4 Sep 2026
- 2026From Vision to Language: Investigating Causal Information Flow in Multimodal Decision-Making4 Sep 2026
- 2026ESPO: Error-Structured Prompt Optimization via Diagnose, Diversify, and Stabilize3 Sep 2026
- 2026The Dice Roll Method: A Standardized Protocol for Repeated-Query Auditing of Large Language Model Brand Recommendations3 Sep 2026
- 2026Beyond Scores: Understanding LLM-as-a-Judge Mechanisms in Summarization Evaluation1 Sep 2026
- 2026Automated Testing of LLM-Based Post Hoc Explainers Using Model Checking as an Oracle31 Aug 2026
50 newest of 979 All 979 (JSON)
- 2023DyVal: Dynamic Evaluation of Large Language Models for Reasoning Taskscited by 100
- 2022A Causal Framework to Quantify the Robustness of Mathematical Reasoning with Language Modelscited by 68
- 2023How Robust is GPT-3.5 to Predecessors? A Comprehensive Study on Language Understanding Taskscited by 58
- 2024Is Your Model Really A Good Math Reasoner? Evaluating Mathematical Reasoning with Checklistcited by 48
- 2023NEWTON: Are Large Language Models Capable of Physical Reasoning?cited by 45
- 2023COLA: Contextualized Commonsense Causal Reasoning from the Causal Inference Perspectivecited by 22
- 2023(Why) Is My Prompt Getting Worse? Rethinking Regression Testing for Evolving LLM APIscited by 21
- 2024Evaluating LLMs' Mathematical and Coding Competency through Ontology-guided Interventionscited by 20
- 2026Large Language Model Reasoning Failurescited by 20
- 2026RAGEN-2: Reasoning Collapse in Agentic RLcited by 16
- 2022Lila: A Unified Benchmark for Mathematical Reasoningcited by 13
- 2025Robust Answers, Fragile Logic: Probing the Decoupling Hypothesis in LLM Reasoningcited by 11
12 most cited of 44 All 44 (JSON)
- 2026Solving Every Step Is Not Enough: Milestone Oracles Reveal a Composition Gap in LLM Math Reasoning26 Sep 2026
- 2026Thought without systematicity? Evaluating reasoning models on rule induction tasks12 Sep 2026
- 2026From Token Probabilities to Semantic Constraints: Towards Declarative Probabilistic Evaluation of Language Models11 Sep 2026
- 2026Twin Worlds: Equivariance-Based Abstention for Evidence-Grounded Reasoning28 Aug 2026
- 2026The Consistency Dilemma in LLMs: Generator-Evaluator Agreement and Vulnerability to Mistakes16 Jun 2026
- 2026Caliper: Probing Lexical Anchors versus Causal Structure in LLMs3 Jun 2026
- 2026XDomainBench: Diagnosing Reasoning Collapse in High-Dimensional Scientific Knowledge Composition14 May 2026
- 2026Targeted Tests for LLM Reasoning: An Audit-Constrained Protocol12 May 2026
- 2026Temporal Reasoning Is Not the Bottleneck: A Probabilistic Inconsistency Framework for Neuro-Symbolic QA5 May 2026
- 2026Safety and accuracy follow different scaling laws in clinical large language models5 May 2026
- 2026TEMPER: Testing Emotional Perturbation in Quantitative Reasoning9 Apr 2026
- 2026RAGEN-2: Reasoning Collapse in Agentic RL7 Apr 2026
12 newest of 44 All 44 (JSON)
- 2024Dynamic Evaluation of Large Language Models by Meta Probing Agentscited by 54
- 2025Agentic Web: Weaving the Next Web with AI Agentscited by 43
- 2026ReliabilityBench: Evaluating LLM Agent Reliability Under Production-Like Stress Conditionscited by 31
- 2025ProbGuard: Proactive Runtime Monitoring for LLM Agent Safety via Probabilistic Predictioncited by 25
- 2025SOP-Bench: Complex Industrial SOPs for Evaluating LLM Agentscited by 19
- 2023Evolving Diverse Red-team Language Models in Multi-round Multi-agent Gamescited by 17
- 2024WebSuite: Systematically Evaluating Why Web Agents Failcited by 16
- 2025TAI3: Testing Agent Integrity in Interpreting User Intentcited by 7
- 2025RedDebate: Safer Responses Through Multi-Agent Red Teaming Debatescited by 7
- 2026Test-Driven AI Agent Definition (TDAD): Compiling Tool-Using Agents from Behavioral Specificationscited by 6
- 2026Willful Disobedience: Automatically Detecting Failures in Agentic Tracescited by 6
- 2026Position: Coding Benchmarks Are Misaligned with Agentic Software Engineeringcited by 3
12 most cited of 41 All 41 (JSON)
- 2026Prospective Interpretation Risk: Principled Communication Control Between LLMs27 Sep 2026
- 2026On Evaluating and Improving Conversational Agents in Production25 Sep 2026
- 2026SWE-Prometheus: Measuring Engineering Governance Improvements in Real-World Repositories24 Sep 2026
- 2026AURA: Agentic Diagnosis and Refinement for Production Recommender Systems at Scale15 Sep 2026
- 2026GAUGE: When Not to Trust LLM-as-a-Judge in User-Simulated Evaluation of Task-Oriented Agents10 Sep 2026
- 2026SIC-Agents: Benchmarking and Building an Adaptive Simulator for Pediatric Serious Illness Communication Training30 Aug 2026
- 2026No Judgment Without a Reason: Counterfactual Receipts for Versioned AI Evaluators21 Aug 2026
- 2026SpecPath: Testing Coding Agents Across Contract-Equivalent Specification Histories10 Aug 2026
- 2026Capability Is Not Propensity: Measuring Pressure-Robust Cooperative Behavior in Civic LLM Agents10 Aug 2026
- 2026Should We Type or Talk to LLM Agents? A Comprehensive Study of Voice and Keyboard Input Perturbations4 Aug 2026
- 2026Understanding Agent-Reactive Bugs at the Model-Harness Boundary: An Empirical Study of LLM Agent Issue Reports17 Jul 2026
- 2026Contrastive Reflection for Iterative Prompt Optimization29 Jun 2026
12 newest of 41 All 41 (JSON)
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 619
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 457
- 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 218
- 2023Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competitioncited by 65
- 2023Query-Efficient Black-Box Red Teaming via Bayesian Optimizationcited by 31
- 2024Goal-guided Generative Prompt Injection Attack on Large Language Modelscited by 22
- 2024Diversity Helps Jailbreak Large Language Modelscited by 9
- 2023Adversarial Fine-Tuning of Language Models: An Iterative Optimisation Approach for the Generation and Detection of Problematic Contentcited by 7
- 2024JailbreakLens: Visual Analysis of Jailbreak Attacks Against Large Language Modelscited by 7
- 2025SAGE: A Generic Framework for LLM Safety Evaluationcited by 7
12 most cited of 23 All 23 (JSON)
- 2026BiasMix-Finance: Post-Generation KYC Guardrails for LLM Portfolio Advice14 Aug 2026
- 2026Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing11 May 2026
- 2025Beyond Context: Large Language Models' Failure to Grasp Users' Intent24 Dec 2025
- 2025Do You Really Need a GPU to Guard Your LLM? CPU-Class Classifiers and Multi-Stage Pipelines for Safety Enforcement at Scale22 Dec 2025
- 2025Learning-Based Automated Adversarial Red-Teaming for Robustness Evaluation of Large Language Models21 Dec 2025
- 2025Black-Box Guardrail Reverse-engineering Attack6 Nov 2025
- 2025Who's the Evil Twin? Differential Auditing for Undesired Behavior9 Aug 2025
- 2025SAGE: A Generic Framework for LLM Safety Evaluation28 Apr 2025
- 2025Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs26 Apr 2025
- 2025aiXamine: Simplified LLM Safety and Security21 Apr 2025
- 2024Diversity Helps Jailbreak Large Language Models6 Nov 2024
- 2024JailbreakLens: Visual Analysis of Jailbreak Attacks Against Large Language Models12 Apr 2024
12 newest of 23 All 23 (JSON)
- 2022VL-CheckList: Evaluating Pre-trained Vision-Language Models with Objects, Attributes and Relationscited by 113
- 2023Benchmarking Robustness of Adaptation Methods on Pre-trained Vision-Language Modelscited by 30
- 2024B-AVIBench: Towards Evaluating the Robustness of Large Vision-Language Model on Black-box Adversarial Visual-Instructionscited by 26
- 2023How to Evaluate the Generalization of Detection? A Benchmark for Comprehensive Open-Vocabulary Detectioncited by 15
- 2025Can Vision-Language Models Evaluate Handwritten Math?cited by 10
- 2025RoboDriveVLM: A Novel Benchmark and Baseline towards Robust Vision-Language Models for Autonomous Drivingcited by 8
- 2026PSF-Med: Measuring and Explaining Paraphrase Sensitivity in Medical Vision Language Modelscited by 3
- 2026Mechanistically Guided LoRA Improves Paraphrase Consistency in Medical Vision-Language Modelscited by 2
- 2025Pathological Truth Bias in Vision-Language Modelscited by 1
- 2025Language-Guided Invariance Probing of Vision-Language Modelscited by 1
- 2026Step-Level Visual Grounding Faithfulness Predicts Out-of-Distribution Generalization in Long-Horizon Vision-Language Modelscited by 1
- 2026Consistent but Dangerous: Per-Sample Safety Classification Reveals False Reliability in Medical Vision-Language Modelscited by 1
12 most cited of 22 All 22 (JSON)
- 2026Do MLLM Judges Judge the Edit? Auditing Bias in Image Editing Evaluation with Verified Quality Preservation1 Oct 2026
- 2026It's Not What the Image Shows: Irrelevant Context Destabilises VLM Judges Without Informing Them29 Sep 2026
- 2026GroundBench: A Factorized, Counterfactual Benchmark for Locating VLM Affordance Failures10 Sep 2026
- 2026New Evidence, Same Choice: Testing Physical Experiment Selection in Vision Language Models10 Sep 2026
- 2026From Vision to Language: Investigating Causal Information Flow in Multimodal Decision-Making4 Sep 2026
- 2026MC-CXR: A Multi-Context Chest X-ray Benchmark for Context-Induced Disruption in Vision-Language Models25 Aug 2026
- 2026Visual Grounding in Zero-Shot Vision-Language Control6 Aug 2026
- 2026FBHM: Functional Benchmarking and Steering of VLMs for Hateful Meme Detection29 May 2026
- 2026Seeing Isn't Believing: Uncovering Blind Spots in Evaluator Vision-Language Models23 Apr 2026
- 2026Consistent but Dangerous: Per-Sample Safety Classification Reveals False Reliability in Medical Vision-Language Models22 Mar 2026
- 2026Step-Level Visual Grounding Faithfulness Predicts Out-of-Distribution Generalization in Long-Horizon Vision-Language Models6 Mar 2026
- 2026Mechanistically Guided LoRA Improves Paraphrase Consistency in Medical Vision-Language Models24 Feb 2026
12 newest of 22 All 22 (JSON)
- 2025CyberRAG: An Agentic RAG cyber attack classification and reporting toolcited by 11
- 2024MeTMaP: Metamorphic Testing for Detecting False Vector Matching Problems in LLM Augmented Generationcited by 4
- 2024WeQA: A Benchmark for Retrieval Augmented Generation in Wind Energy Domaincited by 4
- 2025MetaRAG: Metamorphic Testing for Hallucination Detection in RAG Systemscited by 2
- 2026Testing Retrieval-Augmented Generation Systems with Chunk Coveragecited by 2
- 2026Answer Presence Drives RAG Rewriting Gainscited by 1
- 2026Case-Aware LLM-as-a-Judge Evaluation for Enterprise-Scale RAG Systemscited by 0
- 2026Claim-Selective Certification for High-Risk Medical Retrieval-Augmented Generationcited by 0
- 2026Carolina Guide: A Multi-Agent RAG System with Institutional Guardrails for Academic Policy Assistancecited by 0
- 2026MissDiag: Diagnostic Evaluation of Incomplete-Knowledge Robustness in KGQA and KG-RAGcited by 0
- 2026Grounded Revision vs. Prior Injection: Probing Retrieval-Augmented Patent Claim Amendmentcited by 0
- 2026Multi-Channel Mitigation of Source-Trust Shortcuts in Fact-Checking RL Agentscited by 0
- 2026Multi-Channel Mitigation of Source-Trust Shortcuts in Fact-Checking RL Agents29 Sep 2026
- 2026Grounded Revision vs. Prior Injection: Probing Retrieval-Augmented Patent Claim Amendment29 Sep 2026
- 2026MissDiag: Diagnostic Evaluation of Incomplete-Knowledge Robustness in KGQA and KG-RAG19 Aug 2026
- 2026Testing Retrieval-Augmented Generation Systems with Chunk Coverage20 Jul 2026
- 2026Carolina Guide: A Multi-Agent RAG System with Institutional Guardrails for Academic Policy Assistance11 Jun 2026
- 2026Answer Presence Drives RAG Rewriting Gains4 Jun 2026
- 2026Claim-Selective Certification for High-Risk Medical Retrieval-Augmented Generation21 May 2026
- 2026Case-Aware LLM-as-a-Judge Evaluation for Enterprise-Scale RAG Systems23 Feb 2026
- 2025MetaRAG: Metamorphic Testing for Hallucination Detection in RAG Systems11 Sep 2025
- 2025CyberRAG: An Agentic RAG cyber attack classification and reporting tool3 Jul 2025
- 2024WeQA: A Benchmark for Retrieval Augmented Generation in Wind Energy Domain21 Aug 2024
- 2024MeTMaP: Metamorphic Testing for Detecting False Vector Matching Problems in LLM Augmented Generation22 Feb 2024
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
- 2023The Trickle-down Impact of Reward (In-)consistency on RLHFcited by 29
- 2024Unleashing the Power of Data Tsunami: A Comprehensive Survey on Data Assessment and Selection for Instruction Tuning of Language Modelscited by 29
- 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputscited by 25
- 2025Culture is Everywhere: A Call for Intentionally Cultural Evaluationcited by 10
- 2025Proactive defense against LLM Jailbreakcited by 6
- 2024Dynamic Normativity: Necessary and Sufficient Conditions for Value Alignmentcited by 3
- 2024Uncovering Factor Level Preferences to Improve Human-Model Alignmentcited by 2
- 2026When Context Flips, Safety Breaks: Diagnosing Brittle Safety in Aligned Language Modelscited by 2
- 2025A-IPO: Adaptive Intent-driven Preference Optimizationcited by 1
- 2026Scoring Higher, Answering Worse: Mitigating Reward Hacking in Rubric-Based RL via Protocol-Level Rubricscited by 0
- 2026Scoring Higher, Answering Worse: Mitigating Reward Hacking in Rubric-Based RL via Protocol-Level Rubrics30 Sep 2026
- 2026When Context Flips, Safety Breaks: Diagnosing Brittle Safety in Aligned Language Models27 May 2026
- 2025A-IPO: Adaptive Intent-driven Preference Optimization11 Oct 2025
- 2025Proactive defense against LLM Jailbreak6 Oct 2025
- 2025Culture is Everywhere: A Call for Intentionally Cultural Evaluation1 Sep 2025
- 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputs14 Mar 2025
- 2024Uncovering Factor Level Preferences to Improve Human-Model Alignment9 Oct 2024
- 2024Unleashing the Power of Data Tsunami: A Comprehensive Survey on Data Assessment and Selection for Instruction Tuning of Language Models4 Aug 2024
- 2024Dynamic Normativity: Necessary and Sufficient Conditions for Value Alignment16 Jun 2024
- 2023The Trickle-down Impact of Reward (In-)consistency on RLHF28 Sep 2023
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned23 Aug 2022
- 2024Semi-Truths: A Large-Scale Dataset of AI-Augmented Images for Evaluating Robustness of AI-Generated Image detectorscited by 17
- 2023Navigating the Structured What-If Spaces: Counterfactual Generation via Structured Diffusioncited by 5
- 2026Dataset-Level Metrics Attenuate Non-Determinism: A Fine-Grained Non-Determinism Evaluation in Diffusion Language Modelscited by 2
- 2026Dataset-Level Metrics Attenuate Non-Determinism: A Fine-Grained Non-Determinism Evaluation in Diffusion Language Models15 Apr 2026
- 2024Semi-Truths: A Large-Scale Dataset of AI-Augmented Images for Evaluating Robustness of AI-Generated Image detectors12 Nov 2024
- 2023Navigating the Structured What-If Spaces: Counterfactual Generation via Structured Diffusion21 Dec 2023
- 2025Measuring Diversity in Synthetic Datasetscited by 5
- 2021Data Synthesis for Testing Black-Box Machine Learning Modelscited by 1
- 2025Measuring Diversity in Synthetic Datasets12 Feb 2025
- 2021Data Synthesis for Testing Black-Box Machine Learning Models3 Nov 2021
- 2024RULER: What's the Real Context Size of Your Long-Context Language Models?cited by 1,270
- 2023A Survey on Evaluation of Large Language Modelscited by 1,227
- 2021Are NLP Models really able to Solve Simple Math Word Problems?cited by 861
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2021Dynabench: Rethinking Benchmarking in NLPcited by 447
- 2021Measuring and Improving Consistency in Pretrained Language Modelscited by 361
- 2021AI and the Everything in the Whole Wide World Benchmarkcited by 340
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
- 2022Prompting GPT-3 To Be Reliablecited by 258
- 2021The GEM Benchmark: Natural Language Generation, its Evaluation and Metricscited by 239
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
- 2021Get Your Vitamin C! Robust Fact Verification with Contrastive Evidencecited by 222
12 most cited of 816 All 816 (JSON)
- 2026The Backdrop Exposes What the World Around an Agent Costs It29 Sep 2026
- 2026CARAT: Do Materials LLMs Reason or Recite?29 Sep 2026
- 2026Active Budget Can Kill Sensitivity: Diagnosing and Repairing TopK Sparse Autoencoder Reliability29 Sep 2026
- 2026Almost Human, Except When It Matters: VoxParity and the Decisions a Voice Should Change28 Sep 2026
- 2026PairPref: When Should Memory Guide the Answer? A Benchmark for Contextual Preference Use28 Sep 2026
- 2026When Evidence Changes the Subject: Subject-Typed Claim Licensing for Learned Routing27 Sep 2026
- 2026Beyond Calibration: Do a Typed-Decision Model's Probabilities Obey the Probability Axioms?27 Sep 2026
- 2026Certifying Interventional Agreement Among Observationally Equivalent Causal Models26 Sep 2026
- 2026Do Evidence-Reading Diagnostics Improve Interface Selection in Small LLM Recommenders?25 Sep 2026
- 2026JevAdvBench: A Benchmark and Black-Box Attacks for Reinforcement Learning for Calibrated Decisions Models25 Sep 2026
- 2026Claim-Gated Source-Risk Auditing for Generative Search24 Sep 2026
- 2026Same Scores, Different Decisions: Evaluating JEV and Language Models for Legal Document Understanding23 Sep 2026
12 newest of 816 All 816 (JSON)