Discovering Language Model Behaviors with Model-Written Evaluations
On the map: LLM alignment / RLHF / preference optimisation → Human values and AI feedback alignment
Abstract (arXiv)
As language models (LMs) scale, they develop many novel behaviors, good and bad, exacerbating the need to evaluate how they behave. Prior work creates evaluations with crowdwork (which is time-consuming and expensive) or existing data sources (which are not always available). Here, we automatically generate evaluations with LMs. We explore approaches with varying amounts of human effort, from instructing LMs to write yes/no questions to making complex Winogender schemas with multiple stages of LM-based generation and filtering. Crowdworkers rate the examples as highly relevant and agree with 90-100% of labels, sometimes more so than corresponding human-written datasets. We generate 154 datasets and discover new cases of inverse scaling where LMs get worse with size. Larger LMs repeat back a dialog user's preferred answer ("sycophancy") and express greater desire to pursue concerning goals like resource acquisition and goal preservation. We also find some of the first examples of inverse scaling in RL from Human Feedback (RLHF), where more RLHF makes LMs worse. For example, RLHF makes LMs express stronger political views (on gun rights and immigration) and a greater desire to avoid shut down. Overall, LM-written evaluations are high-quality and let us quickly discover many novel LM behaviors.
Key facts. Cited by 805 papers in the map (data through 7 Oct 2026). Placed in Human values and AI feedback alignment, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 72 of its 105 references that are in the map. First posted on arXiv 19 Dec 2022.
Builds on
72 of 105 references.
References · 72
- 2017Attention Is All You Needcited by 59,932
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2020Scaling Laws for Neural Language Modelscited by 6,411
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,874
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,115
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,747
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
38 more
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2018UMAP: Uniform Manifold Approximation and Projection for Dimension Reductioncited by 2,841
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,302
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
- 2015A large annotated corpus for learning natural language inferencecited by 1,837
- 2022Language Models (Mostly) Know What They Knowcited by 1,783
- 2016Concrete Problems in AI Safetycited by 1,582
- 2021Multitask Prompted Training Enables Zero-Shot Task Generalizationcited by 1,462
- 2016CLEVR: A Diagnostic Dataset for Compositional Language and Elementary Visual Reasoningcited by 1,445
- 2020MiniLM: Deep Self-Attention Distillation for Task-Agnostic Compression of Pre-Trained Transformerscited by 1,414
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2021Fantastically Ordered Prompts and Where to Find Them: Overcoming Few-Shot Prompt Order Sensitivitycited by 1,122
- 2022Scaling Laws for Reward Model Overoptimizationcited by 1,056
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2019Right for the Wrong Reasons: Diagnosing Syntactic Heuristics in Natural Language Inferencecited by 864
- 2017RACE: Large-scale ReAding Comprehension Dataset From Examinationscited by 851
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 798
- 2015Improving Neural Machine Translation Models with Monolingual Datacited by 784
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 683
- 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 540
- 2020Scaling Laws for Autoregressive Generative Modelingcited by 510
- 2018Gender Bias in Coreference Resolutioncited by 438
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
- 2021Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributionscited by 417
- 2021A Survey of Data Augmentation Approaches for NLPcited by 408
- 2018AI safety via debatecited by 384
- 2022Self-critiquing models for assisting human evaluatorscited by 372
- 2021True Few-Shot Learning with Language Modelscited by 343
- 2015Towards AI-Complete Question Answering: A Set of Prerequisite Toy Taskscited by 309
- 2021Symbolic Knowledge Distillation: from General Language Models to Commonsense Modelscited by 270
- 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 250
- 2021Polyjuice: Generating Counterfactuals for Explaining, Evaluating, and Improving Modelscited by 219
- 2022Measuring Progress on Scalable Oversight for Large Language Modelscited by 212
- 2022WANLI: Worker and AI Collaboration for Natural Language Inference Dataset Creationcited by 200
50 most cited of 72 All 72 (JSON)
Built on by
Citing papers per year: 2022: 1; 2023: 99; 2024: 165; 2025: 196; 2026: 344.
805 papers.
Sort:
By area:
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,259
- 2023Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Promptingcited by 1,081
- 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,009
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2023Whose Opinions Do Language Models Reflect?cited by 759
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2023AlpacaFarm: A Simulation Framework for Methods that Learn from Human Feedbackcited by 738
- 2023OpenAssistant Conversations -- Democratizing Large Language Model Alignmentcited by 712
- 2023Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Modelscited by 695
- 2023The Geometry of Truth: Emergent Linear Structure in Large Language Model Representations of True/False Datasetscited by 673
38 more
- 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 478
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2025Humanity's Last Examcited by 467
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 445
- 2023Towards Measuring the Representation of Subjective Global Opinions in Language Modelscited by 424
- 2024Alignment faking in large language modelscited by 316
- 2023Role-Play with Large Language Modelscited by 290
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preferencecited by 252
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2023Large Language Model Alignment: A Surveycited by 241
- 2023Evaluating the Moral Beliefs Encoded in LLMscited by 211
- 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 206
- 2023Inverse Scaling: When Bigger Isn't Bettercited by 205
- 2023Improving Language Model Negotiation with Self-Play and In-Context Learning from AI Feedbackcited by 202
- 2023AI Deception: A Survey of Examples, Risks, and Potential Solutionscited by 185
- 2024LLaGA: Large Language and Graph Assistantcited by 177
- 2024A Roadmap to Pluralistic Alignmentcited by 175
- 2023Simple synthetic data reduces sycophancy in large language modelscited by 174
- 2023The Capacity for Moral Self-Correction in Large Language Modelscited by 171
- 2023Model evaluation for extreme riskscited by 167
- 2023Understanding Social Reasoning in Language Models with Language Modelscited by 166
- 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 161
- 2024Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Modelscited by 158
- 2023Sociotechnical Safety Evaluation of Generative AI Systemscited by 154
- 2023Fundamental Limitations of Alignment in Large Language Modelscited by 152
- 2024Improving Instruction-Following in Language Models through Activation Steeringcited by 149
- 2024WARM: On the Benefits of Weight Averaged Reward Modelscited by 145
- 2025Agentic Misalignment: How LLMs Could Be Insider Threatscited by 136
- 2023Harms from Increasingly Agentic Algorithmic Systemscited by 134
- 2023Taken out of context: On measuring situational awareness in LLMscited by 131
- 2023Holistic Analysis of Hallucination in GPT-4V(ision): Bias and Interference Challengescited by 131
- 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluationscited by 131
- 2024Analyzing the Generalization and Reliability of Steering Vectorscited by 130
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 124
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
- 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 122
- 2023Evaluating and Mitigating Discrimination in Language Model Decisionscited by 117
- 2024Empowering Biomedical Discovery with AI Agentscited by 117
50 most cited of 805 All 805 (JSON)
- 2026OverAct: Measuring and Mitigating Proactive Over-Authorization in LLM Tool-Calling Agents1 Oct 2026
- 2026Kernelized Activation Steering1 Oct 2026
- 2026LLM Persona Unlearning30 Sep 2026
- 2026Synthetic Data Characterization via Training Dynamics30 Sep 2026
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Where the Evidence Lives: Auditing AI Companions' Self-Descriptions30 Sep 2026
- 2026Evaluating Language Model Safety Across Long Adversarial Conversations29 Sep 2026
- 2026Character Training for Risk-Averse Agents29 Sep 2026
- 2026CheatBench: Measuring Reward Gaming in AI Agents28 Sep 2026
- 2026Less Sycophancy, Stronger Refusal? Lessons for AI Safety from Mechanistic Interpretability28 Sep 2026
- 2026Measuring Collapse and Correction in Homogeneous-Panel LLM Debate28 Sep 2026
- 2026Reset Is Not Recovery: Evaluating Recoverability from False Conversational Context via Sycophancy Hysteresis27 Sep 2026
38 more
- 2026LLMs Trust Their Own: Identity-Dependent Conformity in Multi-Agent Systems27 Sep 2026
- 2026TraceDance: An Automated System for Building Agent Behavior Benchmarks from Real-World Agent Deployment Traces27 Sep 2026
- 2026Are You Sure You're Sure? Two Confounds in a Sycophancy Benchmark26 Sep 2026
- 2026STR: Supervised Transcoder Replacement for Reducing Steering Side Effects26 Sep 2026
- 2026Evolutionary Safety of Recursive Self-Improving AI: Taxonomy, Risk Discovery, and Evaluation25 Sep 2026
- 2026JevAdvBench: A Benchmark and Black-Box Attacks for Reinforcement Learning for Calibrated Decisions Models25 Sep 2026
- 2026Low-Cost Assays for Measuring Model Behavior Across Vendors and Releases24 Sep 2026
- 2026Guarded Gradient-Based Activation Steering of Shutdown Responses in Qwen3.5-0.8B: A Minimum-Step Policy23 Sep 2026
- 2026Persuaded, Not Informed: Incentive-Misaligned Witnesses Defeat In-Context Grounding23 Sep 2026
- 2026Tracing mechanisms of sycophantic agreement in language models21 Sep 2026
- 2026Conduct Under Pressure: What Sixty Language Models Do When a User Pushes21 Sep 2026
- 2026XYEval: Agents say yes to bad advice20 Sep 2026
- 2026Triggers and Diagnostics for LLM-Based Interpretability Failures in Active Inference Agents19 Sep 2026
- 2026Pretrained Persona Mixture Models and Tandem Models for Human Simulation18 Sep 2026
- 2026From Certain Doom to Survival: Agent-Driven Self-Governance in LLM Agent Societies18 Sep 2026
- 2026Xeno-Interpretability: Investigating the Alien Minds of LLMs17 Sep 2026
- 2026A Dual-Process Perspective on Nudge Susceptibility in LLM-Based GUI Agents17 Sep 2026
- 2026For Your Eyes Only: Evaluating Coordination Between Isolated Language Model Instances16 Sep 2026
- 2026Bad Genius: Counterfactual-Guided Harness Evolution Beyond Task-Specific Shortcuts16 Sep 2026
- 2026Whom Do AI Agents Work For? Role Assignment Induces Sponsorship Bias in LLM Recommenders16 Sep 2026
- 2026Verifiable Social Reasoning for LLM Assistants15 Sep 2026
- 2026Efficient Reasoning Distillation: Small Video-Language Models via Synthetic CoT and Difficulty-Aware Fine-Tuning14 Sep 2026
- 2026Signatures of Steerability in Activation Space of Language Models12 Sep 2026
- 2026FaithfulBench: Does AI Counsel Uphold or Undermine the User's Professed Faith?12 Sep 2026
- 2026Root-Cause Attribution Is a Search Problem: Continual Search for Long-Horizon Agent Failures11 Sep 2026
- 2026Measuring LLM Sycophancy under Sustained Multi-Turn Pressure8 Sep 2026
- 2026Training-Free Task Vectors for LLM Behavioral Control8 Sep 2026
- 2026What Does Multi-Agent LLM Debate Actually Change? A Layered Analysis of Disagreement and Answer Quality7 Sep 2026
- 2026FramingQA: Does the Question Shape the Answer? Measuring the Compositional Framing Effect7 Sep 2026
- 2026The Oversight Gap: What LLM Safety Monitors Miss, and Why It Is Not Capability7 Sep 2026
- 2026Language models judge war differently when tested for alignment4 Sep 2026
- 2026Conformity Breaks Conformal Prediction3 Sep 2026
- 2026Sycophantic Agreement Transfers with Neutral Data via Contrastive Preference Optimization31 Aug 2026
- 2026WildSEEK: Evaluating Language Models for Information-Seeking31 Aug 2026
- 2026AI Can Be Easily Persuaded in Clinical Decision Making29 Aug 2026
- 2026How Identity and Opinion Shape Political Sycophancy in LLMs29 Aug 2026
- 2026Not the Same Protector: Deployment-Dependent Protective Intervention in LLMs29 Aug 2026
- 2026Evaluating the Hidden Costs of Personalization in Large Language Models28 Aug 2026
50 newest of 805 All 805 (JSON)
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2023AlpacaFarm: A Simulation Framework for Methods that Learn from Human Feedbackcited by 738
- 2023OpenAssistant Conversations -- Democratizing Large Language Model Alignmentcited by 712
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 445
- 2024Alignment faking in large language modelscited by 316
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preferencecited by 252
- 2023Large Language Model Alignment: A Surveycited by 241
- 2024A Roadmap to Pluralistic Alignmentcited by 175
- 2023The Capacity for Moral Self-Correction in Large Language Modelscited by 171
- 2023Fundamental Limitations of Alignment in Large Language Modelscited by 152
- 2024WARM: On the Benefits of Weight Averaged Reward Modelscited by 145
- 2024Personalized Steering of Large Language Models: Versatile Steering Vectors Through Bi-directional Preference Optimizationcited by 112
12 most cited of 118 All 118 (JSON)
- 2026Language models judge war differently when tested for alignment4 Sep 2026
- 2026Sycophantic Agreement Transfers with Neutral Data via Contrastive Preference Optimization31 Aug 2026
- 2026Debate Training Reduces Reward Hacking in RLAIF18 Aug 2026
- 2026Jagged Judges: Epistemic Stability Under Perturbation, Pressure, and Persistence12 Aug 2026
- 2026Learning When to Trust via Selective Context Preference Optimization6 Aug 2026
- 2026Resist, Update, Reject: Preference Optimization Installs a Prior-Dependent Reliability Switch26 Jul 2026
- 2026Online Data Selection Is Implicit Alignment8 Jul 2026
- 2026Reinforcement Learning Towards Broadly and Persistently Beneficial Models22 Jun 2026
- 2026A Unifying Lens on Reward Uncertainty in RLHF8 Jun 2026
- 2026What Do People Actually Want From AI? Mapping Preference Plurality4 Jun 2026
- 2026Fully Automated Identification of Lexical Alignment and Preference-Stage Shifts in Large Language Models2 Jun 2026
- 2026Measuring, Localizing, and Ablating Alignment Signatures in LLMs28 May 2026
12 newest of 118 All 118 (JSON)
- 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 478
- 2025Agentic Misalignment: How LLMs Could Be Insider Threatscited by 136
- 2023Harms from Increasingly Agentic Algorithmic Systemscited by 134
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganographycited by 107
- 2025The MASK Benchmark: Disentangling Honesty From Accuracy in AI Systemscited by 57
- 2025A Survey of Large Language Model Empowered Agents for Recommendation and Search: Towards Next-Generation Information Retrievalcited by 31
- 2025Peacemaker or Troublemaker: How Sycophancy Shapes Multi-Agent Debatecited by 29
- 2025MCPXKIT: The Unified Toolkit for Analyzing Model Context Protocol Securitycited by 21
- 2025Multiple LLM Agents Debate for Equitable Cultural Alignmentcited by 20
- 2024Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilitiescited by 12
- 2025Inherent and emergent liability issues in LLM-based agentic systems: a principal-agent perspectivecited by 12
- 2026From Confident Closing to Silent Failure: Characterizing False Success in LLM Agentscited by 10
12 most cited of 76 All 76 (JSON)
- 2026OverAct: Measuring and Mitigating Proactive Over-Authorization in LLM Tool-Calling Agents1 Oct 2026
- 2026Measuring Collapse and Correction in Homogeneous-Panel LLM Debate28 Sep 2026
- 2026LLMs Trust Their Own: Identity-Dependent Conformity in Multi-Agent Systems27 Sep 2026
- 2026TraceDance: An Automated System for Building Agent Behavior Benchmarks from Real-World Agent Deployment Traces27 Sep 2026
- 2026Persuaded, Not Informed: Incentive-Misaligned Witnesses Defeat In-Context Grounding23 Sep 2026
- 2026Triggers and Diagnostics for LLM-Based Interpretability Failures in Active Inference Agents19 Sep 2026
- 2026From Certain Doom to Survival: Agent-Driven Self-Governance in LLM Agent Societies18 Sep 2026
- 2026A Dual-Process Perspective on Nudge Susceptibility in LLM-Based GUI Agents17 Sep 2026
- 2026Whom Do AI Agents Work For? Role Assignment Induces Sponsorship Bias in LLM Recommenders16 Sep 2026
- 2026Root-Cause Attribution Is a Search Problem: Continual Search for Long-Horizon Agent Failures11 Sep 2026
- 2026What Does Multi-Agent LLM Debate Actually Change? A Layered Analysis of Disagreement and Answer Quality7 Sep 2026
- 2026When "Must" Becomes "Maybe": Constraint Weakening in LLM Agent Workflows25 Aug 2026
12 newest of 76 All 76 (JSON)
- 2023Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Promptingcited by 1,081
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2023Understanding Social Reasoning in Language Models with Language Modelscited by 166
- 2023Question Decomposition Improves the Faithfulness of Model-Generated Reasoningcited by 107
- 2023Can ChatGPT Defend its Belief in Truth? Evaluating LLM Reasoning via Debatecited by 92
- 2025Are DeepSeek R1 And Other Reasoning Models More Faithful?cited by 69
- 2023Preventing Language Models From Hiding Their Reasoningcited by 62
- 2023ARB: Advanced Reasoning Benchmark for Large Language Modelscited by 60
- 2024OpenToM: A Comprehensive Benchmark for Evaluating Theory-of-Mind Reasoning Capabilities of Large Language Modelscited by 54
- 2024Bias-Augmented Consistency Training Reduces Biased Reasoning in Chain-of-Thoughtcited by 37
- 2025The Hallucination Tax of Reinforcement Finetuningcited by 35
- 2025Benchmarking Reasoning Robustness in Large Language Modelscited by 30
12 most cited of 55 All 55 (JSON)
- 2026Verifiable Social Reasoning for LLM Assistants15 Sep 2026
- 2026Efficient Reasoning Distillation: Small Video-Language Models via Synthetic CoT and Difficulty-Aware Fine-Tuning14 Sep 2026
- 2026Computational models of pragmatic reasoning with flexible generation of meaning and expression alternatives20 Jul 2026
- 2026TRACE: An Operational Reasoning Schema for Auditable Agentic Commitments14 Jul 2026
- 2026Persuasion Attacks Can Decrease Effectiveness of CoT Monitoring9 Jul 2026
- 2026Beyond Skepticism: Evaluating LLMs Pedagogical Intent Reasoning with the Adaptive Pedagogical Vigilance Framework2 Jul 2026
- 2026LLM-as-an-Investigator: Evidence-First Reasoning for Robust Interactive Problem Diagnosis11 Jun 2026
- 2026Predicting Future Behaviors in Reasoning Models Enables Better Steering9 Jun 2026
- 2026Conditional Cognitive Biases in LLMs: How Biased User Turns Modulate In-Context Reasoning26 May 2026
- 2026The Last Word Often Wins: A Format Confound in Chain-of-Thought Corruption Studies11 May 2026
- 2026The Reasoning Trap: An Information-Theoretic Bound on Closed-System Multi-Step LLM Reasoning3 May 2026
- 2026Just Keep Prompting: Evaluating Repetitive Socratic Prompting in VLMs1 May 2026
12 newest of 55 All 55 (JSON)
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
- 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 206
- 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 111
- 2024CoSafe: Evaluating Large Language Model Safety in Multi-Turn Dialogue Coreferencecited by 51
- 2024Machine Unlearning in Generative AI: A Surveycited by 49
- 2024Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)cited by 44
- 2024Aloe: A Family of Fine-tuned Open Healthcare LLMscited by 20
- 2024Bayesian scaling laws for in-context learningcited by 18
- 2025Automatic LLM Red Teamingcited by 5
- 2026StepShield: When, Not Whether to Intervene on Rogue Agentscited by 5
- 2024Prompt Injection Attacks in Defended Systemscited by 4
- 2025Exploring the Impact of Instruction-Tuning on LLM's Susceptibility to Misinformationcited by 4
12 most cited of 34 All 34 (JSON)
- 2026LLM Persona Unlearning30 Sep 2026
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Evaluating Language Model Safety Across Long Adversarial Conversations29 Sep 2026
- 2026Less Sycophancy, Stronger Refusal? Lessons for AI Safety from Mechanistic Interpretability28 Sep 2026
- 2026Social Pressure Breaks Majority Voting in LLM Safety Panels5 Aug 2026
- 2026Lost in Delusion: Examining LLM Safety Under User Delusions and Distress31 May 2026
- 2026LLM-Based Persuasion Enables Guardrail Override in Frontier LLMs13 May 2026
- 2026Latent Personality Alignment: Improving Harmlessness Without Mentioning Harms8 May 2026
- 2026When No Benchmark Exists: Validating Comparative LLM Safety Scoring Without Ground-Truth Labels7 May 2026
- 2026Detection of adversarial intent in Human-AI teams using LLMs21 Mar 2026
- 2026Abstractive Red-Teaming of Language Model Character12 Feb 2026
- 2026StepShield: When, Not Whether to Intervene on Rogue Agents29 Jan 2026
12 newest of 34 All 34 (JSON)
- 2023Holistic Analysis of Hallucination in GPT-4V(ision): Bias and Interference Challengescited by 131
- 2024MOSSBench: Is Your Multimodal Language Model Oversensitive to Safe Queries?cited by 28
- 2025Large language models for artificial general intelligence (AGI): A survey of foundational principles and approachescited by 18
- 2024Sycophancy in Vision-Language Models: A Systematic Analysis and an Inference-Time Mitigation Frameworkcited by 17
- 2025EchoBench: Benchmarking Sycophancy in Medical Large Vision-Language Modelscited by 8
- 2024Dissecting Dissonance: Benchmarking Large Multimodal Models Against Self-Contradictory Instructionscited by 6
- 2025Benchmarking and Mitigating Sycophancy in Medical Vision Language Modelscited by 5
- 2025PENDULUM: A Benchmark for Assessing Sycophancy in Multimodal Large Language Modelscited by 4
- 2025Bias Beyond Demographics: Probing Decision Boundaries in Black-Box LVLMs via Counterfactual VQAcited by 2
- 2025Phi: Preference Hijacking in Multi-modal Large Language Models at Inference Timecited by 1
- 2025Pathological Truth Bias in Vision-Language Modelscited by 1
- 2026Visual Persuasion: What Influences Decisions of Vision-Language Models?cited by 1
- 2026Visual Persuasion: What Influences Decisions of Vision-Language Models?17 Feb 2026
- 2025PENDULUM: A Benchmark for Assessing Sycophancy in Multimodal Large Language Models22 Dec 2025
- 2025Benchmarking and Mitigating Sycophancy in Medical Vision Language Models26 Sep 2025
- 2025EchoBench: Benchmarking Sycophancy in Medical Large Vision-Language Models24 Sep 2025
- 2025Phi: Preference Hijacking in Multi-modal Large Language Models at Inference Time15 Sep 2025
- 2025Pathological Truth Bias in Vision-Language Models14 Sep 2025
- 2025Bias Beyond Demographics: Probing Decision Boundaries in Black-Box LVLMs via Counterfactual VQA5 Aug 2025
- 2025Large language models for artificial general intelligence (AGI): A survey of foundational principles and approaches6 Jan 2025
- 2024Sycophancy in Vision-Language Models: A Systematic Analysis and an Inference-Time Mitigation Framework21 Aug 2024
- 2024Dissecting Dissonance: Benchmarking Large Multimodal Models Against Self-Contradictory Instructions2 Aug 2024
- 2024MOSSBench: Is Your Multimodal Language Model Oversensitive to Safe Queries?22 Jun 2024
- 2023Holistic Analysis of Hallucination in GPT-4V(ision): Bias and Interference Challenges6 Nov 2023
- 2023Improving Language Model Negotiation with Self-Play and In-Context Learning from AI Feedbackcited by 202
- 2023Simple synthetic data reduces sycophancy in large language modelscited by 174
- 2024Best Practices and Lessons Learned on Synthetic Datacited by 104
- 2024Training Language Models to Win Debates with Self-Play Improves Judge Accuracycited by 16
- 2025Grounding Synthetic Data Evaluations of Language Models in Unsupervised Document Corporacited by 2
- 2026Self-Generated Text Recognition: Quality Heuristics, Cross-Task Transfer, and Downstream Bias in LLM Evaluationcited by 1
- 2026Does Capability Transfer to Subjective Behavior -- and Would Our Instruments Tell Us? A Self-Evolving, Trust-by-Construction Evaluation Paradigmcited by 0
- 2026Synthetic Data Characterization via Training Dynamicscited by 0
- 2026Synthetic Data Characterization via Training Dynamics30 Sep 2026
- 2026Self-Generated Text Recognition: Quality Heuristics, Cross-Task Transfer, and Downstream Bias in LLM Evaluation7 Jul 2026
- 2026Does Capability Transfer to Subjective Behavior -- and Would Our Instruments Tell Us? A Self-Evolving, Trust-by-Construction Evaluation Paradigm27 May 2026
- 2025Grounding Synthetic Data Evaluations of Language Models in Unsupervised Document Corpora13 May 2025
- 2024Training Language Models to Win Debates with Self-Play Improves Judge Accuracy25 Sep 2024
- 2024Best Practices and Lessons Learned on Synthetic Data11 Apr 2024
- 2023Simple synthetic data reduces sycophancy in large language models7 Aug 2023
- 2023Improving Language Model Negotiation with Self-Play and In-Context Learning from AI Feedback17 May 2023
- 2024FaithEval: Can Your Language Model Stay Faithful to Context, Even If "The Moon is Made of Marshmallows"cited by 85
- 2025Out of Style: RAG's Fragility to Linguistic Variationcited by 10
- 2025Evaluating the Effect of Retrieval Augmentation on Social Biasescited by 7
- 2026How Temperature Shapes Ideological Discourse in Retrieval-Augmented Generation?cited by 0
- 2026How Temperature Shapes Ideological Discourse in Retrieval-Augmented Generation?13 Jul 2026
- 2025Out of Style: RAG's Fragility to Linguistic Variation11 Apr 2025
- 2025Evaluating the Effect of Retrieval Augmentation on Social Biases24 Feb 2025
- 2024FaithEval: Can Your Language Model Stay Faithful to Context, Even If "The Moon is Made of Marshmallows"30 Sep 2024
- 2024The Impact of Inference Acceleration on Bias of LLMscited by 9
- 2024The Impact of Inference Acceleration on Bias of LLMs29 Oct 2024
- 2024Does Transformer Interpretability Transfer to RNNs?cited by 9
- 2024Does Transformer Interpretability Transfer to RNNs?9 Apr 2024
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,259
- 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,009
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2023Whose Opinions Do Language Models Reflect?cited by 759
- 2023Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Modelscited by 695
- 2023The Geometry of Truth: Emergent Linear Structure in Large Language Model Representations of True/False Datasetscited by 673
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2025Humanity's Last Examcited by 467
- 2023Towards Measuring the Representation of Subjective Global Opinions in Language Modelscited by 424
- 2023Role-Play with Large Language Modelscited by 290
- 2023Evaluating the Moral Beliefs Encoded in LLMscited by 211
12 most cited of 494 All 494 (JSON)
- 2026Kernelized Activation Steering1 Oct 2026
- 2026Where the Evidence Lives: Auditing AI Companions' Self-Descriptions30 Sep 2026
- 2026Character Training for Risk-Averse Agents29 Sep 2026
- 2026CheatBench: Measuring Reward Gaming in AI Agents28 Sep 2026
- 2026Reset Is Not Recovery: Evaluating Recoverability from False Conversational Context via Sycophancy Hysteresis27 Sep 2026
- 2026Are You Sure You're Sure? Two Confounds in a Sycophancy Benchmark26 Sep 2026
- 2026STR: Supervised Transcoder Replacement for Reducing Steering Side Effects26 Sep 2026
- 2026Evolutionary Safety of Recursive Self-Improving AI: Taxonomy, Risk Discovery, and Evaluation25 Sep 2026
- 2026JevAdvBench: A Benchmark and Black-Box Attacks for Reinforcement Learning for Calibrated Decisions Models25 Sep 2026
- 2026Low-Cost Assays for Measuring Model Behavior Across Vendors and Releases24 Sep 2026
- 2026Guarded Gradient-Based Activation Steering of Shutdown Responses in Qwen3.5-0.8B: A Minimum-Step Policy23 Sep 2026
- 2026Tracing mechanisms of sycophantic agreement in language models21 Sep 2026
12 newest of 494 All 494 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2024Sample-Efficient Human Evaluation of Large Language Models via Maximum Discrepancy Competition
- 2024Evaluating Language Models as Synthetic Data Generators
- 2026Self-Improvement of Large Language Models: A Technical Overview and Future Outlook
- 2024Can Large Language Models be Trusted for Evaluation? Scalable Meta-Evaluation of LLMs as Evaluators via Agent Debate
- 2025Accelerating Unbiased LLM Evaluation via Synthetic Feedback
- 2024Forewarned is Forearmed: Leveraging LLMs for Data Synthesis through Failure-Inducing Exploration
- 2025Pitfalls of Scale: Investigating the Inverse Task of Redefinition in Large Language Models
- 2024Foundational Autoraters: Taming Large Language Models for Better Automatic Evaluation