mlsanityData to 7 Oct 2026

Auditing large language models: a three-layered approach

arXiv 2302.08500 ↗First posted 16 Feb 2023cs.CL cs.AI cs.CYcited by 135

Not on the map. Why?

Abstract (arXiv)

Large language models (LLMs) represent a major advance in artificial intelligence (AI) research. However, the widespread use of LLMs is also coupled with significant ethical and social challenges. Previous research has pointed towards auditing as a promising governance mechanism to help ensure that AI systems are designed and deployed in ways that are ethical, legal, and technically robust. However, existing auditing procedures fail to address the governance challenges posed by LLMs, which display emergent capabilities and are adaptable to a wide range of downstream tasks. In this article, we address that gap by outlining a novel blueprint for how to audit LLMs. Specifically, we propose a three-layered approach, whereby governance audits (of technology providers that design and disseminate LLMs), model audits (of LLMs after pre-training but prior to their release), and application audits (of applications based on LLMs) complement and inform each other. We show how audits, when conducted in a structured and coordinated manner on all three levels, can be a feasible and effective mechanism for identifying and managing some of the ethical and social risks posed by LLMs. However, it is important to remain realistic about what auditing can reasonably be expected to achieve. Therefore, we discuss the limitations not only of our three-layered approach but also of the prospect of auditing LLMs at all. Ultimately, this article seeks to expand the methodological toolkit available to technology providers and policymakers who wish to analyse and evaluate LLMs from technical, ethical, and legal perspectives.

Key facts. Cited by 135 papers in the map (data through 7 Oct 2026). Builds on 127 of its 294 references that are in the map. First posted on arXiv 16 Feb 2023.

Builds on

127 of 294 references.

References · 127

  1. 2017Attention Is All You Needcited by 59,932
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  3. 2020Language Models are Few-Shot Learnerscited by 32,199
  4. 2022Training language models to follow instructions with human feedbackcited by 15,712
  5. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
  6. 2021Evaluating Large Language Models Trained on Codecited by 8,053
  7. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
  8. 2020Scaling Laws for Neural Language Modelscited by 6,411
  9. 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
  10. 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
  11. 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,337
  12. 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
38 more
  1. 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
  2. 2017Deep reinforcement learning from human preferencescited by 3,846
  3. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
  4. 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
  5. 2022Training Compute-Optimal Large Language Modelscited by 2,927
  6. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
  7. 2020Learning to summarize from human feedbackcited by 2,562
  8. 2022Emergent Abilities of Large Language Modelscited by 2,483
  9. 2020Extracting Training Data from Large Language Modelscited by 2,144
  10. 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
  11. 2019A Survey on Bias and Fairness in Machine Learningcited by 1,911
  12. 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,767
  13. 2019SuperGLUE: A Stickier Benchmark for General-Purpose Language Understanding Systemscited by 1,718
  14. 2020Don't Stop Pretraining: Adapt Language Models to Domains and Taskscited by 1,548
  15. 2022Rethinking the Role of Demonstrations: What Makes In-Context Learning Work?cited by 1,413
  16. 2018Datasheets for Datasetscited by 1,371
  17. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
  18. 2022LaMDA: Language Models for Dialog Applicationscited by 1,218
  19. 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,199
  20. 2018Model Cards for Model Reportingcited by 1,068
  21. 2022Red Teaming Language Models with Language Modelscited by 983
  22. 2021Ethical and social risks of harm from Language Modelscited by 957
  23. 2020Language (Technology) is Power: A Critical Survey of "Bias" in NLPcited by 951
  24. 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 911
  25. 2016Semantics derived automatically from language corpora contain human-like biasescited by 894
  26. 2021CodeT5: Identifier-aware Unified Pre-trained Encoder-Decoder Models for Code Understanding and Generationcited by 890
  27. 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
  28. 2017Counterfactual Fairnesscited by 802
  29. 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 798
  30. 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 703
  31. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
  32. 2023A Watermark for Large Language Modelscited by 667
  33. 2021Prompt Programming for Large Language Models: Beyond the Few-Shot Paradigmcited by 599
  34. 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 540
  35. 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 488
  36. 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 481
  37. 2020Towards a Human-like Open-Domain Chatbotcited by 467
  38. 2021Dynabench: Rethinking Benchmarking in NLPcited by 447

50 most cited of 127 All 127 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 35; 2024: 40; 2025: 28; 2026: 32.

135 papers.

Sort:

By area:

  1. 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
  2. 2023A Comprehensive Overview of Large Language Modelscited by 639
  3. 2023Model evaluation for extreme riskscited by 167
  4. 2023Personality Traits in Large Language Modelscited by 166
  5. 2023A Survey of Large Language Models in Medicine: Progress, Application, and Challengecited by 123
  6. 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
  7. 2023AI Transparency in the Age of LLMs: A Human-Centered Research Roadmapcited by 119
  8. 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
  9. 2023Personalisation within bounds: A risk taxonomy and policy framework for the alignment of large language models with personalised feedbackcited by 86
  10. 2024Visibility into AI Agentscited by 77
  11. 2024Nicer Than Humans: How do Large Language Models Behave in the Prisoner's Dilemma?cited by 62
  12. 2023Do LLMs Possess a Personality? Making the MBTI Test an Amazing Evaluation for Large Language Modelscited by 54
38 more
  1. 2025A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasurescited by 54
  2. 2024Language Models Resist Alignment: Evidence From Data Compressioncited by 50
  3. 2023Managing extreme AI risks amid rapid progresscited by 48
  4. 2023Training Data Extraction From Pre-trained Language Models: A Surveycited by 43
  5. 2025Multilingual != Multicultural: Evaluating Gaps Between Multilingual Capabilities and Cultural Alignment in LLMscited by 39
  6. 2024Logits of API-Protected LLMs Leak Proprietary Informationcited by 38
  7. 2023SoK: Memorization in General-Purpose Large Language Modelscited by 36
  8. 2024Automatic Pseudo-Harmful Prompt Generation for Evaluating False Refusals in Large Language Modelscited by 35
  9. 2023Using Large Language Models to Generate, Validate, and Apply User Intent Taxonomiescited by 34
  10. 2024Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Samplingcited by 33
  11. 2023Open-Sourcing Highly Capable Foundation Models: An evaluation of risks, benefits, and alternative methods for pursuing open-source objectivescited by 31
  12. 2023Assessing Language Model Deployment with Risk Cardscited by 30
  13. 2024Navigating LLM Ethics: Advancements, Challenges, and Future Directionscited by 28
  14. 2025Exploring the Roles of Large Language Models in Reshaping Transportation Systems: A Survey, Framework, and Roadmapcited by 26
  15. 2023Accuracy and Political Bias of News Source Credibility Ratings by Large Language Modelscited by 25
  16. 2024Causality for Large Language Modelscited by 24
  17. 2024The Model Openness Framework: Promoting Completeness and Openness for Reproducibility, Transparency, and Usability in Artificial Intelligencecited by 21
  18. 2024Towards Trustworthy AI: A Review of Ethical and Robust Large Language Modelscited by 21
  19. 2023Bias and Fairness in Chatbots: An Overviewcited by 20
  20. 2024LLM-Assisted Crisis Management: Building Advanced LLM Platforms for Effective Emergency Response and Public Collaborationcited by 20
  21. 2024Adversarial Nibbler: An Open Red-Teaming Method for Identifying Diverse Harms in Text-to-Image Generationcited by 20
  22. 2023Trustworthy and Synergistic Artificial Intelligence for Software Engineering: Vision and Roadmapscited by 19
  23. 2024Mapping the Ethics of Generative AI: A Comprehensive Scoping Reviewcited by 19
  24. 2024Holistic Safety and Responsibility Evaluations of Advanced AI Modelscited by 18
  25. 2024The Open Source Advantage in Large Language Models (LLMs)cited by 18
  26. 2023Rethinking Large Language Models in Mental Health Applicationscited by 16
  27. 2023Challenges of Large Language Models for Mental Health Counselingcited by 16
  28. 2026Auditable Agentscited by 14
  29. 2023Auditing and Generating Synthetic Data with Controllable Trust Trade-offscited by 13
  30. 2024Near to Mid-term Risks and Opportunities of Open-Source Generative AIcited by 13
  31. 2024Swiss Cheese Model for AI Safety: A Taxonomy and Reference Architecture for Multi-Layered Guardrails of Foundation Model Based Agentscited by 13
  32. 2023Can ChatGPT Perform Reasoning Using the IRAC Method in Analyzing Legal Scenarios Like a Lawyer?cited by 12
  33. 2024From Prompt Engineering to Prompt Science With Human in the Loopcited by 12
  34. 2023Towards Publicly Accountable Frontier LLMs: Building an External Scrutiny Ecosystem under the ASPIRE Frameworkcited by 11
  35. 2024AuditLLM: A Tool for Auditing Large Language Models Using Multiprobe Approachcited by 11
  36. 2024Risks and Opportunities of Open-Source Generative AIcited by 11
  37. 2023Decolonial AI Alignment: Openness, Vi'sedsa-Dharma, and Including Excluded Knowledgescited by 10
  38. 2024Responsible Reporting for Frontier AI Developmentcited by 10

50 most cited of 135 All 135 (JSON)