Trust or Escalate: LLM Judges with Provable Guarantees for Human Agreement
Not on the map. Why?
Abstract (arXiv)
We present a principled approach to provide LLM-based evaluation with a rigorous guarantee of human agreement. We first propose that a reliable evaluation method should not uncritically rely on model preferences for pairwise evaluation, but rather assess the confidence of judge models and selectively decide when to trust its judgement. We then show that under this selective evaluation framework, human agreement can be provably guaranteed -- such that the model evaluation aligns with that of humans to a user-specified agreement level. As part of our framework, we also introduce Simulated Annotators, a novel confidence estimation method that significantly improves judge calibration and thus enables high coverage of evaluated instances. Finally, we propose Cascaded Selective Evaluation, where we use cheaper models as initial judges and escalate to stronger models only when necessary -- again, while still providing a provable guarantee of human agreement. Experimental results show that Cascaded Selective Evaluation guarantees strong alignment with humans, far beyond what LLM judges could achieve without selective evaluation. For example, on a subset of Chatbot Arena where GPT-4 almost never achieves 80% human agreement, our method, even while employing substantially cost-effective models such as Mistral-7B, guarantees over 80% human agreement with almost 80% test coverage.
Key facts. Cited by 99 papers in the map (data through 7 Oct 2026). Builds on 30 of its 37 references that are in the map. First posted on arXiv 25 Jul 2024.
Builds on
30 of 37 references.
References · 30
- 2023GPT-4 Technical Reportcited by 18,132
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2020Learning to summarize from human feedbackcited by 2,562
- 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,205
- 2023Large Language Models are not Fair Evaluatorscited by 1,050
- 2023Can LLMs Express Their Uncertainty? An Empirical Evaluation of Confidence Elicitation in LLMscited by 946
- 2024Length-Controlled AlpacaEval: A Simple Way to Debias Automatic Evaluatorscited by 865
- 2017Selective Classification for Deep Neural Networkscited by 799
- 2023Semantic Uncertainty: Linguistic Invariances for Uncertainty Estimation in Natural Language Generationcited by 795
- 2023Just Ask for Calibration: Strategies for Eliciting Calibrated Confidence Scores from Language Models Fine-Tuned with Human Feedbackcited by 788
- 2023AlpacaFarm: A Simulation Framework for Methods that Learn from Human Feedbackcited by 738
- 2023Can Large Language Models Be an Alternative to Human Evaluations?cited by 729
18 more
- 2023ChatEval: Towards Better LLM-based Evaluators through Multi-Agent Debatecited by 724
- 2024LLM Evaluators Recognize and Favor Their Own Generationscited by 651
- 2023JudgeLM: Fine-tuned Large Language Models are Scalable Judgescited by 351
- 2024Replacing Judges with Juries: Evaluating LLM Generations with a Panel of Diverse Modelscited by 301
- 2023Evaluating Large Language Models at Evaluating Instruction Followingcited by 290
- 2023Generating with Confidence: Uncertainty Quantification for Black-box Large Language Modelscited by 286
- 2023AlignScore: Evaluating Factual Consistency with a Unified Alignment Functioncited by 284
- 2021Distribution-Free, Risk-Controlling Prediction Setscited by 278
- 2021Learn then Test: Calibrating Predictive Algorithms to Achieve Risk Controlcited by 256
- 2023Fine-tuning Language Models for Factualitycited by 219
- 2024Judging the Judges: Evaluating Alignment and Vulnerabilities in LLMs-as-Judgescited by 197
- 2023Benchmarking Cognitive Biases in Large Language Models as Evaluatorscited by 147
- 2024Language Models with Conformal Factuality Guaranteescited by 128
- 2024Language Model Cascades: Token-level uncertainty and beyondcited by 115
- 2023R-Tuning: Instructing Large Language Models to Say `I Don't Know'cited by 106
- 2024Unfamiliar Finetuning Examples Control How Language Models Hallucinatecited by 85
- 2023Evaluation Metrics in the Era of GPT-4: Reliably Evaluating Large Language Models on Sequence to Sequence Taskscited by 53
- 2024Conformal Alignment: Knowing When to Trust Foundation Models with Guaranteescited by 50
Built on by
Citing papers per year: 2024: 6; 2025: 28; 2026: 65.
99 papers.
Sort:
By area:
- 2024From Generation to Judgment: Opportunities and Challenges of LLM-as-a-judgecited by 480
- 2024LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methodscited by 451
- 2024A Survey on Uncertainty Quantification of Large Language Models: Taxonomy, Open Research Challenges, and Future Directionscited by 115
- 2025A Survey of Frontiers in LLM Reasoning: Inference Scaling, Learning to Reason, and Agentic Systemscited by 108
- 2025The Alternative Annotator Test for LLM-as-a-Judge: How to Statistically Justify Replacing Human Annotators with LLMscited by 72
- 2024Limits to scalable evaluation at the frontier: LLM as Judge won't beat twice the datacited by 46
- 2025Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarkscited by 26
- 2025Analyzing Uncertainty of LLM-as-a-Judge: Interval Evaluations with Conformal Predictioncited by 26
- 2025When One LLM Drools, Multi-LLM Collaboration Rulescited by 25
- 2025How to Correctly Report LLM-as-a-Judge Evaluationscited by 25
- 2024A Survey on the Honesty of Large Language Modelscited by 21
- 2025ProfBench: Multi-Domain Rubrics requiring Professional Knowledge to Answer and Judgecited by 21
38 more
- 2026Nine Judges, Two Effective Votes: Correlated Errors Undermine LLM Evaluation Panelscited by 21
- 2025Variation in Verification: Understanding Verification Dynamics in Large Language Modelscited by 18
- 2025Cost-Optimal Active AI Model Evaluationcited by 14
- 2025Beyond the Surface: Enhancing LLM-as-a-Judge Alignment with Human via Internal Representationscited by 14
- 2026JEV-as-a-Judge: Accept When Confident, Escalate When Unsurecited by 14
- 2026Diagnosing the Reliability of LLM-as-a-Judge via Item Response Theorycited by 13
- 2026SCOPE: Selective Conformal Optimized Pairwise LLM Judgingcited by 12
- 2025When Judgment Becomes Noise: How Design Failures in LLM Judge Benchmarks Silently Undermine Validitycited by 11
- 2025Conformal Arbitrage: Risk-Controlled Balancing of Competing Objectives in Language Modelscited by 10
- 2026Beyond Accuracy: Policy Invariance as a Reliability Test for LLM Safety Judgescited by 8
- 2025Multi-Agent LLM Judge: automatic personalized LLM judge design for evaluating natural language generation applicationscited by 7
- 2025CLEV: LLM-Based Evaluation Through Lightweight Efficient Voting for Free-Form Question-Answeringcited by 6
- 2025Calibrating LLM Judges: Linear Probes for Fast and Reliable Uncertainty Estimationcited by 6
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 6
- 2025Auto-Prompt Ensemble for LLM Judgecited by 5
- 2026SafeGround: Know When to Trust GUI Grounding Models via Uncertainty Calibrationcited by 5
- 2026JEV vs. LLMs as Rubric Judges: Cheaper, Faster, and Wrong in the Same Placescited by 5
- 2025Continual Learning, Not Training: Online Adaptation For Agentscited by 4
- 2025LEC: Linear Expectation Constraints for Selection-Conditioned Risk Control in Selective Prediction and Routing Systemscited by 4
- 2026LLM Performance Predictors: Learning When to Escalate in Hybrid Human-AI Moderation Systemscited by 4
- 2026Calibrate, Don't Curate: Label-Efficient Estimation from Noisy LLM Judgescited by 4
- 2026When Can Conformal Risk Control Certify LLM Outputs? Bounds, Impossibility, and Adaptation for Structured Generationcited by 4
- 2025THiNK: Can Large Language Models Think-aloud?cited by 3
- 2025LLMs Judging LLMs: A Simplex Perspectivecited by 3
- 2026Calibration Is Not Enough: Evaluating Confidence Estimation Under Language Variationscited by 3
- 2026Invisible failures in human-AI interactionscited by 3
- 2026Beyond LLM-as-a-Judge: Deterministic Metrics for Multilingual Generative Text Evaluationcited by 3
- 2026Calibrate-Then-Delegate: Safety Monitoring with Risk and Budget Guarantees via Model Cascadescited by 3
- 2026Ratchet: How Reliable Must an LLM Judge Be to Retire a Skill?cited by 3
- 2026Turning Bias into Bugs: Bandit-Guided Style Manipulation Attacks on LLM Judgescited by 3
- 2026Agreement Metrics for LLM-as-Judge Evaluation: What to Report and Whycited by 3
- 2026GAUGE: When Not to Trust LLM-as-a-Judge in User-Simulated Evaluation of Task-Oriented Agentscited by 3
- 2024The Superalignment of Superhuman Intelligence with Large Language Modelscited by 2
- 2025Watch, Listen, Understand, Mislead: Tri-modal Adversarial Attacks on Short Videos for Content Appropriateness Evaluationcited by 2
- 2025Becoming Experienced Judges: Selective Test-Time Learning for Evaluatorscited by 2
- 2025Reliable LLM-Based Edge-Cloud-Expert Cascades for Telecom Knowledge Systemscited by 2
- 2026Small Reward Models via Backward Inferencecited by 2
- 2026BalanceRAG: Joint Risk Calibration for Cascaded Retrieval-Augmented Generationcited by 2
50 most cited of 99 All 99 (JSON)
- 2026JuryFlow: Disagreement-Guided Human-in-the-Loop Multi-Agent Evaluation30 Sep 2026
- 2026RAIM: Robust Aggregation of Inexpensive Models for Hallucination Detection30 Sep 2026
- 2026Hard-Gate Candidacy in a Deployed Validator Suite30 Sep 2026
- 2026VEX-Bench: Benchmarking Verification Complexity of LLM-Generated Misinformation28 Sep 2026
- 2026Certified Selective Automation of LLM Agent Evaluation28 Sep 2026
- 2026MISHAP-Bench: A Hallucination Benchmark for Large Audio-Language Models27 Sep 2026
- 2026LLM Judge Validation Under Sparse Overlap: From Inference to Design25 Sep 2026
- 2026JEV vs. LLMs as Rubric Judges: Cheaper, Faster, and Wrong in the Same Places24 Sep 2026
- 2026JEV-as-a-Judge: Accept When Confident, Escalate When Unsure22 Sep 2026
- 2026Structured Claim-Level Discourse Representations for Dense Health Narratives16 Sep 2026
- 2026GAUGE: When Not to Trust LLM-as-a-Judge in User-Simulated Evaluation of Task-Oriented Agents10 Sep 2026
- 2026Auditing and Repairing LLM-as-Judge Failures in a Production Text-to-SQL Pipeline9 Sep 2026
38 more
- 2026Decomposing LLM-Judge Uncertainty to Target Expert Labels6 Sep 2026
- 2026Robust Conformal Consensus: Multi-Agent LLM-as-a-Judge Interval Evaluation with Conformal Prediction6 Sep 2026
- 2026The First Token Is Not the Verdict: Hidden Costs of Reading LLM Judges Without Generating4 Sep 2026
- 2026EvalMem: An Operation-Level Diagnostic Framework for Long-Term Memory Systems3 Sep 2026
- 2026Multi-Expert Conformal Risk Control for Pairwise LLM Judging in Open-Ended Dialogue27 Aug 2026
- 2026Localize-Then-Decide Guarantees for LLM Judgments26 Aug 2026
- 2026Designing a Robust LLM-Based Evaluation System for Agentic AI in Drug Discovery Through Human Alignment21 Aug 2026
- 2026Free-Text Evaluation of LLMs for 5G Domain Knowledge and Fault Analysis using LLM-as-Judge21 Aug 2026
- 2026JuryProbe: An Empirical Consensus-Risk Diagnostic for Routing Reference-Free Factuality Judge Panels to Grounded Verification20 Aug 2026
- 2026Stopping and Routing LLM Judge Panels20 Aug 2026
- 2026Judge, Retrieve, or Abstain: Uncertainty-Guarded LLM Judging with Provable Risk Guarantees18 Aug 2026
- 2026Dear Algo: A Precision-First Agentic Intent Layer for Unified Search and Recommendation16 Aug 2026
- 2026Asymptotic Risk Calibration for Selective Question Answering12 Aug 2026
- 2026Benchmarking LLM Judges for Mobile Agent Evaluation11 Aug 2026
- 2026Share the Judge, Learn the Deferral: Where Specialization Helps LLM Evaluation30 Jul 2026
- 2026CodeRescue: Budget-Calibrated Recovery Routing for Coding Agents21 Jul 2026
- 2026Uncertainty-Aware Abstention in Large Language Models with Provable Alignment Guarantees5 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026When Can Conformal Risk Control Certify LLM Outputs? Bounds, Impossibility, and Adaptation for Structured Generation27 Jun 2026
- 2026To Isolate or to Score? Model-Adaptive Assessment for Cost-Efficient Multi-Agent RAG23 Jun 2026
- 2026Towards Spec Learning: Inference-Time Alignment from Preference Pairs22 Jun 2026
- 2026Cherry-pick Override: LLM Judges Under-use the Non-Directional Verdicts Their Contract Authorizes5 Jun 2026
- 2026Design and Evaluation of Multi-Agent AI Oracle Systems for Prediction Market Resolution29 May 2026
- 2026Nine Judges, Two Effective Votes: Correlated Errors Undermine LLM Evaluation Panels28 May 2026
- 2026Calibrating Conservatism for Scalable Oversight27 May 2026
- 2026Agreement Metrics for LLM-as-Judge Evaluation: What to Report and Why25 May 2026
- 2026Turning Bias into Bugs: Bandit-Guided Style Manipulation Attacks on LLM Judges24 May 2026
- 2026Who judges the judges? Governance from metrics: a runtime framework for continuous LLM compliance monitoring23 May 2026
- 2026When AI Takes Sides on Questions of Faith: Persistent Asymmetries in AI-Mediated Faith Guidance21 May 2026
- 2026Ratchet: How Reliable Must an LLM Judge Be to Retire a Skill?21 May 2026
- 2026BalanceRAG: Joint Risk Calibration for Cascaded Retrieval-Augmented Generation19 May 2026
- 2026CriterAlign: Criterion-Centric Rationale Alignment for Code Preference Judging19 May 2026
- 2026Supporting System Testing with a Multi-Agent LLM-based Framework for Knowledge Graph Extraction: A Case Study with Ethernet Switch Systems18 May 2026
- 2026Margin-Adaptive Confidence Ranking for Reliable LLM Judgement14 May 2026
- 2026Calibrate, Don't Curate: Label-Efficient Estimation from Noisy LLM Judges10 May 2026
- 2026Beyond Accuracy: Policy Invariance as a Reliability Test for LLM Safety Judges7 May 2026
- 2026Evaluating Epistemic Guardrails in AI Reading Assistants: A Behavioral Audit of a Minimal Prototype30 Apr 2026
- 2026Calibrate-Then-Delegate: Safety Monitoring with Risk and Budget Guarantees via Model Cascades15 Apr 2026
50 newest of 99 All 99 (JSON)
- 2025Multi-Agent LLM Judge: automatic personalized LLM judge design for evaluating natural language generation applicationscited by 7
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 6
- 2025Continual Learning, Not Training: Online Adaptation For Agentscited by 4
- 2026GAUGE: When Not to Trust LLM-as-a-Judge in User-Simulated Evaluation of Task-Oriented Agentscited by 3
- 2026CodeRescue: Budget-Calibrated Recovery Routing for Coding Agentscited by 2
- 2026Supporting System Testing with a Multi-Agent LLM-based Framework for Knowledge Graph Extraction: A Case Study with Ethernet Switch Systemscited by 0
- 2026Calibrating Conservatism for Scalable Oversightcited by 0
- 2026Design and Evaluation of Multi-Agent AI Oracle Systems for Prediction Market Resolutioncited by 0
- 2026Share the Judge, Learn the Deferral: Where Specialization Helps LLM Evaluationcited by 0
- 2026Benchmarking LLM Judges for Mobile Agent Evaluationcited by 0
- 2026Dear Algo: A Precision-First Agentic Intent Layer for Unified Search and Recommendationcited by 0
- 2026Designing a Robust LLM-Based Evaluation System for Agentic AI in Drug Discovery Through Human Alignmentcited by 0
12 most cited of 15 All 15 (JSON)
- 2026JuryFlow: Disagreement-Guided Human-in-the-Loop Multi-Agent Evaluation30 Sep 2026
- 2026Certified Selective Automation of LLM Agent Evaluation28 Sep 2026
- 2026GAUGE: When Not to Trust LLM-as-a-Judge in User-Simulated Evaluation of Task-Oriented Agents10 Sep 2026
- 2026Robust Conformal Consensus: Multi-Agent LLM-as-a-Judge Interval Evaluation with Conformal Prediction6 Sep 2026
- 2026Designing a Robust LLM-Based Evaluation System for Agentic AI in Drug Discovery Through Human Alignment21 Aug 2026
- 2026Dear Algo: A Precision-First Agentic Intent Layer for Unified Search and Recommendation16 Aug 2026
- 2026Benchmarking LLM Judges for Mobile Agent Evaluation11 Aug 2026
- 2026Share the Judge, Learn the Deferral: Where Specialization Helps LLM Evaluation30 Jul 2026
- 2026CodeRescue: Budget-Calibrated Recovery Routing for Coding Agents21 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026Design and Evaluation of Multi-Agent AI Oracle Systems for Prediction Market Resolution29 May 2026
- 2026Calibrating Conservatism for Scalable Oversight27 May 2026
12 newest of 15 All 15 (JSON)
- 2024A Survey on the Honesty of Large Language Modelscited by 21
- 2025Beyond the Surface: Enhancing LLM-as-a-Judge Alignment with Human via Internal Representationscited by 14
- 2026Calibrate, Don't Curate: Label-Efficient Estimation from Noisy LLM Judgescited by 4
- 2026Small Reward Models via Backward Inferencecited by 2
- 2026Stopping and Routing LLM Judge Panelscited by 1
- 2025Safety Game: Inference-Time Alignment of Black-Box LLMs via Constrained Optimizationcited by 0
- 2026CriterAlign: Criterion-Centric Rationale Alignment for Code Preference Judgingcited by 0
- 2026Towards Spec Learning: Inference-Time Alignment from Preference Pairscited by 0
- 2026Stopping and Routing LLM Judge Panels20 Aug 2026
- 2026Towards Spec Learning: Inference-Time Alignment from Preference Pairs22 Jun 2026
- 2026CriterAlign: Criterion-Centric Rationale Alignment for Code Preference Judging19 May 2026
- 2026Calibrate, Don't Curate: Label-Efficient Estimation from Noisy LLM Judges10 May 2026
- 2026Small Reward Models via Backward Inference14 Feb 2026
- 2025Safety Game: Inference-Time Alignment of Black-Box LLMs via Constrained Optimization10 Oct 2025
- 2025Beyond the Surface: Enhancing LLM-as-a-Judge Alignment with Human via Internal Representations5 Aug 2025
- 2024A Survey on the Honesty of Large Language Models27 Sep 2024
- 2025A Survey of Frontiers in LLM Reasoning: Inference Scaling, Learning to Reason, and Agentic Systemscited by 108
- 2026JEV-as-a-Judge: Accept When Confident, Escalate When Unsurecited by 14
- 2025THiNK: Can Large Language Models Think-aloud?cited by 3
- 2026HyPAC: Cost-Efficient LLMs-Human Hybrid Annotation with PAC Error Guaranteescited by 1
- 2026JEV-as-a-Judge: Accept When Confident, Escalate When Unsure22 Sep 2026
- 2026HyPAC: Cost-Efficient LLMs-Human Hybrid Annotation with PAC Error Guarantees30 Jan 2026
- 2025THiNK: Can Large Language Models Think-aloud?26 May 2025
- 2025A Survey of Frontiers in LLM Reasoning: Inference Scaling, Learning to Reason, and Agentic Systems12 Apr 2025
- 2026BalanceRAG: Joint Risk Calibration for Cascaded Retrieval-Augmented Generationcited by 2
- 2026To Isolate or to Score? Model-Adaptive Assessment for Cost-Efficient Multi-Agent RAGcited by 2
- 2025RAGtifier: Evaluating RAG Generation Approaches of State-of-the-Art RAG Systems for the SIGIR LiveRAG Competitioncited by 1
- 2026To Isolate or to Score? Model-Adaptive Assessment for Cost-Efficient Multi-Agent RAG23 Jun 2026
- 2026BalanceRAG: Joint Risk Calibration for Cascaded Retrieval-Augmented Generation19 May 2026
- 2025RAGtifier: Evaluating RAG Generation Approaches of State-of-the-Art RAG Systems for the SIGIR LiveRAG Competition17 Jun 2025
- 2024From Generation to Judgment: Opportunities and Challenges of LLM-as-a-judgecited by 480
- 2024LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methodscited by 451
- 2024A Survey on Uncertainty Quantification of Large Language Models: Taxonomy, Open Research Challenges, and Future Directionscited by 115
- 2025The Alternative Annotator Test for LLM-as-a-Judge: How to Statistically Justify Replacing Human Annotators with LLMscited by 72
- 2024Limits to scalable evaluation at the frontier: LLM as Judge won't beat twice the datacited by 46
- 2025Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarkscited by 26
- 2025Analyzing Uncertainty of LLM-as-a-Judge: Interval Evaluations with Conformal Predictioncited by 26
- 2025When One LLM Drools, Multi-LLM Collaboration Rulescited by 25
- 2025How to Correctly Report LLM-as-a-Judge Evaluationscited by 25
- 2025ProfBench: Multi-Domain Rubrics requiring Professional Knowledge to Answer and Judgecited by 21
- 2026Nine Judges, Two Effective Votes: Correlated Errors Undermine LLM Evaluation Panelscited by 21
- 2025Variation in Verification: Understanding Verification Dynamics in Large Language Modelscited by 18
12 most cited of 64 All 64 (JSON)
- 2026RAIM: Robust Aggregation of Inexpensive Models for Hallucination Detection30 Sep 2026
- 2026Hard-Gate Candidacy in a Deployed Validator Suite30 Sep 2026
- 2026VEX-Bench: Benchmarking Verification Complexity of LLM-Generated Misinformation28 Sep 2026
- 2026MISHAP-Bench: A Hallucination Benchmark for Large Audio-Language Models27 Sep 2026
- 2026LLM Judge Validation Under Sparse Overlap: From Inference to Design25 Sep 2026
- 2026JEV vs. LLMs as Rubric Judges: Cheaper, Faster, and Wrong in the Same Places24 Sep 2026
- 2026Structured Claim-Level Discourse Representations for Dense Health Narratives16 Sep 2026
- 2026Auditing and Repairing LLM-as-Judge Failures in a Production Text-to-SQL Pipeline9 Sep 2026
- 2026Decomposing LLM-Judge Uncertainty to Target Expert Labels6 Sep 2026
- 2026The First Token Is Not the Verdict: Hidden Costs of Reading LLM Judges Without Generating4 Sep 2026
- 2026EvalMem: An Operation-Level Diagnostic Framework for Long-Term Memory Systems3 Sep 2026
- 2026Multi-Expert Conformal Risk Control for Pairwise LLM Judging in Open-Ended Dialogue27 Aug 2026
12 newest of 64 All 64 (JSON)