Non-Determinism of "Deterministic" LLM Settings
Not on the map. Why?
Abstract (arXiv)
LLM (large language model) practitioners commonly notice that outputs can vary for the same inputs under settings expected to be deterministic. Yet the questions of how pervasive this is, and with what impact on results, have not to our knowledge been systematically investigated. We investigate non-determinism in five LLMs configured to be deterministic when applied to eight common tasks in across 10 runs, in both zero-shot and few-shot settings. We see accuracy variations up to 15% across naturally occurring runs with a gap of best possible performance to worst possible performance up to 70%. In fact, none of the LLMs consistently delivers repeatable accuracy across all tasks, much less identical output strings. Sharing preliminary results with insiders has revealed that non-determinism perhaps essential to the efficient use of compute resources via co-mingled data in input buffers so this issue is not going away anytime soon. To better quantify our observations, we introduce metrics focused on quantifying determinism, TARr@N for the total agreement rate at N runs over raw output, and TARa@N for total agreement rate of parsed-out answers. Our code and data are publicly available at https://github.com/breckbaldwin/llm-stability.
Key facts. Cited by 84 papers in the map (data through 7 Oct 2026). Builds on 19 of its 33 references that are in the map. First posted on arXiv 6 Aug 2024.
Builds on
19 of 33 references.
References · 19
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,767
- 2024MMLU-Pro: A More Robust and Challenging Multi-Task Language Understanding Benchmarkcited by 1,758
- 2024A Survey on Large Language Models for Code Generationcited by 646
- 2022Reasoning with Language Model Prompting: A Surveycited by 251
- 2022Leveraging Large Language Models for Multiple Choice Question Answeringcited by 199
- 2024Are We Done with MMLU?cited by 178
- 2024Lessons from the Trenches on Reproducible Evaluation of Language Modelscited by 172
- 2023An Empirical Study of the Non-determinism of ChatGPT in Code Generationcited by 134
7 more
- 2023Quantifying Uncertainty in Answers from any Language Model and Enhancing their Trustworthinesscited by 121
- 2024The Good, The Bad, and The Greedy: Evaluation of LLMs Should Not Ignore Non-Determinismcited by 113
- 2023MultiLegalPile: A 689GB Multilingual Legal Corpuscited by 59
- 2023Cost-Effective Hyperparameter Optimization for Large Language Model Generation Inferencecited by 40
- 2023The ART of LLM Refinement: Ask, Refine, and Trustcited by 29
- 2020Contextual Temperature for Language Modelingcited by 25
- 2023How Good Are LLMs at Out-of-Distribution Detection?cited by 15
Built on by
Citing papers per year: 2024: 1; 2025: 27; 2026: 56.
84 papers.
Sort:
By area:
- 2025A Sober Look at Progress in Language Model Reasoning: Pitfalls and Paths to Reproducibilitycited by 89
- 2025RobustFlow: Towards Robust Agentic Workflow Generationcited by 19
- 2025On the Effect of Sampling Diversity in Scaling LLM Inferencecited by 18
- 2025Evaluating Long-Context Reasoning in LLM-Based WebAgentscited by 15
- 2025Taming Uncertainty via Automation: Observing, Analyzing, and Optimizing Agentic AI Systemscited by 12
- 2026ACRFence: Preventing Semantic Rollback Attacks in Agent Checkpoint-Restorecited by 9
- 2025Challenges in Testing Large Language Model Based Software: A Faceted Taxonomycited by 8
- 2025Evaluation and Facilitation of Online Discussions in the LLM Era: A Surveycited by 8
- 2025ATLAS: Adaptive Trading with LLM AgentS Through Dynamic Prompt Optimization and Multi-Agent Coordinationcited by 7
- 2026Toward Expert Investment Teams:A Multi-Agent LLM System with Fine-Grained Trading Taskscited by 7
- 2025LLM Output Drift: Cross-Provider Validation & Mitigation for Financial Workflowscited by 6
- 2025STED and Consistency Scoring: A Framework for Evaluating LLM Structured Output Reliabilitycited by 5
38 more
- 2026Accuracy, Stability, and Repeated-Run Reliability of Large Language Models on Deterministic Programming Taskscited by 4
- 2025Through the Prism of Culture: Evaluating LLMs' Understanding of Indian Subcultures and Traditionscited by 3
- 2025The Non-Determinism of Small LLMs: Evidence of Low Answer Consistency in Repetition Trials of Standard Multiple-Choice Benchmarkscited by 3
- 2025Can LLMs Make (Personalized) Access Control Decisions?cited by 3
- 2026Beyond Reproducibility: Token Probabilities Expose Large Language Model Nondeterminismcited by 3
- 2026Multi-Agent Taint Specification Extraction for Vulnerability Detectioncited by 3
- 2026Compiled AI: Deterministic Code Generation for LLM-Based Workflow Automationcited by 3
- 2026Efficient Provably Secure Linguistic Steganography via Range Codingcited by 3
- 2026EQUITRIAGE: A Fairness Audit of Gender Bias in LLM-Based Emergency Department Triagecited by 3
- 2026FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequencescited by 3
- 2024Evaluating and Advancing Multimodal Large Language Models in Perception Ability Lenscited by 2
- 2025Designing Synthetic Discussion Generation Systems: A Case Study for Online Facilitationcited by 2
- 2025Something Just Like TRuST : Toxicity Recognition of Span and Targetcited by 2
- 2025LLM Based Bayesian Optimization for Prompt Searchcited by 2
- 2025ATA: A Neuro-Symbolic Approach to Implement Autonomous and Trustworthy Agentscited by 2
- 2025T-pro 2.0: An Efficient Russian Hybrid-Reasoning Model and Playgroundcited by 2
- 2026A Guide to Large Language Models in Modeling and Simulation: From Core Techniques to Critical Challengescited by 2
- 2026Cross-Context Verification: Hierarchical Detection of Benchmark Contamination through Session-Isolated Analysiscited by 2
- 2026Anchored Sliding Window: Toward Robust and Imperceptible Linguistic Steganographycited by 2
- 2026Introducing Background Temperature to Characterise Hidden Randomness in Large Language Modelscited by 2
- 2026Reasoning effort, not tool access, buys first-try reliability in agentic code generation: an observational studycited by 2
- 2026The Dice Roll Method: A Standardized Protocol for Repeated-Query Auditing of Large Language Model Brand Recommendationscited by 2
- 2025Event Segmentation Applications in Large Language Model Enabled Automated Recall Assessmentscited by 1
- 2025Reading Smiles: Proxy Bias in Foundation Models for Facial Emotion Recognitioncited by 1
- 2025MetaCipher: A Time-Persistent and Universal Multi-Agent Framework for Cipher-Based Jailbreak Attacks for LLMscited by 1
- 2025The Trust in AI-Generated Health Advice (TAIGHA) Scale and Short Version (TAIGHA-S): Development and Validation Studycited by 1
- 2026The Stability Trap: Evaluating the Reliability of LLM-Based Instruction Adherence Auditingcited by 1
- 2026Communication Enhances LLMs' Stability in Strategic Thinkingcited by 1
- 2026Beyond Relevance: On the Relationship Between Retrieval and RAG Information Coveragecited by 1
- 2026Like a Hammer, It Can Build, It Can Break: Large Language Model Uses, Perceptions, and Adoption in Cybersecurity Operations on Redditcited by 1
- 2026Iterating Toward Better Search: A Two-Agent Simulation Framework for Evaluating Agentic Search Architectures in E-Commercecited by 1
- 2026A Large-Scale Multi-Dimensional Empirical Study of LLMs for Conversation Summarizationcited by 1
- 2026A Reliability Assessment of LALM Audio Judges for Full-Duplex Voice Agentscited by 1
- 2026CAFE: A Compound-AI Factorial Evaluation Frameworkcited by 1
- 2026The Language of the Question Selects the Market: Query Language and Exit IP as Separable Factors in Commercial Recommendations from a Generative Search Interfacecited by 1
- 2025AutoTestForge: A Multidimensional Automated Testing Framework for Natural Language Processing Modelscited by 0
- 2025LAMP: Extracting Local Decision Surfaces From Large Language Modelscited by 0
- 2025BeLLMan: Controlling LLM Congestioncited by 0
50 most cited of 84 All 84 (JSON)
- 2026Better Deck or Different Judge? Evaluating Agentic Harness Gains in Corporate and Investment Banking30 Sep 2026
- 2026Dating the Model: Hidden Dates in System Prompts Affect LLM Evaluation29 Sep 2026
- 2026How Much Prompt Is Enough? A Blackbox Minimization of Few-Shots in LLMs28 Sep 2026
- 2026Measurement Boundaries in LLM Financial Agent Evaluation: Fixed-Tape Execution and Multi-Defect Auditing26 Sep 2026
- 2026Same Probe, Different Numbers: Are Activation Probes Robust to Inference-Time Numerical Non-Determinism?25 Sep 2026
- 2026Greedy Decoding Is Not Precision-Invariant: Cross-Precision Output Divergence in LLM Inference22 Sep 2026
- 2026When Hiring Becomes Agent-Mediated: Evaluating Access and Recurrence in Two-Agent R'esum'e Screening17 Sep 2026
- 2026Cheap Talk Stabilizes Strategic Interaction in LLM Agents14 Sep 2026
- 2026Same Patient, Different Order: Action-Level Reliability of Clinical LLM Agents Under Repeated Runs11 Sep 2026
- 2026Break Step: Recursive Training Resonates with Replayed Sampling Noise10 Sep 2026
- 2026SIFTING: A Novel LLM-Based Framework for Structured and Transparent Information Extraction from Clinical Free-Text Reports, with Application to Tumor Staging in Lung Cancer7 Sep 2026
- 2026Ask a Language Model for Lottery Numbers: Concentration in Repeated Six-of-49 Outputs4 Sep 2026
38 more
- 2026Measuring Brand and Source Discovery under Repeated LLM Queries: A Finite-Sample Audit4 Sep 2026
- 2026Same Request, Different Answer: Quantization Amplifies Cache-Induced Divergence in LLM Serving4 Sep 2026
- 2026Clean Engineering, Unstable Measurement: A Preregistered Reliability Failure of Black-Box LLM Observers on Shared Endpoints3 Sep 2026
- 2026The Dice Roll Method: A Standardized Protocol for Repeated-Query Auditing of Large Language Model Brand Recommendations3 Sep 2026
- 2026Instability Floors: Separating Bias from Noise in Fairness Audits of Clinical LLM Agents with FairMedAgent2 Sep 2026
- 2026The Language of the Question Selects the Market: Query Language and Exit IP as Separable Factors in Commercial Recommendations from a Generative Search Interface30 Aug 2026
- 2026A Comprehensive Survey on Linguistic Steganography: Methods, Countermeasures, Evaluation, and Challenges29 Aug 2026
- 2026PromptResponse: Optimizing Prompts for LLM Coding Tasks21 Aug 2026
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Control20 Aug 2026
- 2026KGCache: Amortized Subgraph Retrieval for KG Reasoning with LLMs8 Aug 2026
- 2026CAFE: A Compound-AI Factorial Evaluation Framework11 Jul 2026
- 2026A Reliability Assessment of LALM Audio Judges for Full-Duplex Voice Agents8 Jul 2026
- 2026Alignment Plausibility: A New Standard for Assuring AI in Healthcare8 Jul 2026
- 2026Reasoning effort, not tool access, buys first-try reliability in agentic code generation: an observational study2 Jul 2026
- 2026A Large-Scale Multi-Dimensional Empirical Study of LLMs for Conversation Summarization14 Jun 2026
- 2026Iterating Toward Better Search: A Two-Agent Simulation Framework for Evaluating Agentic Search Architectures in E-Commerce11 Jun 2026
- 2026FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequences2 Jun 2026
- 2026Disentangling Visual and Factual Correctness in LVLMs' Visualization Literacy2 Jun 2026
- 2026Accuracy, Stability, and Repeated-Run Reliability of Large Language Models on Deterministic Programming Tasks30 May 2026
- 2026Multi-Agent LLM-based Metamorphic Testing for REST APIs27 May 2026
- 2026A Paired Testing Protocol for Batch-Conditioned Refusal Robustness in LLM Serving26 May 2026
- 2026Multi-Agent Specification-based Metamorphic Testing of FMU-Based Simulations24 May 2026
- 2026EQUITRIAGE: A Fairness Audit of Gender Bias in LLM-Based Emergency Department Triage5 May 2026
- 2026Introducing Background Temperature to Characterise Hidden Randomness in Large Language Models24 Apr 2026
- 2026FixV2W: Correcting Invalid CVE-CWE Mappings with Knowledge Graph Embeddings24 Apr 2026
- 2026Like a Hammer, It Can Build, It Can Break: Large Language Model Uses, Perceptions, and Adoption in Cybersecurity Operations on Reddit11 Apr 2026
- 2026Anchored Sliding Window: Toward Robust and Imperceptible Linguistic Steganography10 Apr 2026
- 2026Efficient Provably Secure Linguistic Steganography via Range Coding9 Apr 2026
- 2026Compiled AI: Deterministic Code Generation for LLM-Based Workflow Automation6 Apr 2026
- 2026Cross-Context Verification: Hierarchical Detection of Benchmark Contamination through Session-Isolated Analysis23 Mar 2026
- 2026ACRFence: Preventing Semantic Rollback Attacks in Agent Checkpoint-Restore21 Mar 2026
- 2026Beyond Relevance: On the Relationship Between Retrieval and RAG Information Coverage9 Mar 2026
- 2026Real-World AI Evaluation: How FRAME Generates Systematic Evidence to Resolve the Decision-Maker's Dilemma28 Feb 2026
- 2026Toward Expert Investment Teams:A Multi-Agent LLM System with Fine-Grained Trading Tasks26 Feb 2026
- 2026A Guide to Large Language Models in Modeling and Simulation: From Core Techniques to Critical Challenges5 Feb 2026
- 2026Same Input, Different Scores: A Multi Model Study on the Inconsistency of LLM Judge4 Feb 2026
- 2026Communication Enhances LLMs' Stability in Strategic Thinking4 Feb 2026
- 2026RAG-DIVE: A Dynamic Approach for Multi-Turn Dialogue Evaluation in Retrieval-Augmented Generation30 Jan 2026
50 newest of 84 All 84 (JSON)
- 2025RobustFlow: Towards Robust Agentic Workflow Generationcited by 19
- 2025Taming Uncertainty via Automation: Observing, Analyzing, and Optimizing Agentic AI Systemscited by 12
- 2026ACRFence: Preventing Semantic Rollback Attacks in Agent Checkpoint-Restorecited by 9
- 2025Challenges in Testing Large Language Model Based Software: A Faceted Taxonomycited by 8
- 2025ATLAS: Adaptive Trading with LLM AgentS Through Dynamic Prompt Optimization and Multi-Agent Coordinationcited by 7
- 2026Toward Expert Investment Teams:A Multi-Agent LLM System with Fine-Grained Trading Taskscited by 7
- 2026Multi-Agent Taint Specification Extraction for Vulnerability Detectioncited by 3
- 2025ATA: A Neuro-Symbolic Approach to Implement Autonomous and Trustworthy Agentscited by 2
- 2025MetaCipher: A Time-Persistent and Universal Multi-Agent Framework for Cipher-Based Jailbreak Attacks for LLMscited by 1
- 2026Iterating Toward Better Search: A Two-Agent Simulation Framework for Evaluating Agentic Search Architectures in E-Commercecited by 1
- 2026Multi-Agent Specification-based Metamorphic Testing of FMU-Based Simulationscited by 0
- 2026Multi-Agent LLM-based Metamorphic Testing for REST APIscited by 0
12 most cited of 18 All 18 (JSON)
- 2026Better Deck or Different Judge? Evaluating Agentic Harness Gains in Corporate and Investment Banking30 Sep 2026
- 2026Measurement Boundaries in LLM Financial Agent Evaluation: Fixed-Tape Execution and Multi-Defect Auditing26 Sep 2026
- 2026When Hiring Becomes Agent-Mediated: Evaluating Access and Recurrence in Two-Agent R'esum'e Screening17 Sep 2026
- 2026Cheap Talk Stabilizes Strategic Interaction in LLM Agents14 Sep 2026
- 2026Same Patient, Different Order: Action-Level Reliability of Clinical LLM Agents Under Repeated Runs11 Sep 2026
- 2026Testing and Evaluation of Agentic AI Systems In Military Command and Control20 Aug 2026
- 2026Iterating Toward Better Search: A Two-Agent Simulation Framework for Evaluating Agentic Search Architectures in E-Commerce11 Jun 2026
- 2026Multi-Agent LLM-based Metamorphic Testing for REST APIs27 May 2026
- 2026Multi-Agent Specification-based Metamorphic Testing of FMU-Based Simulations24 May 2026
- 2026ACRFence: Preventing Semantic Rollback Attacks in Agent Checkpoint-Restore21 Mar 2026
- 2026Toward Expert Investment Teams:A Multi-Agent LLM System with Fine-Grained Trading Tasks26 Feb 2026
- 2026Multi-Agent Taint Specification Extraction for Vulnerability Detection15 Jan 2026
12 newest of 18 All 18 (JSON)
- 2025A Sober Look at Progress in Language Model Reasoning: Pitfalls and Paths to Reproducibilitycited by 89
- 2025Evaluating Long-Context Reasoning in LLM-Based WebAgentscited by 15
- 2025T-pro 2.0: An Efficient Russian Hybrid-Reasoning Model and Playgroundcited by 2
- 2026Reasoning effort, not tool access, buys first-try reliability in agentic code generation: an observational studycited by 2
- 2026Communication Enhances LLMs' Stability in Strategic Thinkingcited by 1
- 2026KGCache: Amortized Subgraph Retrieval for KG Reasoning with LLMscited by 0
- 2026Dating the Model: Hidden Dates in System Prompts Affect LLM Evaluationcited by 0
- 2026Dating the Model: Hidden Dates in System Prompts Affect LLM Evaluation29 Sep 2026
- 2026KGCache: Amortized Subgraph Retrieval for KG Reasoning with LLMs8 Aug 2026
- 2026Reasoning effort, not tool access, buys first-try reliability in agentic code generation: an observational study2 Jul 2026
- 2026Communication Enhances LLMs' Stability in Strategic Thinking4 Feb 2026
- 2025T-pro 2.0: An Efficient Russian Hybrid-Reasoning Model and Playground11 Dec 2025
- 2025Evaluating Long-Context Reasoning in LLM-Based WebAgents3 Dec 2025
- 2025A Sober Look at Progress in Language Model Reasoning: Pitfalls and Paths to Reproducibility9 Apr 2025
- 2025On the Effect of Sampling Diversity in Scaling LLM Inferencecited by 18
- 2025Evaluation and Facilitation of Online Discussions in the LLM Era: A Surveycited by 8
- 2025LLM Output Drift: Cross-Provider Validation & Mitigation for Financial Workflowscited by 6
- 2025STED and Consistency Scoring: A Framework for Evaluating LLM Structured Output Reliabilitycited by 5
- 2026Accuracy, Stability, and Repeated-Run Reliability of Large Language Models on Deterministic Programming Taskscited by 4
- 2025Through the Prism of Culture: Evaluating LLMs' Understanding of Indian Subcultures and Traditionscited by 3
- 2025The Non-Determinism of Small LLMs: Evidence of Low Answer Consistency in Repetition Trials of Standard Multiple-Choice Benchmarkscited by 3
- 2025Can LLMs Make (Personalized) Access Control Decisions?cited by 3
- 2026Beyond Reproducibility: Token Probabilities Expose Large Language Model Nondeterminismcited by 3
- 2026Compiled AI: Deterministic Code Generation for LLM-Based Workflow Automationcited by 3
- 2026Efficient Provably Secure Linguistic Steganography via Range Codingcited by 3
- 2026EQUITRIAGE: A Fairness Audit of Gender Bias in LLM-Based Emergency Department Triagecited by 3
12 most cited of 52 All 52 (JSON)
- 2026How Much Prompt Is Enough? A Blackbox Minimization of Few-Shots in LLMs28 Sep 2026
- 2026Same Probe, Different Numbers: Are Activation Probes Robust to Inference-Time Numerical Non-Determinism?25 Sep 2026
- 2026Greedy Decoding Is Not Precision-Invariant: Cross-Precision Output Divergence in LLM Inference22 Sep 2026
- 2026Break Step: Recursive Training Resonates with Replayed Sampling Noise10 Sep 2026
- 2026SIFTING: A Novel LLM-Based Framework for Structured and Transparent Information Extraction from Clinical Free-Text Reports, with Application to Tumor Staging in Lung Cancer7 Sep 2026
- 2026Ask a Language Model for Lottery Numbers: Concentration in Repeated Six-of-49 Outputs4 Sep 2026
- 2026Measuring Brand and Source Discovery under Repeated LLM Queries: A Finite-Sample Audit4 Sep 2026
- 2026Clean Engineering, Unstable Measurement: A Preregistered Reliability Failure of Black-Box LLM Observers on Shared Endpoints3 Sep 2026
- 2026The Dice Roll Method: A Standardized Protocol for Repeated-Query Auditing of Large Language Model Brand Recommendations3 Sep 2026
- 2026Instability Floors: Separating Bias from Noise in Fairness Audits of Clinical LLM Agents with FairMedAgent2 Sep 2026
- 2026The Language of the Question Selects the Market: Query Language and Exit IP as Separable Factors in Commercial Recommendations from a Generative Search Interface30 Aug 2026
- 2026A Comprehensive Survey on Linguistic Steganography: Methods, Countermeasures, Evaluation, and Challenges29 Aug 2026
12 newest of 52 All 52 (JSON)