SysBench: Can Large Language Models Follow System Messages?
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) have become instrumental across various applications, with the customization of these models to specific scenarios becoming increasingly critical. System message, a fundamental component of LLMs, is consist of carefully crafted instructions that guide the behavior of model to meet intended goals. Despite the recognized potential of system messages to optimize AI-driven solutions, there is a notable absence of a comprehensive benchmark for evaluating how well LLMs follow system messages. To fill this gap, we introduce SysBench, a benchmark that systematically analyzes system message following ability in terms of three limitations of existing LLMs: constraint violation, instruction misjudgement and multi-turn instability. Specifically, we manually construct evaluation dataset based on six prevalent types of constraints, including 500 tailor-designed system messages and multi-turn user conversations covering various interaction relationships. Additionally, we develop a comprehensive evaluation protocol to measure model performance. Finally, we conduct extensive evaluation across various existing LLMs, measuring their ability to follow specified constraints given in system messages. The results highlight both the strengths and weaknesses of existing models, offering key insights and directions for future research. The open source library SysBench is available at https://github.com/PKU-Baichuan-MLSystemLab/SysBench.
Key facts. Cited by 26 papers in the map (data through 7 Oct 2026). Builds on 28 of its 37 references that are in the map. First posted on arXiv 20 Aug 2024.
Builds on
28 of 37 references.
References · 28
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,072
- 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,722
- 2023AgentBench: Evaluating LLMs as Agentscited by 1,211
- 2023Instruction-Following Evaluation for Large Language Modelscited by 1,143
- 2024ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Toolscited by 1,096
- 2024DeepSeek-V2: A Strong, Economical, and Efficient Mixture-of-Experts Language Modelcited by 1,093
- 2023Large Language Models Can Be Easily Distracted by Irrelevant Contextcited by 820
- 2024The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructionscited by 441
- 2023Orca: Progressive Learning from Complex Explanation Traces of GPT-4cited by 369
16 more
- 2021ERNIE 3.0: Large-scale Knowledge Enhanced Pre-training for Language Understanding and Generationcited by 258
- 2022TALM: Tool Augmented Language Modelscited by 197
- 2023In-Context Impersonation Reveals Large Language Models' Strengths and Biasescited by 154
- 2024Benchmarking Complex Instruction-Following with Multiple Constraints Compositioncited by 147
- 2024Investigating Cultural Alignment of Large Language Modelscited by 140
- 2024InFoBench: Evaluating Instruction Following Ability in Large Language Modelscited by 128
- 2023FollowBench: A Multi-level Fine-grained Constraints Following Benchmark for Large Language Modelscited by 112
- 2024Aligning to Thousands of Preferences via System Message Generalizationcited by 84
- 2024FOFO: A Benchmark to Evaluate LLMs' Format-Following Capabilitycited by 79
- 2023Can Large Language Models Understand Real-World Complex Instructions?cited by 69
- 2024CFBench: A Comprehensive Constraints-Following Benchmark for LLMscited by 65
- 2023Can LLMs Follow Simple Rules?cited by 45
- 2023Instruction-following Evaluation through Verbalizer Manipulationcited by 30
- 2024Is the System Message Really Important to Jailbreaks in Large Language Models?cited by 19
- 2023Beyond ChatBots: ExploreLLM for Structured Thoughts and Personalized Model Responsescited by 18
- 2024SoFA: Shielded On-the-fly Alignment via Priority Rule Followingcited by 18
Built on by
Citing papers per year: 2024: 3; 2025: 11; 2026: 12.
26 papers.
Sort:
By area:
- 2024BALROG: Benchmarking Agentic LLM and VLM Reasoning On Gamescited by 141
- 2025AdaCoT: Pareto-Optimal Adaptive Chain-of-Thought Triggering via Reinforcement Learningcited by 86
- 2025IHEval: Evaluating Language Models on Following the Instruction Hierarchycited by 48
- 2025AGENTIF: Benchmarking Instruction Following of Large Language Models in Agentic Scenarioscited by 44
- 2024LIFBench: Evaluating the Instruction Following Performance and Stability of Large Language Models in Long-Context Scenarioscited by 31
- 2025SOPBench: Evaluating Language Agents at Following Standard Operating Procedures and Constraintscited by 21
- 2025Position is Power: System Prompts as a Mechanism of Bias in Large Language Models (LLMs)cited by 19
- 2025WebGames: Challenging General-Purpose Web-Browsing AI Agentscited by 12
- 2026Prompt Injection as Role Confusioncited by 11
- 2025IF-VidCap: Can Video Caption Models Follow Instructions?cited by 7
- 2026Security Considerations for Artificial Intelligence Agentscited by 7
- 2024Baichuan Alignment Technical Reportcited by 6
14 more
- 2025Reverse Preference Optimization for Complex Instruction Followingcited by 2
- 2026Steering Instruction Hierarchies at Inference Timecited by 2
- 2025System Message Generation for User Preferences using Open-Source Modelscited by 1
- 2025LoopServe: An Adaptive Dual-phase LLM Inference Acceleration System for Multi-Turn Dialoguescited by 1
- 2025Analyzing and Internalizing Complex Policy Documents for LLM Agentscited by 1
- 2026SafePyramid: A Hierarchical Benchmark for In-context Policy Guardrailingcited by 1
- 2026How LLMs Follow Instructions: Skillful Coordination, Not a Universal Mechanismcited by 0
- 2026System-Prompt Anchoring with Cross-Attention Layerscited by 0
- 2026Efficient Safety Alignment of Language Models via Latent Personality Traitscited by 0
- 2026@skills: Attention is all you havecited by 0
- 2026Compliance, Capability, and Conflict: Benchmarking Multimodal LLMs under System Messagescited by 0
- 2026Seeing Through Conflicts: Improving Instruction Hierarchy Alignment in Vision-Language Modelscited by 0
- 2026RLVR2: Reinforcement Learning with Verifiable Rubric-based Rankingcited by 0
- 2026Hunyuan-A13B Technical Reportcited by 0
- 2026Hunyuan-A13B Technical Report23 Sep 2026
- 2026RLVR2: Reinforcement Learning with Verifiable Rubric-based Ranking20 Sep 2026
- 2026Seeing Through Conflicts: Improving Instruction Hierarchy Alignment in Vision-Language Models3 Sep 2026
- 2026@skills: Attention is all you have12 Aug 2026
- 2026Steering Instruction Hierarchies at Inference Time28 Jul 2026
- 2026Efficient Safety Alignment of Language Models via Latent Personality Traits8 Jul 2026
- 2026SafePyramid: A Hierarchical Benchmark for In-context Policy Guardrailing29 Jun 2026
- 2026Compliance, Capability, and Conflict: Benchmarking Multimodal LLMs under System Messages12 Jun 2026
- 2026System-Prompt Anchoring with Cross-Attention Layers10 May 2026
- 2026How LLMs Follow Instructions: Skillful Coordination, Not a Universal Mechanism7 Apr 2026
- 2026Security Considerations for Artificial Intelligence Agents12 Mar 2026
- 2026Prompt Injection as Role Confusion22 Feb 2026
14 more
- 2025IF-VidCap: Can Video Caption Models Follow Instructions?21 Oct 2025
- 2025Analyzing and Internalizing Complex Policy Documents for LLM Agents13 Oct 2025
- 2025LoopServe: An Adaptive Dual-phase LLM Inference Acceleration System for Multi-Turn Dialogues18 Jul 2025
- 2025Reverse Preference Optimization for Complex Instruction Following28 May 2025
- 2025Position is Power: System Prompts as a Mechanism of Bias in Large Language Models (LLMs)27 May 2025
- 2025AGENTIF: Benchmarking Instruction Following of Large Language Models in Agentic Scenarios22 May 2025
- 2025AdaCoT: Pareto-Optimal Adaptive Chain-of-Thought Triggering via Reinforcement Learning17 May 2025
- 2025SOPBench: Evaluating Language Agents at Following Standard Operating Procedures and Constraints11 Mar 2025
- 2025WebGames: Challenging General-Purpose Web-Browsing AI Agents25 Feb 2025
- 2025System Message Generation for User Preferences using Open-Source Models17 Feb 2025
- 2025IHEval: Evaluating Language Models on Following the Instruction Hierarchy12 Feb 2025
- 2024BALROG: Benchmarking Agentic LLM and VLM Reasoning On Games20 Nov 2024
- 2024LIFBench: Evaluating the Instruction Following Performance and Stability of Large Language Models in Long-Context Scenarios11 Nov 2024
- 2024Baichuan Alignment Technical Report19 Oct 2024
- 2025AGENTIF: Benchmarking Instruction Following of Large Language Models in Agentic Scenarioscited by 44
- 2025SOPBench: Evaluating Language Agents at Following Standard Operating Procedures and Constraintscited by 21
- 2025WebGames: Challenging General-Purpose Web-Browsing AI Agentscited by 12
- 2025Analyzing and Internalizing Complex Policy Documents for LLM Agentscited by 1
- 2025Analyzing and Internalizing Complex Policy Documents for LLM Agents13 Oct 2025
- 2025AGENTIF: Benchmarking Instruction Following of Large Language Models in Agentic Scenarios22 May 2025
- 2025SOPBench: Evaluating Language Agents at Following Standard Operating Procedures and Constraints11 Mar 2025
- 2025WebGames: Challenging General-Purpose Web-Browsing AI Agents25 Feb 2025
- 2026Efficient Safety Alignment of Language Models via Latent Personality Traits8 Jul 2026
- 2025Reverse Preference Optimization for Complex Instruction Following28 May 2025
- 2024Baichuan Alignment Technical Report19 Oct 2024
- 2026Prompt Injection as Role Confusioncited by 11
- 2026SafePyramid: A Hierarchical Benchmark for In-context Policy Guardrailingcited by 1
- 2026SafePyramid: A Hierarchical Benchmark for In-context Policy Guardrailing29 Jun 2026
- 2026Prompt Injection as Role Confusion22 Feb 2026
- 2026Hunyuan-A13B Technical Reportcited by 0
- 2026Hunyuan-A13B Technical Report23 Sep 2026
- 2025IHEval: Evaluating Language Models on Following the Instruction Hierarchycited by 48
- 2024LIFBench: Evaluating the Instruction Following Performance and Stability of Large Language Models in Long-Context Scenarioscited by 31
- 2025Position is Power: System Prompts as a Mechanism of Bias in Large Language Models (LLMs)cited by 19
- 2026Security Considerations for Artificial Intelligence Agentscited by 7
- 2026Steering Instruction Hierarchies at Inference Timecited by 2
- 2025System Message Generation for User Preferences using Open-Source Modelscited by 1
- 2026How LLMs Follow Instructions: Skillful Coordination, Not a Universal Mechanismcited by 0
- 2026System-Prompt Anchoring with Cross-Attention Layerscited by 0
- 2026@skills: Attention is all you havecited by 0
- 2026RLVR2: Reinforcement Learning with Verifiable Rubric-based Rankingcited by 0
- 2026RLVR2: Reinforcement Learning with Verifiable Rubric-based Ranking20 Sep 2026
- 2026@skills: Attention is all you have12 Aug 2026
- 2026Steering Instruction Hierarchies at Inference Time28 Jul 2026
- 2026System-Prompt Anchoring with Cross-Attention Layers10 May 2026
- 2026How LLMs Follow Instructions: Skillful Coordination, Not a Universal Mechanism7 Apr 2026
- 2026Security Considerations for Artificial Intelligence Agents12 Mar 2026
- 2025Position is Power: System Prompts as a Mechanism of Bias in Large Language Models (LLMs)27 May 2025
- 2025System Message Generation for User Preferences using Open-Source Models17 Feb 2025
- 2025IHEval: Evaluating Language Models on Following the Instruction Hierarchy12 Feb 2025
- 2024LIFBench: Evaluating the Instruction Following Performance and Stability of Large Language Models in Long-Context Scenarios11 Nov 2024