An Auditing Test To Detect Behavioral Shift in Language Models
Not on the map. Why?
Abstract (arXiv)
As language models (LMs) approach human-level performance, a comprehensive understanding of their behavior becomes crucial. This includes evaluating capabilities, biases, task performance, and alignment with societal values. Extensive initial evaluations, including red teaming and diverse benchmarking, can establish a model's behavioral profile. However, subsequent fine-tuning or deployment modifications may alter these behaviors in unintended ways. We present a method for continual Behavioral Shift Auditing (BSA) in LMs. Building on recent work in hypothesis testing, our auditing test detects behavioral shifts solely through model generations. Our test compares model generations from a baseline model to those of the model under scrutiny and provides theoretical guarantees for change detection while controlling false positives. The test features a configurable tolerance parameter that adjusts sensitivity to behavioral changes for different use cases. We evaluate our approach using two case studies: monitoring changes in (a) toxicity and (b) translation performance. We find that the test is able to detect meaningful changes in behavior distributions using just hundreds of examples.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Builds on 84 of its 115 references that are in the map. First posted on arXiv 25 Oct 2024.
Builds on
84 of 115 references.
References · 84
- 2023GPT-4 Technical Reportcited by 18,132
- 2023Generative Agents: Interactive Simulacra of Human Behaviorcited by 3,500
- 2023Mistral 7Bcited by 3,065
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2016Deep Learning with Differential Privacycited by 2,682
- 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,205
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
- 2024MMLU-Pro: A More Robust and Challenging Multi-Task Language Understanding Benchmarkcited by 1,758
- 2018Know What You Don't Know: Unanswerable Questions for SQuADcited by 1,538
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,304
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,239
38 more
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2024The AI Scientist: Towards Fully Automated Open-Ended Scientific Discoverycited by 1,002
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2024Gemma: Open Models Based on Gemini Research and Technologycited by 889
- 2022Super-NaturalInstructions: Generalization via Declarative Instructions on 1600+ NLP Taskscited by 858
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 828
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2021Deduplicating Training Data Makes Language Models Bettercited by 705
- 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 703
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
- 2021Cross-Task Generalization via Natural Language Crowdsourcing Instructionscited by 696
- 2023A Watermark for Large Language Modelscited by 667
- 2018Gender Bias in Coreference Resolution: Evaluation and Debiasing Methodscited by 657
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
- 2023Benchmarking Large Language Models for News Summarizationcited by 444
- 2023Is ChatGPT a Good NLG Evaluator? A Preliminary Studycited by 420
- 2023How Far Can Camels Go? Exploring the State of Instruction Tuning on Open Resourcescited by 405
- 2018HiDDeN: Hiding Data With Deep Networkscited by 384
- 2020Weight Poisoning Attacks on Pre-trained Modelscited by 318
- 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 309
- 2024Aya Model: An Instruction Finetuned Open-Access Multilingual Language Modelcited by 292
- 2021Unsolved Problems in ML Safetycited by 291
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 289
- 2023Robust Distortion-free Watermarks for Language Modelscited by 279
- 2019Predicting the Type and Target of Offensive Posts in Social Mediacited by 268
- 2024A Comprehensive Survey of Hallucination Mitigation Techniques in Large Language Modelscited by 266
- 2023AI Alignment: A Comprehensive Surveycited by 256
- 2023FacTool: Factuality Detection in Generative AI -- A Tool Augmented Framework for Multi-Task and Multi-Domain Scenarioscited by 247
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 246
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Modelscited by 222
- 2018Time-uniform, nonparametric, nonasymptotic confidence sequencescited by 220
- 2020Learning from the Worst: Dynamically Generated Datasets to Improve Online Hate Detectioncited by 217
- 2023A Stitch in Time Saves Nine: Detecting and Mitigating Hallucinations of LLMs by Validating Low-Confidence Generationcited by 202
- 2023Gender bias and stereotypes in Large Language Modelscited by 185
- 2022A New Generation of Perspective API: Efficient Multilingual Character-level Transformerscited by 181
50 most cited of 84 All 84 (JSON)
Built on by
Citing papers per year: 2025: 2; 2026: 6.
8 papers.
- 2025Sequentially Auditing Differential Privacycited by 5
- 2025Sequential Bayesian Evaluation of Large Language Model Behaviorcited by 1
- 2026Agentic AI in Healthcare & Medicine: A Seven-Dimensional Taxonomy for Empirical Evaluation of LLM-based Agentscited by 1
- 2026Global Sequential Testing for Multi-Stream Auditingcited by 1
- 2026Belief-Guided Inference Control for Large Language Model Services via Verifiable Observationscited by 1
- 2026Post-Training at the Edge of Detectability: A Game-Theoretic Approach to Fine-Tuningcited by 0
- 2026The Safeguard Worked. Is the LLM System Safer?cited by 0
- 2026Black-Box Auditing of Epistemic Reliability in Multi-Agent Debate Distillationcited by 0
- 2026Black-Box Auditing of Epistemic Reliability in Multi-Agent Debate Distillation26 Sep 2026
- 2026The Safeguard Worked. Is the LLM System Safer?1 Sep 2026
- 2026Post-Training at the Edge of Detectability: A Game-Theoretic Approach to Fine-Tuning29 Jul 2026
- 2026Belief-Guided Inference Control for Large Language Model Services via Verifiable Observations30 Apr 2026
- 2026Global Sequential Testing for Multi-Stream Auditing25 Feb 2026
- 2026Agentic AI in Healthcare & Medicine: A Seven-Dimensional Taxonomy for Empirical Evaluation of LLM-based Agents4 Feb 2026
- 2025Sequential Bayesian Evaluation of Large Language Model Behavior4 Nov 2025
- 2025Sequentially Auditing Differential Privacy8 Sep 2025