PROMPTEVALS: A Dataset of Assertions and Guardrails for Custom Production Large Language Model Pipelines
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Large language models (LLMs) are increasingly deployed in specialized production data processing pipelines across diverse domains -- such as finance, marketing, and e-commerce. However, when running them in production across many inputs, they often fail to follow instructions or meet developer expectations. To improve reliability in these applications, creating assertions or guardrails for LLM outputs to run alongside the pipelines is essential. Yet, determining the right set of assertions that capture developer requirements for a task is challenging. In this paper, we introduce PROMPTEVALS, a dataset of 2087 LLM pipeline prompts with 12623 corresponding assertion criteria, sourced from developers using our open-source LLM pipeline tools. This dataset is 5x larger than previous collections. Using a hold-out test split of PROMPTEVALS as a benchmark, we evaluated closed- and open-source models in generating relevant assertions. Notably, our fine-tuned Mistral and Llama 3 models outperform GPT-4o by 20.93% on average, offering both reduced latency and improved performance. We believe our dataset can spur further research in LLM reliability, alignment, and prompt engineering.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 43 of its 58 references that are in the map. First posted on arXiv 20 Apr 2025.
Builds on
43 of 58 references.
Closest ancestors · 2
Same direction, newest first
- 2024Building a Domain-specific Guardrail Model in Production24 Jul
- 2024The Need for Guardrails with Large Language Models in Medical Safety-Critical Settings: An Artificial Intelligence Application in the Pharmacovigilance Ecosystem1 Jul
Other references · 41
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,374
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,915
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,795
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
29 more
- 2022Scaling Instruction-Finetuned Language Modelscited by 3,024
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,724
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,998
- 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,601
- 2023AgentBench: Evaluating LLMs as Agentscited by 1,267
- 2023A Survey on Evaluation of Large Language Modelscited by 1,242
- 2023Instruction-Following Evaluation for Large Language Modelscited by 1,228
- 2022Language Models as Zero-Shot Planners: Extracting Actionable Knowledge for Embodied Agentscited by 1,035
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2023DSPy: Compiling Declarative Language Model Calls into Self-Improving Pipelinescited by 832
- 2023OpenAssistant Conversations -- Democratizing Large Language Model Alignmentcited by 721
- 2023Prometheus: Inducing Fine-grained Evaluation Capability in Language Modelscited by 575
- 2023LMSYS-Chat-1M: A Large-Scale Real-World LLM Conversation Datasetcited by 461
- 2024Prometheus 2: An Open Source Language Model Specialized in Evaluating Other Language Modelscited by 446
- 2024A Systematic Survey of Prompt Engineering in Large Language Models: Techniques and Applicationscited by 431
- 2023JudgeLM: Fine-tuned Large Language Models are Scalable Judgescited by 367
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 365
- 2024Replacing Judges with Juries: Evaluating LLM Generations with a Panel of Diverse Modelscited by 326
- 2023PandaLM: An Automatic Evaluation Benchmark for LLM Instruction Tuning Optimizationcited by 316
- 2023Benchmarking Large Language Models in Retrieval-Augmented Generationcited by 312
- 2023Evaluating Large Language Models at Evaluating Instruction Followingcited by 302
- 2023ToolQA: A Dataset for LLM Question Answering with External Toolscited by 274
- 2023Automatically Correcting Large Language Models: Surveying the landscape of diverse self-correction strategiescited by 238
- 2023Generative Judge for Evaluating Alignmentcited by 169
- 2024Who Validates the Validators? Aligning LLM-Assisted Evaluation of LLM Outputs with Human Preferencescited by 144
- 2024InFoBench: Evaluating Instruction Following Ability in Large Language Modelscited by 135
- 2023Calibrated Language Models Must Hallucinatecited by 115
- 2023EvalLM: Interactive Evaluation of Large Language Model Prompts on User-Defined Criteriacited by 74
- 2023Towards Better Evaluation of Instruction-Following: A Case-Study in Summarizationcited by 18
Built on by
Citing papers per year: 2025: 3; 2026: 3.
6 papers.
- 2025Difficulties with Evaluating a Deception Detector for AIscited by 13
- 2026Compliance-Scored Best-of-N Guardrail Orchestration for Multimodal Document Generation in Payments Dispute Defensecited by 1
- 2025EPT Benchmark: Evaluation of Persian Trustworthiness in Large Language Modelscited by 0
- 2025Financial Instruction Following Evaluation (FIFE)cited by 0
- 2026Are Two LLMs Better Than One? A Student-Teacher Dual-Head LLMs Architecture for Pharmaceutical Content Optimizationcited by 0
- 2026Prompts in the Wild: A Large Analyzed Collection of Transactional Prompts in Codecited by 0
- 2026Prompts in the Wild: A Large Analyzed Collection of Transactional Prompts in Code13 Aug 2026
- 2026Compliance-Scored Best-of-N Guardrail Orchestration for Multimodal Document Generation in Payments Dispute Defense1 Jun 2026
- 2026Are Two LLMs Better Than One? A Student-Teacher Dual-Head LLMs Architecture for Pharmaceutical Content Optimization12 Feb 2026
- 2025Financial Instruction Following Evaluation (FIFE)1 Dec 2025
- 2025Difficulties with Evaluating a Deception Detector for AIs27 Nov 2025
- 2025EPT Benchmark: Evaluation of Persian Trustworthiness in Large Language Models8 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2024SPADE: Synthesizing Data Quality Assertions for Large Language Model Pipelines
- 2025Enterprise Large Language Model Evaluation Benchmark
- 2024UltraEval: A Lightweight Platform for Flexible and Comprehensive Evaluation for LLMs
- 2026A Survey on Evaluating Quality and Trustworthiness in LLM-Generated Data
- 2026A Guide to Large Language Models in Modeling and Simulation: From Core Techniques to Critical Challenges
- 2023S3Eval: A Synthetic, Scalable, Systematic Evaluation Suite for Large Language Models
- 2025Challenges in Testing Large Language Model Based Software: A Faceted Taxonomy
- 2026EvalBuilder: Can LLMs Build Efficient Benchmarks?