mlsanityData to 14 Oct 2026

Small Edits, Big Consequences: Telling Good from Bad Robustness in Large Language Models

arXiv 2507.15868 ↗First posted 15 Jul 2025cs.CL cs.AIcited by 1

Not on the map. Why?

Abstract (arXiv)

Large language models (LLMs) now write code in settings where misreading a single word can break safety or cost money, yet we still expect them to overlook stray typos. To probe where useful robustness ends and harmful insensitivity begins, we compile 50 LeetCode problems and craft three minimal prompt perturbations that should vary in importance: (i) progressive underspecification deleting 10 % of words per step; (ii) lexical flip swapping a pivotal quantifier ("max" to "min"); and (iii) jargon inflation replacing a common noun with an obscure technical synonym. Six frontier models, including three "reasoning-tuned" versions, solve each mutated prompt, and their Python outputs are checked against the original test suites to reveal whether they reused the baseline solution or adapted. Among 11 853 generations we observe a sharp double asymmetry. Models remain correct in 85 % of cases even after 90 % of the prompt is missing, showing over-robustness to underspecification, yet only 54 % react to a single quantifier flip that reverses the task, with reasoning-tuned variants even less sensitive than their bases. Jargon edits lie in between, passing through 56 %. Current LLMs thus blur the line between harmless noise and meaning - changing edits, often treating both as ignorable. Masking salient anchors such as function names can force re - evaluation. We advocate evaluation and training protocols that reward differential sensitivity: stay steady under benign noise but adapt - or refuse - when semantics truly change.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 6 of its 16 references that are in the map. First posted on arXiv 15 Jul 2025.

Builds on

6 of 16 references.

References · 6

  1. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
  2. 2020On Faithfulness and Factuality in Abstractive Summarizationcited by 900
  3. 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 722
  4. 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 571
  5. 2019Don't Take the Easy Way Out: Ensemble Based Methods for Avoiding Known Dataset Biasescited by 280
  6. 2025LeetCodeDataset: A Temporal Dataset for Robust Evaluation and Efficient Training of Code LLMscited by 70

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.