mlsanityData to 7 Oct 2026

Probe-Rewrite-Evaluate: A Workflow for Reliable Benchmarks and Quantifying Evaluation Awareness

arXiv 2509.00591 ↗First posted 30 Aug 2025cs.CLcited by 7

Not on the map. Why?

Abstract (arXiv)

Large Language Models (LLMs) often exhibit significant behavioral shifts when they perceive a change from a real-world deployment context to a controlled evaluation setting, a phenomenon known as "evaluation awareness." This discrepancy poses a critical challenge for AI alignment, as benchmark performance may not accurately reflect a model's true safety and honesty. In this work, we systematically quantify these behavioral changes by manipulating the perceived context of prompts. We introduce a methodology that uses a linear probe to score prompts on a continuous scale from "test-like" to "deploy-like" and leverage an LLM rewriting strategy to shift these prompts towards a more natural, deployment-style context while preserving the original task. Using this method, we achieved a 30% increase in the average probe score across a strategic role-playing dataset after rewriting. Evaluating a suite of state-of-the-art models on these original and rewritten prompts, we find that rewritten "deploy-like" prompts induce a significant and consistent shift in behavior. Across all models, we observed an average increase in honest responses of 5.26% and a corresponding average decrease in deceptive responses of 12.40%. Furthermore, refusal rates increased by an average of 6.38%, indicating heightened safety compliance. Our findings demonstrate that evaluation awareness is a quantifiable and manipulable factor that directly influences LLM behavior, revealing that models are more prone to unsafe or deceptive outputs in perceived test environments. This underscores the urgent need for more realistic evaluation frameworks to accurately gauge true model alignment before deployment.

Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 12 of its 32 references that are in the map. First posted on arXiv 30 Aug 2025.

Builds on

12 of 32 references.

References · 12

  1. 2024Replacing Judges with Juries: Evaluating LLM Generations with a Panel of Diverse Modelscited by 301
  2. 2023Don't Make Your LLM an Evaluation Benchmark Cheatercited by 194
  3. 2023Taken out of context: On measuring situational awareness in LLMscited by 131
  4. 2025Large Language Models Often Know When They Are Being Evaluatedcited by 105
  5. 2025Tell me about yourself: LLMs are aware of their learned behaviorscited by 86
  6. 2025Detecting Strategic Deception Using Linear Probescited by 65
  7. 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 56
  8. 2024PRewrite: Prompt Rewriting with Reinforcement Learningcited by 43
  9. 2024S-Eval: Towards Automated and Comprehensive Safety Evaluation for Large Language Modelscited by 28
  10. 2024Noise Injection Reveals Hidden Capabilities of Sandbagging Language Modelscited by 22
  11. 2024I Think, Therefore I am: Benchmarking Awareness of Large Language Models Using AwareBenchcited by 20
  12. 2025Rewrite to Jailbreak: Discover Learnable and Transferable Implicit Harmfulness Instructioncited by 6

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 1; 2026: 6.

7 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026LURE: Live-Usage Replay Evaluations for Reducing Evaluation Awareness
  2. 2026Measuring Evaluation-Context Divergence in Open-Weight LLMs: A Paired-Prompt Protocol with Pilot Evidence of Alignment-Pipeline-Specific Heterogeneity
  3. 2026What Does a Skill Actually Do? Estimands and Evaluation Validity for Tool and Skill Use in LLM Agents: A Critical Review
  4. 2026What Makes a Good Terminal-Agent Benchmark Task: A Guideline for Adversarial, Difficult, and Legible Evaluation Design
  5. 2026SkillJuror: Measuring How Agent Skill Organization Changes Runtime Behavior
  6. 2026The Double Measurement Confound in Agent Benchmarks: De-Scaffolding, Ground-Truth Scoring, and Reliability Beyond the Mean
  7. 2026What Should a Skill Remember? Quality--Cost Trade-offs in Cost-Aware Skill Rewriting for Language Model Agents
  8. 2025Artificial or Just Artful? Do LLMs Bend the Rules in Programming? ↗