Audit Me If You Can: Query-Efficient Active Fairness Auditing of Black-Box LLMs
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) exhibit systematic biases across demographic groups. Auditing is proposed as an accountability tool for black-box LLM applications, but suffers from resource-intensive query access. We conceptualise auditing as uncertainty estimation over a target fairness metric and introduce BAFA, the Bounded Active Fairness Auditor for query-efficient auditing of black-box LLMs. BAFA maintains a version space of surrogate models consistent with queried scores and computes uncertainty intervals for fairness metrics (e.g., Delta AUC) via constrained empirical risk minimisation. Active query selection narrows these intervals to reduce estimation error. We evaluate BAFA on two standard fairness dataset case studies: textscCivilComments and textscBias-in-Bios, comparing against stratified sampling, power sampling, and ablations. BAFA achieves target error thresholds with up to 40× fewer queries than stratified sampling (e.g., 144 vs 5,956 queries at varepsilon=0.02 for textscCivilComments) for tight thresholds, demonstrates substantially better performance over time, and shows lower variance across runs. These results suggest that active sampling can reduce resources needed for independent fairness auditing with LLMs, supporting continuous model evaluations.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Builds on 34 of its 54 references that are in the map. First posted on arXiv 6 Jan 2026.
Builds on
34 of 54 references.
References · 34
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 979
- 2020Language (Technology) is Power: A Critical Survey of "Bias" in NLPcited by 951
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 911
- 2023Large Language Modelscited by 774
- 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 703
- 2019Nuanced Metrics for Measuring Unintended Bias with Real Data for Text Classificationcited by 396
- 2020Closing the AI Accountability Gap: Defining an End-to-End Framework for Internal Algorithmic Auditingcited by 380
- 2019Social Bias Frames: Reasoning about Social and Power Implications of Languagecited by 377
- 2019Bias in Bios: A Case Study of Semantic Representation Bias in a High-Stakes Settingcited by 346
22 more
- 2021AI and the Everything in the Whole Wide World Benchmarkcited by 340
- 2020HateCheck: Functional Tests for Hate Speech Detection Modelscited by 215
- 2020HateBERT: Retraining BERT for Abusive Language Detection in Englishcited by 206
- 2020Intrinsic Bias Metrics Do Not Correlate with Application Biascited by 148
- 2023Auditing large language models: a three-layered approachcited by 135
- 2022Multilingual HateCheck: Functional Tests for Multilingual Hate Speech Detection Modelscited by 51
- 2024AI auditing: The Broken Bus on the Road to AI Accountabilitycited by 42
- 2024Identifying and Improving Disability Bias in GPT-Based Resume Screeningcited by 27
- 2024From Transparency to Accountability and Back: A Discussion of Access and Evidence in AI Auditingcited by 15
- 2025Evaluating Bias in LLMs for Job-Resume Matching: Gender, Race, and Educationcited by 13
- 2024HateDay: Insights from a Global Hate Speech Dataset Representative of a Day on Twittercited by 12
- 2025Lost in Moderation: How Commercial Content Moderation APIs Over- and Under-Moderate Group-Targeted Hate Speech and Linguistic Variationscited by 12
- 2025Cooper: A Library for Constrained Optimization in Deep Learningcited by 10
- 2024Addressing the regulatory gap: moving towards an EU AI audit ecosystem beyond the AI Act by including civil societycited by 7
- 2025Statistical Hypothesis Testing for Auditing Robustness in Language Modelscited by 7
- 2024Active Fourier Auditor for Estimating Distributional Properties of ML Modelscited by 6
- 2022Black-Box Audits for Group Distribution Shiftscited by 5
- 2017Interpretable Active Learningcited by 4
- 2019Limitations of Pinned AUC for Measuring Unintended Biascited by 4
- 2023A Brief Tutorial on Sample Size Calculations for Fairness Auditscited by 4
- 2025What Should LLMs Forget? Quantifying Personal Data in LLMs for Right-to-Be-Forgotten Requestscited by 4
- 2025Access Denied: Meaningful Data Access for Quantitative Algorithm Auditscited by 1
Built on by
Citing papers per year: 2026: 6.
6 papers.
- 2026Adaptive auditing of AI systems with anytime-valid guaranteescited by 2
- 2026AgentFairBench: Do LLM Agents Discriminate When They Act?cited by 2
- 2026Bye Bye Perspective API: Lessons for Building and Governing Measurement Infrastructurecited by 1
- 2026The Evaluation Game: Beyond Static LLM Benchmarkingcited by 0
- 2026Sequential Fairness Auditing with Limited Output Accesscited by 0
- 2026Proxy reliance in large language model decisions is uncalibrated to predictive evidencecited by 0
- 2026Proxy reliance in large language model decisions is uncalibrated to predictive evidence24 Aug 2026
- 2026Sequential Fairness Auditing with Limited Output Access29 Jun 2026
- 2026AgentFairBench: Do LLM Agents Discriminate When They Act?15 Jun 2026
- 2026The Evaluation Game: Beyond Static LLM Benchmarking19 May 2026
- 2026Adaptive auditing of AI systems with anytime-valid guarantees7 May 2026
- 2026Bye Bye Perspective API: Lessons for Building and Governing Measurement Infrastructure28 Apr 2026