Noisy but Valid: Robust Statistical Evaluation of LLMs with Imperfect Judges
Not on the map. Why?
Abstract (arXiv)
Reliable certification of Large Language Models (LLMs)-verifying that failure rates are below a safety threshold-is critical yet challenging. While "LLM-as-a-Judge" offers scalability, judge imperfections, noise, and bias can invalidate statistical guarantees. We introduce a "Noisy but Valid" hypothesis testing framework to address this. By leveraging a small human-labelled calibration set to estimate the judge's True Positive and False Positive Rates (TPR/FPR), we derive a variance-corrected critical threshold applied to a large judge-labelled dataset. Crucially, our framework theoretically guarantees finite-sample Type-I error control (validity) despite calibration uncertainty. This distinguishes our work from Prediction-Powered Inference (PPI), positioning our method as a diagnostic tool that explicitly models judge behavior rather than a black-box estimator. Our contributions include: (1) Theoretical Guarantees: We derive the exact conditions under which noisy testing yields higher statistical power than direct evaluation; (2) Empirical Validation: Experiments on Jigsaw Comment, Hate Speech and SafeRLHF confirm our theory; (3) The Oracle Gap: We reveal a significant performance gap between practical methods and the theoretical "Oracle" (perfectly known judge parameters), quantifying the cost of estimation. Specifically, we provide the first systematic treatment of the imperfect-judge setting, yielding interpretable diagnostics of judge reliability and clarifying how evaluation power depends on judge quality, dataset size, and certification levels. Together, these results sharpen understanding of statistical evaluation with LLM judges, and highlight trade-offs among competing inferential tools.
Key facts. Cited by 23 papers in the map (data through 7 Oct 2026). Builds on 45 of its 54 references that are in the map. First posted on arXiv 28 Jan 2026.
Builds on
45 of 54 references.
References · 45
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2022Training Compute-Optimal Large Language Modelscited by 2,927
- 2019SuperGLUE: A Stickier Benchmark for General-Purpose Language Understanding Systemscited by 1,718
- 2024A Survey on LLM-as-a-Judgecited by 1,384
- 2023ChatGPT Outperforms Crowd-Workers for Text-Annotation Taskscited by 849
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 828
- 2021A Gentle Introduction to Conformal Prediction and Distribution-Free Uncertainty Quantificationcited by 777
33 more
- 2023Can Large Language Models Be an Alternative to Human Evaluations?cited by 729
- 2017Automated Hate Speech Detection and the Problem of Offensive Languagecited by 724
- 2024MLLM-as-a-Judge: Assessing Multimodal LLM-as-a-Judge with Vision-Language Benchmarkcited by 362
- 2024Justice or Prejudice? Quantifying Biases in LLM-as-a-Judgecited by 354
- 2024Humans or LLMs as the Judge? A Study on Judgement Biasescited by 314
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preferencecited by 252
- 2024Agent-as-a-Judge: Evaluate Agents with Agentscited by 223
- 2023Prediction-Powered Inferencecited by 214
- 2024Judging the Judges: Evaluating Alignment and Vulnerabilities in LLMs-as-Judgescited by 197
- 2023Conformal Language Modelingcited by 163
- 2024Who Validates the Validators? Aligning LLM-Assisted Evaluation of LLM Outputs with Human Preferencescited by 142
- 2024Optimization-based Prompt Injection Attack to LLM-as-a-Judgecited by 123
- 2023PPI++: Efficient Prediction-Powered Inferencecited by 103
- 2024Can LLM be a Personalized Judge?cited by 99
- 2024An Empirical Study of LLM-as-a-Judge for LLM Evaluation: Fine-tuned Judge Model is not a General Substitute for GPT-4cited by 90
- 2024Efficient multi-prompt evaluation of LLMscited by 72
- 2024Foundational Autoraters: Taming Large Language Models for Better Automatic Evaluationcited by 72
- 2024Systematic Evaluation of LLM-as-a-Judge in LLM Alignment Tasks: Explainable Metrics and Diverse Prompt Templatescited by 71
- 2024Self-Taught Evaluatorscited by 70
- 2024A Framework for Human Evaluation of Large Language Models in Healthcare Derived from Literature Reviewcited by 65
- 2023Cross-Prediction-Powered Inferencecited by 57
- 2024CodeUltraFeedback: An LLM-as-a-Judge Dataset for Aligning Large Language Models to Coding Preferencescited by 56
- 2024Lynx: An Open Source Hallucination Evaluation Modelcited by 55
- 2024AutoEval Done Right: Using Synthetic Data for Model Evaluationcited by 53
- 2025Do Large Language Model Benchmarks Test Reliability?cited by 50
- 2025Evaluating Judges as Evaluators: The JETTS Benchmark of LLM-as-Judges as Test-Time Scaling Evaluatorscited by 42
- 2024Decoding Biases: Automated Methods and LLM Judges for Gender Bias Detection in Language Modelscited by 33
- 2024Prediction-Powered Ranking of Large Language Modelscited by 29
- 2024The Vulnerability of Language Model Benchmarks: Do They Accurately Reflect True LLM Performance?cited by 22
- 2025Prediction-Powered E-Valuescited by 16
- 2024PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attackscited by 11
- 2024Bayesian Prediction-Powered Inferencecited by 8
- 2024Regression for the Mean: Auto-Evaluation and Inference with Few Labels through Post-hoc Regressioncited by 6
Built on by
Citing papers per year: 2026: 23.
23 papers.
Sort:
By area:
- 2026Who Drifted: the System or the Judge? Anytime-Valid Attribution in LLM Evaluation Pipelinescited by 8
- 2026GENSR: Symbolic Regression Based in Equation Generative Spacecited by 6
- 2026Rethinking LoRA for Privacy-Preserving Federated Learning in Large Modelscited by 4
- 2026Catching One in Five: LLM-as-Judge Blind Spots in Production Multi-Turn Transaction Agentscited by 4
- 2026Attribution-Guided Model Rectification of Unreliable Neural Network Behaviorscited by 3
- 2026FAST: A Synergistic Framework of Attention and State-space Models for Spatiotemporal Traffic Predictioncited by 3
- 2026MedTri: A Platform for Structured Medical Report Normalization to Enhance Vision-Language Pretrainingcited by 2
- 2026Don't let the information slip awaycited by 2
- 2026A Finite-Calibration Regime Map for LLM Judge Panelscited by 2
- 2026Verify, Repair, Repeat, or Stop? Robust Stopping for Noisy Verify-Repair Loops in LLM Agentscited by 2
- 2026A Judge Should Know What Changed:Construct Validity for LLM-as-a-Judge Evaluationcited by 2
- 2026DP-FedAdamW: An Efficient Optimizer for Differentially Private Federated Large Modelscited by 1
11 more
- 2026BlackMirror: Black-Box Backdoor Detection for Text-to-Image Models via Instruction-Response Deviationcited by 1
- 2026Deconstructing the Failure of Ideal Noise Correction: A Three-Pillar Diagnosiscited by 1
- 2026Which Metrics Save the Most Human Annotation? Prediction-Powered Evaluation and Meta-Evaluationcited by 1
- 2026Diffusion-Based Makeup Transfer with Facial Region-Aware Makeup Featurescited by 0
- 2026Safe Bilevel Delegation (SBD): A Formal Framework for Runtime Delegation Safety in Multi-Agent Systemscited by 0
- 2026LLM Judges Inconsistently Disagree Across Safety Criteria and Harm Categoriescited by 0
- 2026Metric Match: A Subset Selection Approach to Evaluating LLM Judge Reliabilitycited by 0
- 2026AI Guardrail Survival under Single-Cycle Agentic Self-Summarizationcited by 0
- 2026Rating the Raters: Rasch Measurement Theory for LLM Evaluationcited by 0
- 2026Bad Genius: Counterfactual-Guided Harness Evolution Beyond Task-Specific Shortcutscited by 0
- 2026When Can Old Evaluations Certify a New Model? Label-Efficient Release Decisions under Evaluator Driftcited by 0
- 2026When Can Old Evaluations Certify a New Model? Label-Efficient Release Decisions under Evaluator Drift26 Sep 2026
- 2026Bad Genius: Counterfactual-Guided Harness Evolution Beyond Task-Specific Shortcuts16 Sep 2026
- 2026Which Metrics Save the Most Human Annotation? Prediction-Powered Evaluation and Meta-Evaluation27 Aug 2026
- 2026A Judge Should Know What Changed:Construct Validity for LLM-as-a-Judge Evaluation25 Aug 2026
- 2026AI Guardrail Survival under Single-Cycle Agentic Self-Summarization11 Aug 2026
- 2026Verify, Repair, Repeat, or Stop? Robust Stopping for Noisy Verify-Repair Loops in LLM Agents20 Jul 2026
- 2026Rating the Raters: Rasch Measurement Theory for LLM Evaluation14 Jul 2026
- 2026Who Drifted: the System or the Judge? Anytime-Valid Attribution in LLM Evaluation Pipelines13 Jun 2026
- 2026Metric Match: A Subset Selection Approach to Evaluating LLM Judge Reliability12 Jun 2026
- 2026Catching One in Five: LLM-as-Judge Blind Spots in Production Multi-Turn Transaction Agents9 Jun 2026
- 2026A Finite-Calibration Regime Map for LLM Judge Panels31 May 2026
- 2026LLM Judges Inconsistently Disagree Across Safety Criteria and Harm Categories29 May 2026
11 more
- 2026Safe Bilevel Delegation (SBD): A Formal Framework for Runtime Delegation Safety in Multi-Agent Systems30 Apr 2026
- 2026FAST: A Synergistic Framework of Attention and State-space Models for Spatiotemporal Traffic Prediction15 Apr 2026
- 2026Diffusion-Based Makeup Transfer with Facial Region-Aware Makeup Features20 Mar 2026
- 2026Deconstructing the Failure of Ideal Noise Correction: A Three-Pillar Diagnosis13 Mar 2026
- 2026Attribution-Guided Model Rectification of Unreliable Neural Network Behaviors8 Mar 2026
- 2026BlackMirror: Black-Box Backdoor Detection for Text-to-Image Models via Instruction-Response Deviation6 Mar 2026
- 2026Don't let the information slip away26 Feb 2026
- 2026MedTri: A Platform for Structured Medical Report Normalization to Enhance Vision-Language Pretraining25 Feb 2026
- 2026GENSR: Symbolic Regression Based in Equation Generative Space24 Feb 2026
- 2026DP-FedAdamW: An Efficient Optimizer for Differentially Private Federated Large Models23 Feb 2026
- 2026Rethinking LoRA for Privacy-Preserving Federated Learning in Large Models23 Feb 2026
- 2026Catching One in Five: LLM-as-Judge Blind Spots in Production Multi-Turn Transaction Agentscited by 4
- 2026Safe Bilevel Delegation (SBD): A Formal Framework for Runtime Delegation Safety in Multi-Agent Systemscited by 0
- 2026AI Guardrail Survival under Single-Cycle Agentic Self-Summarizationcited by 0
- 2026AI Guardrail Survival under Single-Cycle Agentic Self-Summarization11 Aug 2026
- 2026Catching One in Five: LLM-as-Judge Blind Spots in Production Multi-Turn Transaction Agents9 Jun 2026
- 2026Safe Bilevel Delegation (SBD): A Formal Framework for Runtime Delegation Safety in Multi-Agent Systems30 Apr 2026
- 2026Who Drifted: the System or the Judge? Anytime-Valid Attribution in LLM Evaluation Pipelinescited by 8
- 2026GENSR: Symbolic Regression Based in Equation Generative Spacecited by 6
- 2026Attribution-Guided Model Rectification of Unreliable Neural Network Behaviorscited by 3
- 2026Don't let the information slip awaycited by 2
- 2026A Finite-Calibration Regime Map for LLM Judge Panelscited by 2
- 2026A Judge Should Know What Changed:Construct Validity for LLM-as-a-Judge Evaluationcited by 2
- 2026DP-FedAdamW: An Efficient Optimizer for Differentially Private Federated Large Modelscited by 1
- 2026Deconstructing the Failure of Ideal Noise Correction: A Three-Pillar Diagnosiscited by 1
- 2026Which Metrics Save the Most Human Annotation? Prediction-Powered Evaluation and Meta-Evaluationcited by 1
- 2026Diffusion-Based Makeup Transfer with Facial Region-Aware Makeup Featurescited by 0
- 2026LLM Judges Inconsistently Disagree Across Safety Criteria and Harm Categoriescited by 0
- 2026Metric Match: A Subset Selection Approach to Evaluating LLM Judge Reliabilitycited by 0
12 most cited of 15 All 15 (JSON)
- 2026When Can Old Evaluations Certify a New Model? Label-Efficient Release Decisions under Evaluator Drift26 Sep 2026
- 2026Bad Genius: Counterfactual-Guided Harness Evolution Beyond Task-Specific Shortcuts16 Sep 2026
- 2026Which Metrics Save the Most Human Annotation? Prediction-Powered Evaluation and Meta-Evaluation27 Aug 2026
- 2026A Judge Should Know What Changed:Construct Validity for LLM-as-a-Judge Evaluation25 Aug 2026
- 2026Rating the Raters: Rasch Measurement Theory for LLM Evaluation14 Jul 2026
- 2026Who Drifted: the System or the Judge? Anytime-Valid Attribution in LLM Evaluation Pipelines13 Jun 2026
- 2026Metric Match: A Subset Selection Approach to Evaluating LLM Judge Reliability12 Jun 2026
- 2026A Finite-Calibration Regime Map for LLM Judge Panels31 May 2026
- 2026LLM Judges Inconsistently Disagree Across Safety Criteria and Harm Categories29 May 2026
- 2026Diffusion-Based Makeup Transfer with Facial Region-Aware Makeup Features20 Mar 2026
- 2026Deconstructing the Failure of Ideal Noise Correction: A Three-Pillar Diagnosis13 Mar 2026
- 2026Attribution-Guided Model Rectification of Unreliable Neural Network Behaviors8 Mar 2026
12 newest of 15 All 15 (JSON)