mlsanityData to 7 Oct 2026

Brittlebench: Quantifying LLM robustness via prompt sensitivity

arXiv 2603.13285 ↗First posted 27 Feb 2026cs.LG cs.AIcited by 19

Not on the map. Why?

Abstract (arXiv)

Existing evaluation methods largely rely on clean, static benchmarks, which can overestimate true model performance by failing to capture the noise and variability inherent in real-world user inputs. This is especially true for language models, which can face human-generated text queries containing mistakes, typos, or alternative ways of phrasing the same question. In this work, we introduce a theoretical framework for quantifying model sensitivity to prompt variants, or brittleness, that can enable us to disentangle data-induced difficulty from prompt-related variability. Using this framework, we design a novel evaluation pipeline, Brittlebench, to holistically evaluate the sensitivity of frontier models. We apply semantics-preserving perturbations to a suite of popular benchmarks, and observe model performance to degrade as much as 12%. However, these perturbations do not affect all models equally: even a single perturbation alters the relative ranking of models in 63% of cases, impacting conclusions about comparative model performance. Decomposing the total variance of both state-of-the-art open-weight and commercial models, we find that semantics-preserving input perturbations can account for up to half of the performance variance for a given model. Brittlebench highlights the need for more robust evaluations and models, and allows us to systematically understand model brittleness.

Key facts. Cited by 19 papers in the map (data through 7 Oct 2026). Builds on 57 of its 65 references that are in the map. First posted on arXiv 27 Feb 2026.

Builds on

57 of 65 references.

References · 57

  1. 2023GPT-4 Technical Reportcited by 18,132
  2. 2024The Llama 3 Herd of Modelscited by 14,192
  3. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
  4. 2025Qwen3 Technical Reportcited by 8,195
  5. 2020Measuring Massive Multitask Language Understandingcited by 7,768
  6. 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
  7. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
  8. 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
  9. 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
  10. 2020Shortcut Learning in Deep Neural Networkscited by 1,928
  11. 2025Qwen3 Embedding: Advancing Text Embedding and Reranking Through Foundation Modelscited by 1,175
  12. 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,151
38 more
  1. 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 979
  2. 2019Right for the Wrong Reasons: Diagnosing Syntactic Heuristics in Natural Language Inferencecited by 864
  3. 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 778
  4. 2018Annotation Artifacts in Natural Language Inference Datacited by 656
  5. 2019MathQA: Towards Interpretable Math Word Problem Solving with Operation-Based Formalismscited by 653
  6. 2024LLM Evaluators Recognize and Favor Their Own Generationscited by 651
  7. 2021Dynabench: Rethinking Benchmarking in NLPcited by 447
  8. 2021AI and the Everything in the Whole Wide World Benchmarkcited by 340
  9. 2017Synthetic and Natural Noise Both Break Neural Machine Translationcited by 304
  10. 2023State of What Art? A Call for Multi-Prompt LLM Evaluationcited by 299
  11. 2023Large Language Models Sensitivity to The Order of Options in Multiple-Choice Questionscited by 249
  12. 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 218
  13. 2021What Will it Take to Fix Benchmarking in Natural Language Understanding?cited by 200
  14. 2023Does Writing with Language Models Reduce Content Diversity?cited by 190
  15. 2024ProSA: Assessing and Understanding the Prompt Sensitivity of LLMscited by 145
  16. 2023Large Language Models Understand and Can be Enhanced by Emotional Stimulicited by 143
  17. 2023Rephrase and Respond: Let Large Language Models Ask Better Questions for Themselvescited by 123
  18. 2024Pride and Prejudice: LLM Amplifies Self-Bias in Self-Refinementcited by 111
  19. 2024Mind Your Step (by Step): Chain-of-Thought can Reduce Performance on Tasks where Thinking Makes Humans Worsecited by 107
  20. 2025Measuring what Matters: Construct Validity in Large Language Model Benchmarkscited by 102
  21. 2021Algorithmic Monoculture and Social Welfarecited by 98
  22. 2021Competency Problems: On Finding and Removing Artifacts in Language Datacited by 91
  23. 2021Evaluating the Robustness of Neural Language Models to Input Perturbationscited by 87
  24. 2024Mind Your Format: Towards Consistent Evaluation of In-Context Learning Improvementscited by 82
  25. 2024LLM-Rubric: A Multidimensional, Calibrated Approach to Automated Evaluation of Natural Language Textscited by 81
  26. 2019Perturbation Sensitivity Analysis to Detect Unintended Model Biasescited by 74
  27. 2021Tailor: Generating and Perturbing Text with Semantic Controlscited by 67
  28. 2023Evaluating the Zero-shot Robustness of Instruction-tuned Language Modelscited by 63
  29. 2024POSIX: A Prompt Sensitivity Index For Large Language Modelscited by 56
  30. 2023Evaluating the Instruction-Following Robustness of Large Language Models to Prompt Injectioncited by 53
  31. 2022Perturbation Augmentation for Fairer NLPcited by 51
  32. 2024Changing Answer Order Can Decrease MMLU Accuracycited by 41
  33. 2024On the Worst Prompt Performance of Large Language Modelscited by 36
  34. 2025Play Favorites: A Statistical Method to Measure Self-Bias in LLM-as-a-Judgecited by 35
  35. 2022Robustness of Learning from Task Instructionscited by 34
  36. 2024VarBench: Robust Language Model Benchmarking Through Dynamic Variable Perturbationcited by 29
  37. 2024Prompt Perturbation Consistency Learning for Robust Language Modelscited by 26
  38. 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputscited by 25

50 most cited of 57 All 57 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 19.

19 papers.

Sort:

By area:

  1. 2026JudgeSense: A Benchmark for Prompt Sensitivity in LLM-as-a-Judge Systemscited by 10
  2. 2026Hidden Measurement Error in LLM Pipelines Distorts Annotation, Evaluation, and Benchmarkingcited by 7
  3. 2026Covert Influence Between Language Modelscited by 4
  4. 2026One prompt is not enough: Instruction Sensitivity Undermines Embedding Model Evaluationcited by 3
  5. 2026SCRuB: Social Concept Reasoning under Rubric-Based Evaluationcited by 1
  6. 2026PRISM: A Benchmark for Programmatic Spatial-Temporal Reasoningcited by 1
  7. 2026Efficient Benchmarking Is Just Feature Selection and Multiple Regressioncited by 1
  8. 2026Online Shift Detection and Conformal Adaptation for Deployed Safety Classifierscited by 1
  9. 2026In-Situ Behavioral Evaluation for LLM Fairness, Not Standardized-Test Scorescited by 0
  10. 2026Does Slightly Mean Somewhat? Measuring Vague Intensity Words in LLM Numeric Actionscited by 0
  11. 2026Greener Than Humans? Environmental Attitudes in Large Language Modelscited by 0
  12. 2026Are We Evaluating Knowledge or Phrasing? Mitigating MCQA Sensitivity with ParaEvalcited by 0
7 more
  1. 2026A Definition of Good Explanations and the Challenges Explaining LLM Outputscited by 0
  2. 2026Same Evidence, Different Answer: Auditing Order Sensitivity in Multimodal Large Language Modelscited by 0
  3. 2026Surrogate Fidelity: When Can Open LLMs Explain Closed Ones?cited by 0
  4. 2026Jagged Judges: Epistemic Stability Under Perturbation, Pressure, and Persistencecited by 0
  5. 2026Thought without systematicity? Evaluating reasoning models on rule induction taskscited by 0
  6. 2026CHART: A Harness-Rotation Curriculum for Harness-Robust Search Agentscited by 0
  7. 2026Latent Inference-Time Guidance of Time Series Foundation Modelscited by 0