Brittlebench: Quantifying LLM robustness via prompt sensitivity
Not on the map. Why?
Abstract (arXiv)
Existing evaluation methods largely rely on clean, static benchmarks, which can overestimate true model performance by failing to capture the noise and variability inherent in real-world user inputs. This is especially true for language models, which can face human-generated text queries containing mistakes, typos, or alternative ways of phrasing the same question. In this work, we introduce a theoretical framework for quantifying model sensitivity to prompt variants, or brittleness, that can enable us to disentangle data-induced difficulty from prompt-related variability. Using this framework, we design a novel evaluation pipeline, Brittlebench, to holistically evaluate the sensitivity of frontier models. We apply semantics-preserving perturbations to a suite of popular benchmarks, and observe model performance to degrade as much as 12%. However, these perturbations do not affect all models equally: even a single perturbation alters the relative ranking of models in 63% of cases, impacting conclusions about comparative model performance. Decomposing the total variance of both state-of-the-art open-weight and commercial models, we find that semantics-preserving input perturbations can account for up to half of the performance variance for a given model. Brittlebench highlights the need for more robust evaluations and models, and allows us to systematically understand model brittleness.
Key facts. Cited by 19 papers in the map (data through 7 Oct 2026). Builds on 57 of its 65 references that are in the map. First posted on arXiv 27 Feb 2026.
Builds on
57 of 65 references.
References · 57
- 2023GPT-4 Technical Reportcited by 18,132
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2025Qwen3 Technical Reportcited by 8,195
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
- 2020Shortcut Learning in Deep Neural Networkscited by 1,928
- 2025Qwen3 Embedding: Advancing Text Embedding and Reranking Through Foundation Modelscited by 1,175
- 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,151
38 more
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 979
- 2019Right for the Wrong Reasons: Diagnosing Syntactic Heuristics in Natural Language Inferencecited by 864
- 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 778
- 2018Annotation Artifacts in Natural Language Inference Datacited by 656
- 2019MathQA: Towards Interpretable Math Word Problem Solving with Operation-Based Formalismscited by 653
- 2024LLM Evaluators Recognize and Favor Their Own Generationscited by 651
- 2021Dynabench: Rethinking Benchmarking in NLPcited by 447
- 2021AI and the Everything in the Whole Wide World Benchmarkcited by 340
- 2017Synthetic and Natural Noise Both Break Neural Machine Translationcited by 304
- 2023State of What Art? A Call for Multi-Prompt LLM Evaluationcited by 299
- 2023Large Language Models Sensitivity to The Order of Options in Multiple-Choice Questionscited by 249
- 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 218
- 2021What Will it Take to Fix Benchmarking in Natural Language Understanding?cited by 200
- 2023Does Writing with Language Models Reduce Content Diversity?cited by 190
- 2024ProSA: Assessing and Understanding the Prompt Sensitivity of LLMscited by 145
- 2023Large Language Models Understand and Can be Enhanced by Emotional Stimulicited by 143
- 2023Rephrase and Respond: Let Large Language Models Ask Better Questions for Themselvescited by 123
- 2024Pride and Prejudice: LLM Amplifies Self-Bias in Self-Refinementcited by 111
- 2024Mind Your Step (by Step): Chain-of-Thought can Reduce Performance on Tasks where Thinking Makes Humans Worsecited by 107
- 2025Measuring what Matters: Construct Validity in Large Language Model Benchmarkscited by 102
- 2021Algorithmic Monoculture and Social Welfarecited by 98
- 2021Competency Problems: On Finding and Removing Artifacts in Language Datacited by 91
- 2021Evaluating the Robustness of Neural Language Models to Input Perturbationscited by 87
- 2024Mind Your Format: Towards Consistent Evaluation of In-Context Learning Improvementscited by 82
- 2024LLM-Rubric: A Multidimensional, Calibrated Approach to Automated Evaluation of Natural Language Textscited by 81
- 2019Perturbation Sensitivity Analysis to Detect Unintended Model Biasescited by 74
- 2021Tailor: Generating and Perturbing Text with Semantic Controlscited by 67
- 2023Evaluating the Zero-shot Robustness of Instruction-tuned Language Modelscited by 63
- 2024POSIX: A Prompt Sensitivity Index For Large Language Modelscited by 56
- 2023Evaluating the Instruction-Following Robustness of Large Language Models to Prompt Injectioncited by 53
- 2022Perturbation Augmentation for Fairer NLPcited by 51
- 2024Changing Answer Order Can Decrease MMLU Accuracycited by 41
- 2024On the Worst Prompt Performance of Large Language Modelscited by 36
- 2025Play Favorites: A Statistical Method to Measure Self-Bias in LLM-as-a-Judgecited by 35
- 2022Robustness of Learning from Task Instructionscited by 34
- 2024VarBench: Robust Language Model Benchmarking Through Dynamic Variable Perturbationcited by 29
- 2024Prompt Perturbation Consistency Learning for Robust Language Modelscited by 26
- 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputscited by 25
50 most cited of 57 All 57 (JSON)
Built on by
Citing papers per year: 2026: 19.
19 papers.
Sort:
By area:
- 2026JudgeSense: A Benchmark for Prompt Sensitivity in LLM-as-a-Judge Systemscited by 10
- 2026Hidden Measurement Error in LLM Pipelines Distorts Annotation, Evaluation, and Benchmarkingcited by 7
- 2026Covert Influence Between Language Modelscited by 4
- 2026One prompt is not enough: Instruction Sensitivity Undermines Embedding Model Evaluationcited by 3
- 2026SCRuB: Social Concept Reasoning under Rubric-Based Evaluationcited by 1
- 2026PRISM: A Benchmark for Programmatic Spatial-Temporal Reasoningcited by 1
- 2026Efficient Benchmarking Is Just Feature Selection and Multiple Regressioncited by 1
- 2026Online Shift Detection and Conformal Adaptation for Deployed Safety Classifierscited by 1
- 2026In-Situ Behavioral Evaluation for LLM Fairness, Not Standardized-Test Scorescited by 0
- 2026Does Slightly Mean Somewhat? Measuring Vague Intensity Words in LLM Numeric Actionscited by 0
- 2026Greener Than Humans? Environmental Attitudes in Large Language Modelscited by 0
- 2026Are We Evaluating Knowledge or Phrasing? Mitigating MCQA Sensitivity with ParaEvalcited by 0
7 more
- 2026A Definition of Good Explanations and the Challenges Explaining LLM Outputscited by 0
- 2026Same Evidence, Different Answer: Auditing Order Sensitivity in Multimodal Large Language Modelscited by 0
- 2026Surrogate Fidelity: When Can Open LLMs Explain Closed Ones?cited by 0
- 2026Jagged Judges: Epistemic Stability Under Perturbation, Pressure, and Persistencecited by 0
- 2026Thought without systematicity? Evaluating reasoning models on rule induction taskscited by 0
- 2026CHART: A Harness-Rotation Curriculum for Harness-Robust Search Agentscited by 0
- 2026Latent Inference-Time Guidance of Time Series Foundation Modelscited by 0
- 2026Latent Inference-Time Guidance of Time Series Foundation Models29 Sep 2026
- 2026Thought without systematicity? Evaluating reasoning models on rule induction tasks12 Sep 2026
- 2026CHART: A Harness-Rotation Curriculum for Harness-Robust Search Agents5 Sep 2026
- 2026Jagged Judges: Epistemic Stability Under Perturbation, Pressure, and Persistence12 Aug 2026
- 2026Surrogate Fidelity: When Can Open LLMs Explain Closed Ones?30 Jun 2026
- 2026Same Evidence, Different Answer: Auditing Order Sensitivity in Multimodal Large Language Models24 Jun 2026
- 2026A Definition of Good Explanations and the Challenges Explaining LLM Outputs12 Jun 2026
- 2026Online Shift Detection and Conformal Adaptation for Deployed Safety Classifiers10 Jun 2026
- 2026Are We Evaluating Knowledge or Phrasing? Mitigating MCQA Sensitivity with ParaEval9 Jun 2026
- 2026Covert Influence Between Language Models2 Jun 2026
- 2026Greener Than Humans? Environmental Attitudes in Large Language Models1 Jun 2026
- 2026Efficient Benchmarking Is Just Feature Selection and Multiple Regression25 May 2026
7 more
- 2026One prompt is not enough: Instruction Sensitivity Undermines Embedding Model Evaluation21 May 2026
- 2026Does Slightly Mean Somewhat? Measuring Vague Intensity Words in LLM Numeric Actions20 May 2026
- 2026PRISM: A Benchmark for Programmatic Spatial-Temporal Reasoning19 May 2026
- 2026SCRuB: Social Concept Reasoning under Rubric-Based Evaluation7 May 2026
- 2026JudgeSense: A Benchmark for Prompt Sensitivity in LLM-as-a-Judge Systems26 Apr 2026
- 2026In-Situ Behavioral Evaluation for LLM Fairness, Not Standardized-Test Scores21 Apr 2026
- 2026Hidden Measurement Error in LLM Pipelines Distorts Annotation, Evaluation, and Benchmarking13 Apr 2026
- 2026SCRuB: Social Concept Reasoning under Rubric-Based Evaluationcited by 1
- 2026PRISM: A Benchmark for Programmatic Spatial-Temporal Reasoningcited by 1
- 2026Online Shift Detection and Conformal Adaptation for Deployed Safety Classifierscited by 1
- 2026Thought without systematicity? Evaluating reasoning models on rule induction taskscited by 0
- 2026Thought without systematicity? Evaluating reasoning models on rule induction tasks12 Sep 2026
- 2026Online Shift Detection and Conformal Adaptation for Deployed Safety Classifiers10 Jun 2026
- 2026PRISM: A Benchmark for Programmatic Spatial-Temporal Reasoning19 May 2026
- 2026SCRuB: Social Concept Reasoning under Rubric-Based Evaluation7 May 2026
- 2026JudgeSense: A Benchmark for Prompt Sensitivity in LLM-as-a-Judge Systemscited by 10
- 2026Hidden Measurement Error in LLM Pipelines Distorts Annotation, Evaluation, and Benchmarkingcited by 7
- 2026Covert Influence Between Language Modelscited by 4
- 2026One prompt is not enough: Instruction Sensitivity Undermines Embedding Model Evaluationcited by 3
- 2026Efficient Benchmarking Is Just Feature Selection and Multiple Regressioncited by 1
- 2026In-Situ Behavioral Evaluation for LLM Fairness, Not Standardized-Test Scorescited by 0
- 2026Does Slightly Mean Somewhat? Measuring Vague Intensity Words in LLM Numeric Actionscited by 0
- 2026Greener Than Humans? Environmental Attitudes in Large Language Modelscited by 0
- 2026Are We Evaluating Knowledge or Phrasing? Mitigating MCQA Sensitivity with ParaEvalcited by 0
- 2026A Definition of Good Explanations and the Challenges Explaining LLM Outputscited by 0
- 2026Surrogate Fidelity: When Can Open LLMs Explain Closed Ones?cited by 0
- 2026CHART: A Harness-Rotation Curriculum for Harness-Robust Search Agentscited by 0
12 most cited of 13 All 13 (JSON)
- 2026Latent Inference-Time Guidance of Time Series Foundation Models29 Sep 2026
- 2026CHART: A Harness-Rotation Curriculum for Harness-Robust Search Agents5 Sep 2026
- 2026Surrogate Fidelity: When Can Open LLMs Explain Closed Ones?30 Jun 2026
- 2026A Definition of Good Explanations and the Challenges Explaining LLM Outputs12 Jun 2026
- 2026Are We Evaluating Knowledge or Phrasing? Mitigating MCQA Sensitivity with ParaEval9 Jun 2026
- 2026Covert Influence Between Language Models2 Jun 2026
- 2026Greener Than Humans? Environmental Attitudes in Large Language Models1 Jun 2026
- 2026Efficient Benchmarking Is Just Feature Selection and Multiple Regression25 May 2026
- 2026One prompt is not enough: Instruction Sensitivity Undermines Embedding Model Evaluation21 May 2026
- 2026Does Slightly Mean Somewhat? Measuring Vague Intensity Words in LLM Numeric Actions20 May 2026
- 2026JudgeSense: A Benchmark for Prompt Sensitivity in LLM-as-a-Judge Systems26 Apr 2026
- 2026In-Situ Behavioral Evaluation for LLM Fairness, Not Standardized-Test Scores21 Apr 2026
12 newest of 13 All 13 (JSON)