Evaluation Awareness in Language Models Has Limited Effect on Behaviour
On the map: LLM reasoning → Reasoning benchmarks and evaluation
Abstract (arXiv)
Large reasoning models (LRMs) sometimes note in their chain of thought (CoT) that they may be under evaluation. Researchers worry that this verbalised evaluation awareness (VEA) causes models to adapt their outputs strategically, optimising for perceived evaluation criteria, which, for instance, can make models appear safer than they actually are. However, whether VEA actually has this effect is largely unknown. We tested this across open-weight LRMs and benchmarks covering safety, alignment, moral reasoning, and political opinion. We tested this both on-policy, sampling multiple CoTs per item and comparing those that spontaneously contained VEA against those that did not, and off-policy, using model prefilling to inject evaluation-aware sentences where missing and remove them where present, with subsequent resampling. VEA has limited effect on model behaviour: injecting VEA into CoTs produces near-zero effects (ω ≤ 0.06), removing it causes small shifts (ω ≤ 0.12) and spontaneously occurring VEA shifts answer distributions by at most 3.7 percentage points (ω ≤ 0.31). Our findings call for caution when interpreting high VEA rates as evidence of strategic behaviour or alignment tampering. Evaluation awareness may pose a smaller safety risk than the current literature assumes.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Reasoning benchmarks and evaluation, one of 17 directions in LLM reasoning. Builds on 25 of its 32 references that are in the map. First posted on arXiv 7 May 2026.
Builds on
25 of 32 references.
Closest ancestors · 1
Same direction, newest first
- 2025Qwen3 Technical Report14 May
Other references · 24
- 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,386
- 2023Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Promptingcited by 1,122
- 2023Measuring Faithfulness in Chain-of-Thought Reasoningcited by 703
- 2026GLM-5: from Vibe Coding to Agentic Engineeringcited by 587
- 2026Kimi K2.5: Visual Agentic Intelligencecited by 501
- 2024Alignment faking in large language modelscited by 360
- 2024Frontier Models are Capable of In-context Schemingcited by 287
- 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluationscited by 145
- 2023Taken out of context: On measuring situational awareness in LLMscited by 143
- 2025Large Language Models Often Know When They Are Being Evaluatedcited by 128
- 2025Stress Testing Deliberative Alignment for Anti-Scheming Trainingcited by 86
- 2024Me, Myself, and AI: The Situational Awareness Dataset (SAD) for LLMscited by 84
12 more
- 2025Effectively Controlling Reasoning Models through Thinking Interventioncited by 65
- 2025NVIDIA Nemotron 3: Efficient and Open Intelligencecited by 65
- 2024Sabotage Evaluations for Frontier Modelscited by 52
- 2025Probing and Steering Evaluation Awareness of Language Modelscited by 35
- 2025Steering Evaluation-Aware Language Models to Act Like They Are Deployedcited by 35
- 2026Alignment Pretraining: AI Discourse Causes Self-Fulfilling (Mis)alignmentcited by 33
- 2025The Hawthorne Effect in Reasoning Models: Evaluating and Steering Test Awarenesscited by 30
- 2025Thought Branches: Interpreting LLM Reasoning Requires Resamplingcited by 16
- 2025Evaluation Faking: Unveiling Observer Effects in Safety Evaluation of Frontier AI Systemscited by 14
- 2025Evaluation Awareness Scales Predictably in Open-Weights Large Language Modelscited by 14
- 2025Probe-Rewrite-Evaluate: A Workflow for Reliable Benchmarks and Quantifying Evaluation Awarenesscited by 9
- 2026Are Reasoning LLMs Robust to Interventions on Their Chain-of-Thought?cited by 6
Built on by
Citing papers per year: 2026: 7.
7 papers.
- 2026Agent Memory Is a Surface for Endogenous Authorization Launderingcited by 5
- 2026Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalationcited by 2
- 2026Evaluation Awareness in Language Models: Representation, Verbalization, and Controlcited by 1
- 2026Shutdown Sabotage Propensities in Multi-Agent Systemscited by 0
- 2026Training LLMs to Verbalize Evaluation Awarenesscited by 0
- 2026Deception by Omission: Language Models Knowingly Hide Their Mistakescited by 0
- 2026Can agents whose sole duty is to keep humans alive be hijacked to kill? Delayed multi-turn derived-action trap attacks in simulated high-stakes environmentscited by 0
- 2026Can agents whose sole duty is to keep humans alive be hijacked to kill? Delayed multi-turn derived-action trap attacks in simulated high-stakes environments10 Oct 2026
- 2026Deception by Omission: Language Models Knowingly Hide Their Mistakes8 Oct 2026
- 2026Training LLMs to Verbalize Evaluation Awareness28 Sep 2026
- 2026Shutdown Sabotage Propensities in Multi-Agent Systems23 Sep 2026
- 2026Agent Memory Is a Surface for Endogenous Authorization Laundering1 Sep 2026
- 2026Evaluation Awareness in Language Models: Representation, Verbalization, and Control22 Aug 2026
- 2026Coercion and Deception in AI-to-AI Management: An Agentic Benchmark of Unprompted Escalation16 Jul 2026
Similar, not cited
Close in wording, no citation either way
- 2026Evaluation Awareness Shifts from Format to Context with Model Scale
- 2026Decomposing and Measuring Evaluation Awareness
- 2026Thinking Fast, Thinking Wrong: Intuitiveness Modulates LLM Counterfactual Reasoning in Policy Evaluation
- 2026Do Reasoning Representations Help Humans Evaluate LLM Outputs?
- 2024Enhancing LLM Evaluations: The Garbling Trick
- 2025The simulation of judgment in LLMs
- 2026Language Statistics and False Belief Reasoning: Evidence from 41 Open-Weight LMs
- 2026Automatically Finding and Validating Unexpected Side-Effects of Interventions on Language Models