The Curse of Helpfulness: Inverse Scaling Law in Robustness to Distractor Instructions via DistractionIF
On the map: Retrieval-augmented generation → Agentic RAG, agents and memory
also in 1 more
Abstract (arXiv)
Large Language Models (LLMs) are increasingly deployed in agentic and retrieval-augmented generation (RAG) systems, where they must execute user-specified tasks over externally provided reference text. In practice, such context is often unstructured and contaminated with benign but instruction-like semantic noise, such as editorial comments and system traces, which should be treated strictly as data. We introduce DistractionIF, a benchmark designed to evaluate robustness against such distractor instructions in reference text. Across a broad range of models, we observe a consistent inverse scaling phenomenon: larger models are often less robust, with performance dropping by up to 30 points as scale increases. Mechanistically, our perplexity analysis reveals that scaling erodes the probabilistic boundary between robust and distracted behaviors, making models increasingly prone to over-interpreting noise as instructions. To address this, we demonstrate that reinforcement learning, specifically Group Relative Policy Optimization (GRPO), can restore this boundary, improving robustness by up to 15.5% without compromising general instruction-following capability. Our findings highlight a critical instruction-following robustness gap in reference-grounded tasks and establish reinforcement learning as a promising path for enforcing strict data-instruction separation at scale.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Agentic RAG, agents and memory, one of 15 directions in Retrieval-augmented generation. Builds on 38 of its 50 references that are in the map. First posted on arXiv 28 May 2026.
Builds on
38 of 50 references.
References · 38
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,374
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
- 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,824
- 2023Let's Verify Step by Stepcited by 3,789
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
26 more
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,724
- 2022Emergent Abilities of Large Language Modelscited by 2,512
- 2023Retrieval-Augmented Generation for Large Language Models: A Surveycited by 2,212
- 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,745
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
- 2023Instruction-Following Evaluation for Large Language Modelscited by 1,228
- 2020Leveraging Passage Retrieval with Generative Models for Open Domain Question Answeringcited by 1,210
- 2022Solving math word problems with process- and outcome-based feedbackcited by 901
- 2025DeepSeek-V3.2: Pushing the Frontier of Open Large Language Modelscited by 815
- 2023AlpacaFarm: A Simulation Framework for Methods that Learn from Human Feedbackcited by 748
- 2023The Flan Collection: Designing Data and Methods for Effective Instruction Tuningcited by 739
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 722
- 2023Prompt Injection attack against LLM-integrated Applicationscited by 605
- 2025Kimi K2: Open Agentic Intelligencecited by 567
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
- 2023Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Modelscited by 264
- 2023Inverse Scaling: When Bigger Isn't Bettercited by 207
- 2022A Survey of Multi-Agent Deep Reinforcement Learning with Communicationcited by 104
- 2022Inverse scaling can become U-shapedcited by 76
- 2024Current state of LLM Risks and AI Guardrailscited by 46
- 2025Control Illusion: The Failure of Instruction Hierarchies in Large Language Modelscited by 33
- 2025A Systematic Review of Key Retrieval-Augmented Generation (RAG) Systems: Progress, Gaps, and Future Directionscited by 31
- 2025Security Concerns for Large Language Models: A Surveycited by 29
- 2025M-IFEval: Multilingual Instruction-Following Evaluationcited by 17
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challengescited by 15
- 2026Mitigating the OWASP Top 10 For Large Language Models Applications using Intelligent Agentscited by 3
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025Adaptive Distraction: Probing LLM Contextual Robustness with Automated Tree Search
- 2026One Token Away from Collapse: The Fragility of Instruction-Tuned Helpfulness
- 2026Lost in the Noise: How Reasoning Models Fail with Contextual Distractors
- 2025Resisting Contextual Interference in RAG via Parametric-Knowledge Reinforcement
- 2026Where Does Robustness Live? Neuron-Guided Adaptation for Retrieval-Augmented Language Models
- 2026Reinforcement Inference: Leveraging Uncertainty for Self-Correcting Language Model Reasoning
- 2025Understanding the Effects of RLHF on the Quality and Detectability of LLM-Generated Texts
- 2025Instruction Tuning with and without Context: Behavioral Shifts and Downstream Impact