Improving Evaluation Realism with Inference-Time Compute and Deployment Scaffolds
On the map: LLM reasoning → Reasoning for agents, planning and code
Abstract (arXiv)
A core obstacle to alignment evaluation is evaluation awareness: capable models can tell when they are being tested rather than deployed, weakening the conclusions a safety evaluation can support. We present two techniques that make simulated alignment evaluations harder to distinguish from real deployments. Our first technique, critique refinement, spends additional inference-time compute on each simulator action: the simulator generates multiple candidate actions, refines them using feedback from an instance of the target model on how to make them more realistic, and continues the evaluation with the most deployment-like candidate. Our second technique, DISH (Deployment-Imitating SWE-Agent Harness), wraps the target in an agent harness, reducing the gap between simulated and real deployment environments in coding settings. We test the techniques on multiple target models and find that they compose: applying both yields larger realism gains than either alone. Our results show that automated approaches can improve the realism of alignment evaluations, and that these improvements use additional compute more effectively than making the audits longer.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 9 of its 20 references that are in the map. First posted on arXiv 2 Sep 2026.
Builds on
9 of 20 references.
References · 9
- 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,317
- 2024Scaling LLM Test-Time Compute Optimally can be More Effective than Scaling Model Parameterscited by 1,928
- 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
- 2024Frontier Models are Capable of In-context Schemingcited by 252
- 2025Large Language Models Often Know When They Are Being Evaluatedcited by 105
- 2026Evaluating whether AI models would sabotage AI safety researchcited by 7
- 2026UK AISI Alignment Evaluation Case-Studycited by 3
- 2026Gram: Assessing sabotage propensities via automated alignment auditingcited by 3
- 2026LURE: Live-Usage Replay Evaluations for Reducing Evaluation Awarenesscited by 2
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026AuditBench: Evaluating Alignment Auditing Techniques on Models with Hidden Behaviors
- 2026Engineering Reliable Coding Agents: Evaluating and Operating the System Around the Model
- 2026SWE Refactor Bench: Can Coding Agents Complete a Long-Horizon, Whole-Repository Stack Migration?
- 2026Reinforced Agent: Inference-Time Feedback for Tool-Calling Agents
- 2026SynAE: A Framework for Measuring the Quality of Synthetic Data for Tool-Calling Agent Evaluations
- 2025Probe-Rewrite-Evaluate: A Workflow for Reliable Benchmarks and Quantifying Evaluation Awareness
- 2026When Evaluation Becomes a Side Channel: Regime Leakage and Structural Mitigations for Alignment Assessment
- 2026Harness-Bench: Measuring Harness Effects across Models in Realistic Agent Workflows