Judging by the Cover: Cleaning LLM Truthfulness Benchmarks to Avoid Surface-Level Feature Leakage
Not on the map. Why?
Abstract (arXiv)
Binary-choice truth benchmarks ask models to choose between a correct and an incorrect answer, but if the two answers differ systematically in surface-level features, models can exceed chance without performing the intended reasoning. We show that this failure mode is detectable and can be exploited by downstream classifiers. In TruthfulQA, a simple six-feature logistic classifier achieves substantial accuracy in separating correct from incorrect answers. We further show that similar surface-level artifacts are present in additional benchmarks. To counteract this, we developed a general mechanism to clean them by removing the most leakage-reinforcing pairs. We release a version of TruthfulQA with surface-feature leakage reduced close to chance and provide a mechanism, Audit-Prune, so that the datasets can be cleaned before release.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 43 of its 59 references that are in the map. First posted on arXiv 11 Sep 2026.
Builds on
43 of 59 references.
References · 43
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,883
- 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,682
- 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,183
- 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,164
- 2020Shortcut Learning in Deep Neural Networkscited by 1,969
- 2015A large annotated corpus for learning natural language inferencecited by 1,847
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2018FEVER: a large-scale dataset for Fact Extraction and VERificationcited by 1,375
- 2019Right for the Wrong Reasons: Diagnosing Syntactic Heuristics in Natural Language Inferencecited by 876
- 2023SelfCheckGPT: Zero-Resource Black-Box Hallucination Detection for Generative Large Language Modelscited by 810
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 807
31 more
- 2018Annotation Artifacts in Natural Language Inference Datacited by 671
- 2023Large Language Models Are Not Robust Multiple Choice Selectorscited by 486
- 2019Learning the Difference that Makes a Difference with Counterfactually-Augmented Datacited by 439
- 2020Dataset Cartography: Mapping and Diagnosing Datasets with Training Dynamicscited by 425
- 2023HaluEval: A Large-Scale Hallucination Evaluation Benchmark for Large Language Modelscited by 341
- 2021Do Prompt-Based Models Really Understand the Meaning of their Prompts?cited by 326
- 2024tinyBenchmarks: evaluating LLMs with fewer examplescited by 310
- 2018Hypothesis Only Baselines in Natural Language Inferencecited by 295
- 2019Don't Take the Easy Way Out: Ensemble Based Methods for Avoiding Known Dataset Biasescited by 280
- 2021Get Your Vitamin C! Robust Fact Verification with Contrastive Evidencecited by 225
- 2019Probing Neural Network Comprehension of Natural Language Argumentscited by 214
- 2020Adversarial Filters of Dataset Biasescited by 160
- 2019REPAIR: Removing Representation Bias by Dataset Resamplingcited by 157
- 2019Towards Debiasing Fact Verification Modelscited by 143
- 2023Investigating Data Contamination in Modern Benchmarks for Large Language Modelscited by 138
- 2019Unlearn Dataset Bias in Natural Language Inference by Fitting the Residualcited by 119
- 2020Towards Debiasing NLU Models from Unknown Biasescited by 116
- 2021Competency Problems: On Finding and Removing Artifacts in Language Datacited by 91
- 2022Shortcut Learning of Large Language Models in Natural Language Understandingcited by 85
- 2024Artifacts or Abduction: How Do LLMs Answer Multiple-Choice Questions Without the Question?cited by 71
- 2025Which of These Best Describes Multiple Choice Evaluation with LLMs? A) Forced B) Flawed C) Fixable D) All of the Abovecited by 52
- 2025Answer Matching Outperforms Multiple Choice for Language Model Evaluationcited by 41
- 2025MedHallu: A Comprehensive Benchmark for Detecting Medical Hallucinations in Large Language Modelscited by 34
- 2019On Adversarial Removal of Hypothesis-only Bias in Natural Language Inferencecited by 29
- 2025Benchmark Designers Should "Train on the Test Set" to Expose Exploitable Non-Visual Shortcutscited by 29
- 2025The Illusion of Progress: Re-evaluating Hallucination Detection in LLMscited by 22
- 2024Improving Model Evaluation using SMART Filtering of Benchmark Datasetscited by 21
- 2021Adversarially Constructed Evaluation Sets Are More Challenging, but May Not Be Faircited by 12
- 2024Leaving the barn door open for Clever Hans: Simple features predict LLM benchmark answerscited by 9
- 2026Understanding and Mitigating Dataset Corruption in LLM Steeringcited by 1
- 2026Gated Against One Model, Open to the Next: Option-Only Solvability in Legal Multiple-Choice Benchmarkscited by 1
Built on by
Not cited yet.