Auditing Proxy-Based Validation Across Text Spans
Not on the map. Why?
Abstract (arXiv)
Evaluation scores are often validated by their agreement with inexpensive proxy labels. When the score and the proxy are computed from the same text span, however, that agreement can arise from surface evidence the two share rather than from the semantic construct the proxy is meant to represent. We make the distinction explicit by declaring the score, its span, the proxy and the target construct as a validation contract, then re-evaluating that proxy rule strictly outside the scored span. In a controlled HotpotQA correctness experiment varying only the shared text boundary, the score agrees with its proxy far better than with correctness at a 50-character prefix: the gap is +0.184, collapsing to at most +0.045 from 120 characters onward. At that short prefix the score still predicts whether the answer string appears later (AUC 0.634) while an equivalence test places its agreement with correctness at chance, so the reported proxy agreement does not establish that the score ranks correctness. On OR-Bench, suppressing each model's recurring opening templates removes most of the score's association with the refusal proxy, while matched-volume deletion removes almost none and construct agreement stays at chance. Only three of eleven external contracts support the off-span control, and none of the routing studies we sampled released the generations it needs. We therefore ask that a proxy-based validation claim declare the span each label is read from, report the construct agreement beside the proxy agreement, and release the generations that let the proxy be re-read off the scored span.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 22 of its 94 references that are in the map. First posted on arXiv 22 Sep 2026.
Builds on
22 of 94 references.
References · 22
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2025Qwen3 Technical Reportcited by 8,820
- 2023Mistral 7Bcited by 3,164
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
- 2022Text Embeddings by Weakly-Supervised Contrastive Pre-trainingcited by 1,253
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2024Gemma: Open Models Based on Gemini Research and Technologycited by 916
- 2024RouterBench: A Benchmark for Multi-LLM Routing Systemcited by 238
- 2023SimpleSafetyTests: a Test Suite for Identifying Critical Safety Risks in Large Language Modelscited by 76
- 2025FreePRM: Training Process Reward Models Without Ground Truth Process Labelscited by 11
10 more
- 2026Credit Without Ground Truth: Auditing Step-Level Credit Assignment in LLM Agents Against Executed Replaycited by 7
- 2026Cross-Model Disagreement as a Label-Free Correctness Signalcited by 6
- 2025CoLD: Counterfactually-Guided Length Debiasing for Process Reward Models in Mathematical Reasoningcited by 5
- 2026What Does a Routing Oracle Measure Under Stochastic Decoding? Coupling, Scorer Choice, and Single-Commit Ceilingscited by 5
- 2026Building to the Test: Coding Agents Deliver What You Check, Not What You Requestedcited by 4
- 2026A Judge Should Know What Changed:Construct Validity for LLM-as-a-Judge Evaluationcited by 4
- 2026EST-PRM: Stress-Testing Process Reward Models Before They Become Load-Bearingcited by 2
- 2026Correct codes for the wrong reasons? validating LLMs as measurement instruments for theoretical constructscited by 2
- 2026The Hidden Bias of Process Reward Models:PRISM for Rewarding the Right Reasoningcited by 1
- 2026When the Defense Writes the Refusal: Auditing Keyword-Scored Evaluation of Inference-Time Defenses for Multimodal Large Language Modelscited by 1
Built on by
Not cited yet.