POSIX: A Prompt Sensitivity Index For Large Language Models
Open accessAbstract
Despite their remarkable capabilities, Large Language Models (LLMs) are found to be surprisingly sensitive to minor variations in prompts, often generating significantly divergent outputs in response to minor variations in the prompts, such as spelling errors, alteration of wording or the prompt template.However, while assessing the quality of an LLM, the focus often tends to be solely on its performance on downstream tasks, while very little to no attention is paid to prompt sensitivity.To fill this gap, we propose POSIX -a novel PrOmpt Sensitivity IndeX as a reliable measure of prompt sensitivity, thereby offering a more comprehensive evaluation of LLM performance.The key idea behind POSIX is to capture the relative change in loglikelihood of a given response upon replacing the corresponding prompt with a different intent-preserving prompt.We provide thorough empirical evidence demonstrating the efficacy of POSIX in capturing prompt sensitivity and subsequently use it to measure and thereby compare prompt sensitivity of various opensource LLMs.We find that merely increasing the parameter count or instruction tuning does not necessarily reduce prompt sensitivity whereas adding some few-shot exemplars, even just one, almost always leads to significant decrease in prompt sensitivity.We also find that alterations to prompt template lead to the highest sensitivity in the case of MCQtype tasks, whereas paraphrasing results in the highest sensitivity in open-ended generation tasks.The code for reproducing our results is open-sourced at https://github.com/kowndinya- renduchintala/POSIX.
AI snapshot
Written from the paper’s full text.
TL;DR
The paper introduces POSIX, a prompt sensitivity index that measures relative changes in an LLM’s log-likelihood for a response when a prompt is replaced by an intent-preserving variant. Using POSIX across MMLU, Alpaca, and BBH, the authors find that instruction tuning and larger parameter counts do not necessarily reduce prompt sensitivity, while even one few-shot exemplar usually does.
Key findings
- POSIX empirically correlates with four intended factors: response diversity, response distribution entropy, semantic coherence, and variance in confidence; the paper reports positive correlation for unique responses, response distribution entropy, and log-probability variance, and negative correlation for average cosine similarity.
- Instruction tuning does not necessarily reduce sensitivity: chat/instruct models are generally less sensitive than base models for template variations on MMLU, with Mistral as the only exception, but instruct versions tend to be more sensitive in other variation categories, especially on Alpaca. FLAN-only fine-tuned models are mostly worse than chat versions except for prompt templates on MMLU, where FLAN-only models significantly outperform chat versions.
- Adding few-shot exemplars, even just one, almost always leads to a significant decrease in prompt sensitivity; additional exemplars yield diminishing gains, with sensitivity staying about the same or slightly decreasing.
- Prompt template is the most sensitive variation type for MCQ-type tasks, while paraphrasing is almost always the most sensitive variation type for open-ended generation on Alpaca, with OLMo being the only exception. Model scale results show OLMo 7B is significantly more sensitive than OLMo 1B on MMLU but comparable on Alpaca, and Llama-2 13B is not guaranteed to be less sensitive than Llama-2 7B.
Methods
- POSIX is defined from an intent-aligned prompt set \(X=\{x_i\}_{i=1}^N\) and responses \(Y=\{y_i\}_{i=1}^N\): \(\psi_{M,X}=\frac{1}{N(N-1)}\sum_{i=1}^N\sum_{j=1}^N \frac{1}{L_{y_j}}\left|\log\frac{P_M(y_j|x_i)}{P_M(y_j|x_j)}\right|\), where \(L_{y_j}\) is response length. POSIX averages \(\psi_{M,X}\) over a dataset of intent-aligned prompt sets.
- Experiments use MMLU for classification as MCQ, Alpaca for open-ended generation, and BBH families; models include LLaMA-2 7B base/chat, LLaMA-3 8B base/instruct, Mistral 7B base/instruct, OLMo 7B base/instruct, plus OLMo 1B, Llama-2 13B, and FLAN-fine-tuned LLaMA-2 7B and Mistral 7B. All experiments ran on 8 NVIDIA A100-SXM4-80GB GPUs.
- For each prompt, 60 intent-aligned variants are generated: 20 spelling-error variants, 20 prompt-template variants, and 20 GPT-3.5-Turbo paraphrases. POSIX is computed per variation type using the original prompt plus its 20 corresponding variants; the mixture category uses 21 variants sampled uniformly from the three categories. MMLU generates 5 tokens, Alpaca 30 tokens. BBH uses only prompt-template variation because many BBH tasks do not preserve intent under spelling errors or paraphrasing.
Limitations
- The paper states that POSIX has high computational complexity: it needs \(O(MN^2)\) log-likelihood comparisons if \(M\) is the total number of prompts and \(N\) is the number of variations per prompt.
- The paper notes an ethical/data limitation: while paraphrasing MMLU prompts with GPT-3.5-Turbo, quite a few prompts were flagged as violent or biased, mostly from the moral_scenarios split, and these were removed from analyses.
- Evident from the text: the empirical evaluation is limited to open-source models and specific datasets (MMLU, Alpaca, BBH), and BBH is restricted to template variations only because other perturbations were not intent-preserving for many tasks.
Model-written summary. Check it against the paper before relying on it.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
2 of 5 cited sources checked · 0 supported · 0 flagged · accuracy not yet measured
- Premisecitation
Large Language Models are sensitive to minor intent-preserving prompt variations, often producing significantly divergent outputs in response to such variations.
“Despite their remarkable capabilities, Large Language Models (LLMs) are found to be surprisingly sensitive to minor variations in prompts, often generating significantly divergent outputs in response to minor variations in the prompts, such as spelling errors, alteration of wording or the prompt template.”
- Also stated in: § 1 Introduction · plain
“However, LLMs have been found to be surprisingly sensitive even to the smallest of variations in prompts that do not significantly alter its meaning -such as wording, prompt template or even minor spelling errors -so much so that prompt engineering, which is a process of iteratively tuning prompts to elicit desired responses, has become a widespread practice (Reynolds and McDonell, 2021).”
Quote in the paperSubstantial claim1 of 1 sources checked- cites Reynolds and McDonell, 2021 source
Section 4 (p. 4) says rewriting a prompt can significantly change task performance, and §4.5 (p. 6) describes how small formatting and wording changes affect whether GPT-3 translates a sentence or continues in French. The paper supports sensitivity to some prompt variations, but the cited passages do not establish that divergent outputs occur often or address spelling errors specifically. (LLM, conf=0.85)
Experimental — accuracy not yet measured
- Also stated in: § 1 Introduction · plain
- Premisecitation
Standard evaluation benchmarks focus predominantly on performance metrics like exact match, leaving prompt sensitivity sidelined.
“Despite prompt sensitivity being a crucial aspect for assessing the usability of an LLM, standard evaluation benchmarks such as MMLU (Hendrycks et al., 2021) or BBH (Suzgun et al., 2022) focus predominantly on performance metrics like exact match, leaving prompt sensitivity sidelined.”
Quote in the paperSubstantial claim1 of 2 sources checked- cites Hendrycks et al., 2021
Couldn’t be matched to a paper in Crossref, so it can’t be checked.
- cites Suzgun et al., 2022 source
The Evaluation protocol states that BBH measures accuracy by exact match, supporting the performance-metric part of the claim. But §3 (Experimental Setup) compares answer-only and chain-of-thought prompting, and §4.1 reports that prompt instructions and answer options affect results. The paper does not establish that prompt sensitivity is wholly sidelined. (LLM, conf=0.83)
Experimental — accuracy not yet measured
- Findingown data
Adding few-shot exemplars, even just one, almost always leads to a significant decrease in prompt sensitivity.
“We find that merely increasing the parameter count or instruction tuning does not necessarily reduce prompt sensitivity whereas adding some few-shot exemplars, even just one, almost always leads to significant decrease in prompt sensitivity.”
- Also stated in: § 5.4 Few-shot Exemplars and Sensitivity · plain
“The key finding is that adding few-shot exemplars, even if it just a single example can significantly boost the robustness of LLMs towards variations in prompts.”
Quote in the paperSubstantial claim - Also stated in: § 5.4 Few-shot Exemplars and Sensitivity · plain
- Findingown data
Merely increasing parameter count or instruction tuning does not necessarily reduce prompt sensitivity.
“We find that merely increasing the parameter count or instruction tuning does not necessarily reduce prompt sensitivity whereas adding some few-shot exemplars, even just one, almost always leads to significant decrease in prompt sensitivity.”
- Also stated in: § 5.2 Effect of Instruction Tuning on Sensitivity · hedged
“Note that this implies that instruction tuning does not necessarily improve model sensitivity.”
Quote in the paperSubstantial claim - Also stated in: § 5.2 Effect of Instruction Tuning on Sensitivity · hedged
- Findingown data
Prompt template is the most sensitive variation type for multiple-choice question (MCQ) tasks.
“From Table 1, it can be observed that prompt template is the most sensitive variation type in the case of MCQs”
- Also stated in: § 6 Conclusions · plain
“prompt template is the most sensitive variant type for MCQ tasks”
Quote in the paperSubstantial claim - Also stated in: § 6 Conclusions · plain
- Findingown data
Paraphrases are almost always the most sensitive variation type for the Alpaca dataset (open-ended generation), with OLMo being the only exception.
“paraphrases are almost always the most sensitive variation type in the case of Alpaca (OLMo being the only exception)”
- Also stated in: § 6 Conclusions · plain
“paraphrasing is the most sensitive variant type for open-ended generation tasks”
Quote in the paperSubstantial claim - Also stated in: § 6 Conclusions · plain
- Findingown data
The sensitivity of the prompt template is greater than any other perturbation in the case of Alpaca.
“Moreover, the sensitivity of the prompt template is more sensitive than any other perturbation in the case of Alpaca”
Quote in the paperSubstantial claim - Findingown data
Parameter count or instruction tuning do not necessarily decrease the prompt sensitivity of large language models.
“parameter count or instruction tuning do not necessarily decrease prompt sensitivity of the models”
Quote in the paperSubstantial claim - Findingown data
On Alpaca, the higher sensitivity of instruct versions is even more pronounced.
“Especially for open-ended generation tasks, i.e., on Alpaca, the higher sensitivity of instruct versions is even more pronounced.”
Quote in the paperSubstantial claim - Findingown data
Chat or instruct versions of models are generally less sensitive than corresponding base models for template variations on MMLU, with Mistral being the only exception.
“We observe that chat or instruct versions of the models are generally less sensitive than the corresponding base models in the case of template variations on MMLU, with Mistral being the only exception.”
Quote in the paperSubstantial claim - Findingown data
A 13B Llama-2 model is not guaranteed to always have lesser prompt sensitivity than a 7B model.
“Similarly, even in the case of Llama-2, a 13B model is not guaranteed to always have lesser prompt sensitivity than a 7B model.”
Quote in the paperSubstantial claim - Findingown data
In other categories of variations, instruct versions tend to be more sensitive than their base models.
“However, in the other categories of variations, the instruct versions tend to be more sensitive than their base models.”
Quote in the paperSubstantial claim - Premisecitation
Model cards and blog posts announcing commonly used LLMs often do not contain prompt sensitivity analysis.
“Similarly, the model cards and blog posts announcing the most commonly used LLMs often do not contain prompt sensitivity analysis at all (AI@Meta, 2024).”
Quote in the paperSubstantial claim0 of 1 sources checked- cites AI@Meta, 2024
Couldn’t be matched to a paper in Crossref, so it can’t be checked.
- Interpretationnone given
Exact match score is brittle, heavily penalizing minor wording differences in correct responses.
“The exact match score is also brittle, heavily penalizing minor wording differences in correct responses.”
Quote in the paperNot a substantial claim - Interpretationnone given
Response distribution matters: a model producing a consistent response in all but one case is less sensitive than one generating two different responses each equally frequent.
“Additionally, response distribution matters: a model producing a consistent response in all but one case is less sensitive than one generating two different responses -each equally frequent.”
Quote in the paperNot a substantial claim - Interpretationreasoning
Higher response distribution entropy leads to an uptick in ψ_M,X.
“A higher entropy indicates the tendency of the model to generate divergent responses more often -consequently, the magnitude of the loglikelihood ratios in the summation of Definition 3.3 will tend to be high, resulting in an uptick in the value of ψ M,X with increase in response distribution entropy.”
Quote in the paperNot a substantial claim- The authors state this as an assumption: For an LLM that is not sensitive to prompt variations, the probability of generating a given response remains approximately the same when the prompt is replaced by an intent-preserving variant, i.e., P(y1|x1) ≈ P(y1|x2).
- Premisereasoning
For the Big-Bench Hard (BBH) dataset, many tasks do not allow intent-preserving spelling errors or paraphrasing.
“in the case of BBH, many tasks like boolean_expressions, date understanding, geometric_shapes or dyck_languages, even minor spelling errors are not intent-preserving and paraphrasing would not be possible in many cases such as numerical expressions.”
Quote in the paperSubstantial claim - Interpretationnone given
POSIX is the first attempt to develop a prompt sensitivity index that takes all four factors into account and works across different kinds of prompt variations and tasks, including open-ended generation with arbitrary response lengths.
“To the best of our knowledge, ours is the first attempt towards developing a prompt sensitivity index that takes all of the above four factors into account and that works across different kinds of prompt variations and different kinds of tasks, including open-ended generation with arbitrary response lengths.”
Quote in the paperNot a substantial claim - Interpretationreasoning
Average cosine similarity between generated responses cannot by itself be employed as a prompt sensitivity metric.
“This is also a reason why average cosine similarity between the generated responses cannot by itself be employed as a prompt sensitivity metric.”
Quote in the paperSubstantial claim
- May combine two claims. 14
- Classified as probably not a substantial claim. 7
May combine two claims.
Findingown dataAlterations to prompt template lead to the highest sensitivity in MCQ-type tasks, whereas paraphrasing results in the highest sensitivity in open-ended generation tasks.
“We reveal an interesting observation based on POSIX computation -variations in template bring about maximum sensitivity in the case of MCQ-type tasks while variations in wording lead to maximum effect in the case of open-ended generation tasks (Section 5).”
Quote in the paperSubstantial claimMay combine two claims.
Findingown dataPOSIX incorporates all four factors: response diversity, response distribution entropy, semantic coherence, and variance in confidence.
“We empirically show in Section 5.1 that POSIX incorporates all the four factors listed above.”
- Also stated in: § 5.1 Evaluating the Efficacy of POSIX · boosted
“Thus, the plots serve as an empirical validation for the fact that POSIX incorporates each of the factors described in Section 3.”
Quote in the paperSubstantial claim- The authors state this as an assumption: For an LLM that is not sensitive to prompt variations, the probability of generating a given response remains approximately the same when the prompt is replaced by an intent-preserving variant, i.e., P(y1|x1) ≈ P(y1|x2).
- Also stated in: § 5.1 Evaluating the Efficacy of POSIX · boosted
May combine two claims.
FindingreasoningAdding more few-shot examples might yield diminishing gains; the additional value of a second or third few-shot exemplar is not much, and prompt sensitivity either remains about the same or slightly decreases.
“Although, adding even more few-shot examples might yield diminishing gains, i.e., when compared to the value that a single example adds, the additional value of a second or third few-shot exemplar is not that much -prompt sensitivity either remains about the same or slightly decreases.”
Quote in the paperSubstantial claimMay combine two claims.
Findingown dataMistral models have the least divergence in sensitivity between base and instruct variants, whereas OLMo models have the most disparity.
“Furthermore, the Mistral models seem to have the least divergence in sensitivity between the base and instruct variants whereas the OLMo models have the most disparity.”
Quote in the paperNot a substantial claimProbably not a substantial claim: may not pass S3 (load-bearing).
Findingown dataMost of the prompts flagged as violent or biased during paraphrasing of MMLU were from the moral_scenarios split of MMLU.
“Most of them were from the moral_scenarios split of MMLU.”
Quote in the paperNot a substantial claimMay combine two claims.
Findingown dataThe number of unique responses, response distribution entropy, and log-probability variance when all responses are identical have positive correlation with POSIX, while average cosine similarity between responses is negatively correlated with POSIX.
“The number of unique responses, the response distribution entropy and the log-probability variance (in case all responses are identical) -all have positive correlation with POSIX and the average cosine similarity between the responses is negatively correlated with POSIX.”
Quote in the paperSubstantial claimMay combine two claims.
Findingown dataThe 7B OLMo model is significantly more sensitive than the 1B model on MMLU, but they are comparable on Alpaca.
“We observe that the 7B model is significantly more sensitive compared to the 1B model on the MMLU dataset; however, they are comparable in the case of the Alpaca dataset, in the case of OLMo.”
Quote in the paperSubstantial claimMay combine two claims.
FindingreasoningIn most cases, the chat version is better than FLAN-only models in terms of sensitivity, except for prompt template on MMLU, where FLAN-only models significantly outperform the chat versions.
“In most cases, the chat version is better than FLAN-only models in terms of sensitivity, except in case of prompt template for MMLU, where FLAN-only models significantly outperform the chat versions.”
Quote in the paperSubstantial claimProbably not a substantial claim: may not pass S4 (based).
Interpretationnone givenModels might show significant variance in loglikelihoods of responses for different prompt variations even when the responses are identical.
“Furthermore, models might show significant variance in the loglikelihoods of responses for different prompt variations even when the responses are identical.”
Quote in the paperNot a substantial claimMay combine two claims.
PremisecitationExisting studies are limited to deterministic responses like multiple-choice questions or short answers and do not consider sensitivity in open-ended generative tasks.
“Finally, the existing studies are also limited to deterministic responses, like multiple-choice questions or short answers (Kwiatkowski et al., 2019) and do not consider the sensitivity in the case of open-ended generative tasks.”
Quote in the paperSubstantial claim0 of 1 sources checked- cites Kwiatkowski et al., 2019 source
May combine two claims.
Interpretationown dataPOSIX is a novel prompt sensitivity index that reliably measures prompt sensitivity and offers a more comprehensive evaluation of LLM performance.
“To fill this gap, we propose POSIX -a novel PrOmpt Sensitivity IndeX as a reliable measure of prompt sensitivity, thereby offering a more comprehensive evaluation of LLM performance.”
- Also stated in: § 1 Introduction · plain
“We introduce POSIX -a novel prompt sensitivity index that can act as a reliable measure of sensitivity of LLMs towards intent-preserving variations of prompts (Section 3).”
Quote in the paperSubstantial claim- The authors state this as an assumption: For an LLM that is not sensitive to prompt variations, the probability of generating a given response remains approximately the same when the prompt is replaced by an intent-preserving variant, i.e., P(y1|x1) ≈ P(y1|x2).
- Rests on an assumption: A real-world user may not always be able to formulate the optimal prompt every time.
- Rests on an assumption: A universally applicable optimal prompt that can work across different model architectures may not exist.
- Rests on an assumption: Prompt sensitivity is a crucial aspect for assessing the usability of an LLM.
- Also stated in: § 1 Introduction · plain
May combine two claims.
Interpretationown dataAccuracy and sensitivity are two separate aspects; higher accuracy does not necessarily imply better sensitivity and vice-versa.
“This only re-emphasizes the fact that accuracy and sensitivity are two separate aspects -and higher accuracy does not necessarily imply better sensitivity and vice-versa.”
Quote in the paperSubstantial claimMay combine two claims.
Interpretationown dataPOSIX is a reliable and effective measure of the sensitivity of large language models to intent-preserving variations in prompts.
“We introduced POSIX -a novel prompt sensitivity index, as a reliable measure of sensitivity of LLMs towards intent-preserving variations in prompts such as spelling errors, prompt templates, and alterations in the wording.”
- Also stated in: § 6 Conclusions · plain
“We presented thorough empirical analysis for the efficacy of POSIX in capturing prompt sensitivity”
- Also stated in: § G Efficacy of POSIX for Open-ended Generation · boosted
“Figure 7 shows the correlation of POSIX with the four factors listed in Section 1 for a combination of all types of prompt variations in Alpaca, depicting the effectiveness of POSIX in successfully capturing the nuances of prompt sensitivity.”
Quote in the paperSubstantial claim- Rests on an assumption: The generated spelling errors, prompt templates, and paraphrases are intent-preserving variations of the original prompts.
- Rests on an assumption: The four factors (response diversity, response distribution entropy, semantic coherence, variance in confidence) are valid measures of prompt sensitivity.
- Also stated in: § 6 Conclusions · plain
Probably not a substantial claim: may not pass S3 (load-bearing).
Study design and conductown dataPrompts flagged as violent or biased during paraphrasing of MMLU with GPT-3.5-Turbo were removed from the analyses.
“While attempting to paraphrase the prompts in MMLU using GPT-3.5-Turbo,quite a few prompts have been flagged as either violent or biased, etc.Most of them were from the moral_scenarios split of MMLU.We made sure to remove these from our analyses.”
Quote in the paperNot a substantial claimMay combine two claims.
InterpretationreasoningResponse diversity contributes indirectly to higher ψ_M,X: if two responses are significantly different, their log-likelihoods given a prompt are likely significantly different, making the summation terms large and increasing ψ_M,X overall.
“While not explicitly evident in the expression of ψ M,X , response diversity contributes indirectly to higher ψ M,X .Say if two responses, y i and y j , are significantly different, then their log-likelihoods (given a prompt) are likely to be significantly different i.e., the terms in summation, log P M (y j |x i ) P M (y j |x j ) , become large, thereby leading to greater ψ M,X overall.”
Quote in the paperNot a substantial claim- The authors state this as an assumption: For an LLM that is not sensitive to prompt variations, the probability of generating a given response remains approximately the same when the prompt is replaced by an intent-preserving variant, i.e., P(y1|x1) ≈ P(y1|x2).
Classified as probably not a substantial claim.
Interpretationreasoningψ_M,X directly measures how divergent the log-likelihoods are for different intent-aligned prompts, thereby capturing subtle nuances in response generation that contribute to model sensitivity.
“As evident from Definition 3.3, our proposed index ψ M,X directly measures how divergent the log-likelihoods are for different intent-aligned prompts, thereby capturing the subtle nuances in response generation which contribute towards the sensitivity of the models.”
Quote in the paperSubstantial claim- The authors state this as an assumption: For an LLM that is not sensitive to prompt variations, the probability of generating a given response remains approximately the same when the prompt is replaced by an intent-preserving variant, i.e., P(y1|x1) ≈ P(y1|x2).
Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).
Interpretationnone givenPOSIX can work across different kinds of prompt variations and tasks, including open-ended generation with arbitrary response lengths.
“POSIX has its own advantages, like the ability to work across different kinds of prompt variations and tasks, including open-ended generation with arbitrary response lengths”
Quote in the paperNot a substantial claimClassified as probably not a substantial claim.
InterpretationreasoningEven if all responses to prompts in X are exactly the same, the model would still be considered sensitive if there is notable variation in the likelihood of generating the response with a change in the input prompt.
“Consider the case where all responses to the prompts in X are exactly the same, i.e., all y j 's are the same.In such a case, should we call the model to be not sensitive at all? Upon a closer look, we can realize that the model would still be considered as sensitive if there is a notable variation in the likelihood of generating the response with a change in the input prompt.”
Quote in the paperSubstantial claim- The authors state this as an assumption: For an LLM that is not sensitive to prompt variations, the probability of generating a given response remains approximately the same when the prompt is replaced by an intent-preserving variant, i.e., P(y1|x1) ≈ P(y1|x2).
May combine two claims.
InterpretationreasoningPOSIX is comparable for arbitrary response lengths because it is normalized by the number of tokens in the response.
“POSIX is, however, comparable for arbitrary response lengths as it is normalized by the number of tokens in the response.”
Quote in the paperSubstantial claim- The authors state this as an assumption: For an LLM that is not sensitive to prompt variations, the probability of generating a given response remains approximately the same when the prompt is replaced by an intent-preserving variant, i.e., P(y1|x1) ≈ P(y1|x2).
Probably not a substantial claim: may not pass S1 (asserted), S3 (load-bearing), S4 (based).
Interpretationnone givenPOSIX requires O(M N^2) log-likelihood comparisons, where M is the total number of prompts in a dataset and N is the number of variations per prompt.
“POSIX needs O(M N 2 ) log-likelihood comparisons if M is the total number of prompts in a dataset under consideration and N is the number of variations per prompt.”
Quote in the paperNot a substantial claimMay combine two claims.
InterpretationreasoningPOSIX is orthogonal to exact match and adds a new dimension for evaluating LLMs.
“In that sense, it is completely orthogonal to metrics like exact match (which are purely performancebased) and adds a new dimension altogether for evaluating LLMs.”
Quote in the paperSubstantial claim
The authors state this as an assumption.
For an LLM that is not sensitive to prompt variations, the probability of generating a given response remains approximately the same when the prompt is replaced by an intent-preserving variant, i.e., P(y1|x1) ≈ P(y1|x2).
“Then the assumption, which turns out to be the cornerstone of our index , is that for an LLM that is not sensitive, P(y 1 |x 1 ) should not change much if x 1 is replaced by its intent-preserving variant, x 2 , i.e., P(y 1 |x 1 ) ≈ P(y 1 |x 2 ).Similarly the other way round -P(y 2 |x 2 ) ≈ P(y 2 |x 1 ).”
The paper relies on this without support.
A real-world user may not always be able to formulate the optimal prompt every time.
“This is largely because a real-world user may not always be able to formulate the”
The paper relies on this without support.
A universally applicable optimal prompt that can work across different model architectures may not exist.
“Moreover, a universally applicable optimal prompt that can work across different model architectures may not even exist.”
The paper relies on this without support.
Prompt sensitivity is a crucial aspect for assessing the usability of an LLM.
“Despite prompt sensitivity being a crucial aspect for assessing the usability of an LLM”
The paper relies on this without support.
The paraphrased prompt variations preserve the original intent and meaning of the prompt.
“These paraphrases are such that they rephrase the question while preserving its original intent and meaning.”
The paper relies on this without support.
The generated spelling errors, prompt templates, and paraphrases are intent-preserving variations of the original prompts.
“We introduced POSIX -a novel prompt sensitivity index, as a reliable measure of sensitivity of LLMs towards intent-preserving variations in prompts such as spelling errors, prompt templates, and alterations in the wording.”
“While attempting to paraphrase the prompts in MMLU using GPT-3.5-Turbo,quite a few prompts have been flagged as either violent or biased, etc.Most of them were from the moral_scenarios split of MMLU.We made sure to remove these from our analyses.”
The paper relies on this without support.
The four factors (response diversity, response distribution entropy, semantic coherence, variance in confidence) are valid measures of prompt sensitivity.
“Figure 7 shows the correlation of POSIX with the four factors listed in Section 1 for a combination of all types of prompt variations in Alpaca, depicting the effectiveness of POSIX in successfully capturing the nuances of prompt sensitivity.”
“Figure 1: Correlation plots of ψ with each of the four factors described in Section 3.3 in the case of MMLU: (a) Response Diversity; (b) Response Distribution Entropy; (c) Semantic Coherence; (d) Variance in Confidence.”
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
Each contradiction between two passages listed here was confirmed by an independent check.
Mistral is not the only MMLU template exception
MinorThe paper says Mistral is the only case where the instruct version is not less sensitive to MMLU template variations. Table 1 also reports a slightly higher template POSIX for Llama-3-8b-chat (1.12) than for Llama-3-8b (1.106).
“We observe that chat or instruct versions of the models are generally less sensitive than the corresponding base models in the case of template variations on MMLU, with Mistral being the only exception.”
“Llama-3-8b 0.086 ±0.097 1.106 ±0.612”
Cites
The publisher hasn’t deposited this paper’s reference list.
Research works printed but not linked: 9
- Avia Efrat, Or Honovich, and Omer Levy. 2023. LMen- try: A language model benchmark of elementary language tasks. In Findings of the Association for Computational Linguistics: ACL 2023, pages 10476- 10501, Toronto, Canada. Association for Computa- tional Linguistics. · DOI
- Tianyu Gao, Adam Fisch, and Danqi Chen. 2021. Making pre-trained language models better few-shot learners. In Proceedings of the 59th Annual Meet- ing of the Association for Computational Linguistics and the 11th International Joint Conference on Natu- ral Language Processing (Volume 1: Long Papers), pages 3816-3830, Online. Association for Computa- tional Linguistics. · DOI · Paper page
- Jiasheng Gu, Hongyu Zhao, Hanzi Xu, Liangyu Nie, Hongyuan Mei, and Wenpeng Yin. 2023. Robustness of learning from task instructions. In Findings of the Association for Computational Linguistics: ACL 2023, pages 13935-13948, Toronto, Canada. Associ- ation for Computational Linguistics. · DOI
- Dan Hendrycks, Collin Burns, Steven Basart, Andy Zou, Mantas Mazeika, Dawn Song, and Jacob Stein- hardt. 2021. Measuring massive multitask language understanding. In 9th International Conference on Learning Representations, ICLR 2021, Virtual Event, Austria, May 3-7, 2021. OpenReview.net.
- Tom Kwiatkowski, Jennimaria Palomaki, Olivia Red- field, Michael Collins, Ankur Parikh, Chris Alberti, Danielle Epstein, Illia Polosukhin, Jacob Devlin, Ken- ton Lee, Kristina Toutanova, Llion Jones, Matthew Kelcey, Ming-Wei Chang, Andrew M. Dai, Jakob Uszkoreit, Quoc Le, and Slav Petrov. 2019. Natu- ral questions: A benchmark for question answering research. Transactions of the Association for Compu- tational Linguistics, 7:452-466. · DOI · Paper page
- Jiachang Liu, Dinghan Shen, Yizhe Zhang, Bill Dolan, Lawrence Carin, and Weizhu Chen. 2022. What makes good in-context examples for GPT-3? In Proceedings of Deep Learning Inside Out (DeeLIO 2022): The 3rd Workshop on Knowledge Extrac- tion and Integration for Deep Learning Architectures, pages 100-114, Dublin, Ireland and Online. Associa- tion for Computational Linguistics. · DOI · Paper page
- Laria Reynolds and Kyle McDonell. 2021. Prompt pro- gramming for large language models: Beyond the few-shot paradigm. In Extended Abstracts of the 2021 CHI Conference on Human Factors in Com- puting Systems, CHI EA '21, New York, NY, USA. Association for Computing Machinery. · DOI · Paper page
- Jiuding Sun, Chantal Shaib, and Byron C Wallace. 2024. Evaluating the zero-shot robustness of instruction- tuned language models. In The Twelfth International Conference on Learning Representations.
- PMLR.
Cited by
Sorted by citations
Khalafi, M. A., Safavi‐Naini, S. A. A., Salehi, A., Naderi, N., Alijanzadeh, D., Moghadam, P. K., Kavousi, K., Golestani, N., Shahrokh, S., Fallah, S., et al. (2025) · Scientific Reports · doi:10.1038/s41598-025-29566-2 · Cited by 5 · see citing works
VAP3: Variation-Aware Prompt Performance Prediction
Arabzadeh, N., & Ebrahim Bagheri, A. (2025) · International ACM SIGIR Conference on Research and Development in Information Retrieval (SIGIR) · doi:10.1145/3726302.3730264 · Cited by 3 · see citing works
Liu, T., McIntosh, T. R., Sušnjak, T., Watters, P., & Halgamuge, M. N. (2025) · ACM Transactions on Intelligent Systems and Technology · doi:10.1145/3757927 · Cited by 2 · see citing works
Yang, J., Yang, Z., Chengke, W., Guo, Y., Li, X., & Lin, J. (2025) · Complex & Intelligent Systems · doi:10.1007/s40747-025-02074-6 · Cited by 2 · see citing works
Enhancing recommender systems with LLM-extracted explicit features
Zhao, S., & Jiang, G. (2025) · Knowledge and Information Systems · doi:10.1007/s10115-025-02665-2 · Cited by 2 · see citing works
Turing Jest: Distributional Semantics and One‐Line Jokes
Trott, S., Walker, D. E., Taylor, S. M., & Seana Coulson, A. (2025) · Cognitive Science · doi:10.1111/cogs.70066 · Cited by 2 · see citing works
Kalinich, M., Luccarelli, J., Maria, J. P. S., Williams, G., Moss, F., & Torous, J. B. (2026) · medRxiv · doi:10.64898/2026.01.02.25343289 · Cited by 2 · see citing works
Zhang, Y., Liu, B., Pike, M., Wang, C., & Sun, X. S. (2025) · Journal of Advanced Transportation · doi:10.1155/atr/4874071 · Cited by 2 · see citing works
On the Effect of Instruction Tuning Loss on Generalization
Chatterjee, A., Renduchintala, H. S. V. N. S. K., Bhatia, S., & Chakraborty, T. (2025) · Transactions of the Association for Computational Linguistics · doi:10.1162/tacl.a.42 · Cited by 1 · see citing works
Self-citationHow Does Prompt Anchoring Affect Large Language Model Outputs?
Kim, E. (2026) · Publications · doi:10.3390/publications14030043 · Cited by 1 · see citing works
Prompt Fairness: Sub-group Disparities in LLMs
Zhong, M., Teku, N., & Tandon, R. (2025) · Asilomar Conference on Signals, Systems and Computers (ACSSC) · doi:10.1109/ieeeconf67917.2025.11443738 · Cited by 1 · see citing works
Wang, Y., Duan, X., Pan, X., & Geng, Y. (2025) · Physics of Life Reviews · doi:10.1016/j.plrev.2025.04.003
Okeukwu-Ogbonnaya, A., Amatapu, R., Bergtold, J. B., & Amariucai, G. T. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-13513-1_22 · Cited by 3 · see citing works
Prompt-with-Me: in-IDE Structured Prompt Management for LLM-Driven Software Engineering
Li, Z., Sergeyuk, A., & Izadi, M. (2025) · IEEE/ACM International Conference on Automated Software Engineering (ASE) · doi:10.1109/ase63991.2025.00276
CRECE: A Coarse-to-Fine Framework for Event Causality Extraction via Counterfactual Reranking
Yang, L., Wang, X., Zhao, D., et al. (2025) · International Conference on Big Data and Information Analytics (BigDIA) · doi:10.1109/bigdia68682.2025.11383282
Ouh, E. L., Tan, K. W., Lo, S. L., & Zhang, Y. (2026) · International Conference on Learning Analytics and Knowledge (LAK) · doi:10.1145/3785022.3785037
Exploratory Study on LLMs for Test Amplification in Solidity
Handenhoven, J. V., Vanhove, B., Beyazıt, M., Kılınççeker, O., & Demeyer, S. (2026) · IEEE International Conference on Software Analysis, Evolution and Reengineering - Companion (SANER-C) · doi:10.1109/saner-c67878.2026.00010
Enhancing the Reliability of Affect Recognition in Social Platforms with Conformal Prediction
Roohi, S., Skarbez, R., & Nguyen, H. D. (2026) · Intelligent Computing · doi:10.34133/icomputing.0527
Fostering Organizational Collective Intelligence From Human-Generative AI Interaction
Hino, S., Nakata, T., Chen, S., Saiki, S., & Nakamura, M. (2026) · International Journal of Software Innovation · doi:10.4018/ijsi.411903
Ju, J., Seo, J., Jang, J., Lee, D., & Park, H. (2026) · IEEE Pacific Visualization Conference (PacificVis) · doi:10.1109/pacificvis68791.2026.00019
Binary Spam Detection Using GRPO and LoRA on Qwen 2.5-3B-Instruct
Ali, M. E., Diwan, A., & Jadeja, R. (2026) · Arabian Journal for Science and Engineering · doi:10.1007/s13369-026-11412-w
Alshareef, R., Meccawy, M., & Samra, H. E. (2026) · International Conference on Information and Education Technology (ICIET) · doi:10.1109/iciet69664.2026.11561677
Fianko, S. K., Addo, A., Agyemang, K., Gbadago, F. Y., Adjaye-Gyamfi, O., Quartey, O., Agropah, F., Larttey, R., Amoah, N., & Nooni, I. K. (2026) · Discover Education · doi:10.1007/s44217-026-01837-8
Grenzebach, J., & Radüntz, T. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-29596-5_7
From Screen Narratives to Prompt-Conditioned AI Myths: An Exploratory Structuralist Comparison
Cachero, C. J. N. (2026) · Dialogica · doi:10.5709/dialogica-02.s1.2026-03
Behavior of Generative AI While Interpreting Risk-Sensitive Forecasts
Jana, A. K., & Kachireddy, L. P. (2026) · International Conference on Electrical, Computer and Energy Technologies (ICECET) · doi:10.1109/icecet65726.2026.11632421
Ray, K., & Tripathi, R. (2026) · IEEE Guwahati Subsection Conference (GCON) · doi:10.1109/gcon69192.2026.11648277
Coşkun, S., Karaman, F. N., Uytun, H. A., & Akar, G. C. (2026) · Healthcare · doi:10.3390/healthcare14172797
Bridging the Offline-to-Online Gap in Cooperative Behavior Cloning with Distilled Intent Modeling
Wang, H., Rong, Y., Wang, Z., et al. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-37670-1_15
Координирано използване на големи езикови модели в академичната работа
Marinov, V. (2026) · Media and Language Journal · doi:10.58894/dvzte852
Choi, Y.-M., Hur, S., & Kim, S.-H. (2026) · Journal of Digital Contents Society · doi:10.9728/dcs.2026.27.9.2573
From Interaction Topology to Realized Context: Diagnosing Exposure in LLM-Agent Social Simulation
Xu, Y.-W., Han, X.-L., & Ma, C.-H. (2026) · Proceedings of the ACM Turing Award Celebration Conference - China 2026 · doi:10.1145/3833142.3833202
Author metadata affects Large Language Model scores in scientific peer review
Rospocher, M. (2026) · Discover Artificial Intelligence · doi:10.1007/s44163-026-02268-y
- Authors
- Chatterjee, A., Renduchintala, H. S. V. N. S. K., Bhatia, S., & Chakraborty, T.
- Affiliations
- Indian Institute of Technology Delhi (IN)
- Venue
- Findings of the Association for Computational Linguistics: EMNLP 2024
- Published
- 2024
- Pages
- 14550-14565
- OpenAlex
- W4404781496
- Cited by
- 34
- References
- 0
- Citations by year
- 2026: 22 · 2025: 12
- FWCI
- 10.34
- Type
- conference paper
- Language
- en
- Open access
- gold
- doi.org
- Licence
- cc-by
- Locations
- arXiv (Cornell University) (submittedVersion, cc-by)
- arXiv (Cornell University) (cc-by)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Topic Modeling
- Physical Sciences › Computer Science › Artificial Intelligence › Natural Language Processing Techniques
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Keywords
- prompt sensitivity, large language models, prompt engineering, prompt templates, few-shot learning, instruction tuning, open-ended generation, multiple-choice tasks, paraphrase, LLM evaluation metrics
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Claims read by deepseek-v4.1-flash under definition version 3 (extract-v3) on 2026-10-23.
Classified by jev-1.13-20260917 (gold-guideline-v0.2) on 2026-10-23.
Cited sources are checked by gpt-6-sol.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review