Brittlebench: Quantifying LLM robustness via prompt sensitivity
cs.LG, cs.AI
Submitted: 2026-02-27
Updated: 2026-10-18
Journal ref: Annual Conference on Neural Information Processing Systems (NeurIPS 2026)
License: http://creativecommons.org/licenses/by-sa/4.0/
The gist: Existing evaluation methods largely rely on clean, static benchmarks, which can overestimate true model performance by failing to capture the noise and variability inherent in real-world user inputs.
Terminology
Abstract
Existing evaluation methods largely rely on clean, static benchmarks, which can overestimate true model performance by failing to capture the noise and variability inherent in real-world user inputs. This is especially true for language models, which can face human-generated text queries containing mistakes, typos, or alternative ways of phrasing the same question. In this work, we introduce a theoretical framework for quantifying model sensitivity to prompt variants, or brittleness, that can enable us to disentangle data-induced difficulty from prompt-related variability. Using this framework, we design a novel evaluation pipeline, Brittlebench, to holistically evaluate the sensitivity of frontier models. We apply semantics-preserving perturbations to a suite of popular benchmarks, and observe model performance to degrade as much as 12%. However, these perturbations do not affect all models equally: even a single perturbation alters the relative ranking of models in 63% of cases, impacting conclusions about comparative model performance. Decomposing the total variance of both state-of-the-art open-weight and commercial models, we find that semantics-preserving input perturbations can account for up to half of the performance variance for a given model. Brittlebench highlights the need for more robust evaluations and models, and allows us to systematically understand model brittleness.
Sources
- GPT-4 Technical Report
- Enhancing LLM Robustness to Perturbed Instructions: An Empirical Study
- Measuring what Matters: Construct Validity in Large Language Model Benchmarks
- Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challenge
- Rephrase and Respond: Let Large Language Models Ask Better Questions for Themselves
- The Llama 3 Herd of Models
- DOVE: A Large-Scale Multi-Dimensional Predictions Dataset Towards Meaningful LLM Evaluation
- LLM Knowledge is Brittle: Truthfulness Representations Rely on Superficial Resemblance
- LLM-Rubric: A Multidimensional, Calibrated Approach to Automated Evaluation of Natural Language Texts
- Large Language Models Understand and Can be Enhanced by Emotional Stimuli
- LogiQA: A Challenge Dataset for Machine Reading Comprehension with Logical Reasoning
- Mind Your Step (by Step): Chain-of-Thought can Reduce Performance on Tasks where Thinking Makes Humans Worse
- Play Favorites: A Statistical Method to Measure Self-Bias in LLM-as-a-Judge
- Measuring all the noises of LLM Evals
- reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputs
- Qwen3 Technical Report
- Qwen3 Embedding: Advancing Text Embedding and Reranking Through Foundation Models
Related papers
- Polynomial-Augmented Neural Networks (PANNs) with Weak Orthogonality Constraints for Enhanced Function and PDE Approximation
- AIRL-S: Unifying Reinforcement Learning and Search-Based Test-Time Scaling via Adversarial Inverse Reinforcement Learning
- Transformers as Bayesian In-Context Experimenters: Smoothness-Adaptive Efficient ATE Estimation
- Convergence issues in Relational Concept Analysis based on AOC-posets
- Beliefs Beyond Posteriors: The Predictive Cost of ELBO Binding
- Understanding Diffusion Models via Ratio-Based Function Approximation with SignReLU Networks