A new arXiv preprint models LLM detectors as behavioral interventions and shows that imperfect detectors can produce counterintuitive outcomes: users may increase LLM usage and produce lower-quality outputs in response to detection pressure. The authors develop a stylized game-theoretic model of strategic user behavior and empirically validate a predicted 'rise-then-fall' pattern in detectable word frequencies using arXiv abstract data. The work identifies systematic failure modes for LLM detection policies deployed in academic, professional, or platform contexts.
A new arXiv paper evaluates whether LLMs can recognize that their own prior responses were elicited by adversarial prefill attacks, testing ten open-weight models (3B–70B) across four safety benchmarks. Models claim intent on prefilled responses only 27.3% of the time on average, and introspective signal is largely mediated by refusal-related reasoning. Three LoRA fine-tuning methods (SFT, GRPO, DPO) improve the intention-probe gap but counterintuitively raise attack success rates on most models, suggesting partial and fragile mitigation. The findings raise concerns about the reliability of LLM self-reports in safety-critical contexts.
A preprint from arXiv demonstrates that an LLM pipeline can automate reproducibility assessments of published social and behavioral science studies, recovering original effect sizes in 41% of cases (vs. 34% for human reanalysts) and reaching the same qualitative conclusion in 96% of cases (vs. 74% for humans). The study evaluated 76 published studies with predefined claims. The results suggest LLMs could serve as a scalable tool for systematic auditing of empirical research, addressing the resource-intensive nature of traditional reproducibility efforts.
A new arXiv paper argues that standard LLM benchmarks overstate model capabilities by focusing on average performance on training-data-adjacent tasks while ignoring response variance and error magnitude. The authors introduce a novel benchmark requiring frontier LLMs to write code for data analysis tasks, comparing results against human expert submissions. Human experts outperformed the frontier LLM on average across multiple metrics and showed lower performance variability. The findings challenge the prevailing narrative that LLMs perform at human-expert level on knowledge economy tasks.
A new arXiv paper evaluates 8 state-of-the-art LLMs on discrete probability problems using two datasets: standard exercises (average accuracy 0.96) and counterintuitive exercises designed to trigger heuristic reasoning (average accuracy 0.59). The authors document token bias causing 20%+ performance drops when canonical problem formulations are disguised, and up to 34% degradation when misleading suggestions are embedded in prompts. The findings argue that current LLMs are not genuine probabilistic reasoners despite their success on advanced math benchmarks.
A new arXiv paper introduces a framework for testing whether LLM outputs satisfy the law of total probability — specifically, whether prior-weighted conditional estimates over subpopulations aggregate correctly into population-level marginals. Using binary tree partitions and persona prompting across frontier models, the authors find widespread violations of this self-consistency principle. A key finding, termed the 'macro fallacy,' is that estimates reconstructed from fine-grained subpopulation prompts are often more accurate than direct population-level estimates, suggesting models hold relevant subpopulation knowledge but fail to propagate it upward. The work proposes statistical self-consistency as a reference-free, unsaturated evaluation criterion for LLMs.
A blog post explores using classical machine learning techniques (as opposed to neural approaches) to detect LLM-generated text. The post attracted notable Hacker News engagement with 168 points and 116 comments, suggesting practical interest from the community. LLM-generated text detection is an active area relevant to academic integrity, content moderation, and AI safety.
Researchers investigate whether LLMs can distill solution traces into reusable natural-language abstractions (strategies, reminders) and apply them to future problems, analogous to human experiential learning. Using the MATH training set, abstractions are extracted by either a stronger teacher model or the LLMs themselves into a retrievable library, then applied via inference-time retrieval or RL with abstraction-augmented prompts. Both modes improve performance on mathematical and logical reasoning benchmarks, with self-extracted abstractions matching teacher-extracted ones. The framework generalizes across datasets and models, suggesting a promising direction for continual self-improvement in LLMs.
A new arXiv paper presents the first systematic study of cognitive heuristics — halo effect, framing effect, and anchoring — in LLM-based code vulnerability detection. Evaluating eight LLMs across three programming languages, the authors find all models susceptible, with framing causing the largest average shift (33.2%), followed by anchoring (23.5%) and halo (18.4%). Critically, the paper demonstrates a proof-of-concept black-box attack that suppresses up to 97% of previously detected vulnerabilities by manipulating surrounding context without changing the code itself. The findings suggest cognitive susceptibility is a systematic and exploitable property of LLM security tooling.