IatroBench: A Pre-Registered Benchmark of Clinical Omission in Language Models
cs.AI, cs.CL, cs.CY, cs.LG
Submitted: 2026-04-09
Updated: 2026-09-30
Comments: 28 pages, 3 figures, 15 tables. Pre-registered on OSF (DOI: https://doi.org/10.17605/OSF.IO/G6VMZ). Code and derived results: https://github.com/davidgringras/iatrobench. v6 completes the revision begun in v5: physician validation reported against the primary judge; pair-by-model cluster tests added; examples, rubrics and reference excerpts moved to ancillary files; Figure 1 redrawn
Code: https://github.com/davidgringras/iatrobench
License: http://creativecommons.org/licenses/by/4.0/
The gist: We introduce IatroBench, a benchmark with two axes of harm (commission and omission), comprising 60 pre-registered clinical scenarios, tested on 6 models.
Terminology
Abstract
We introduce IatroBench, a benchmark with two axes of harm (commission and omission), comprising 60 pre-registered clinical scenarios, tested on 6 models. Matched scenarios are framed as a patient query and a doctor consultation, differing in register and request (with the implication of supervision by a treating physician in the latter). We analyse the responses of five different models and find that all share more information in the doctor framing than the patient framing (which we call "framing-contingent withholding"). For example, a model with strong safety training provides a benzodiazepine tapering schedule to a doctor, but does not provide this schedule to a patient who requests it. We use Claude Opus 4.6 for structured evaluation, and Gemini 3 Flash as our primary judge, to score model responses against a physician's rubrics. Our primary judge agrees with physicians' omission scores about as well as physicians agree with each other. We find a decoupling gap of +0.38 (p = 0.003) on average across models. With our primary judge (checked by physicians) the decoupling gap is +0.22 (95% CI 0.10-0.36, p = 0.0014). We find three distinct patterns underlying this gap, exemplified by each of the models below. In the doctor framing, Claude Opus demonstrates that it has the information, and withholds it in the patient framing. Llama 4 performs poorly in both framings, meaning the decoupling gap cannot distinguish between withholding and incompetence. Finally, GPT-5.2 (excluded from this analysis) failed to return text for 33.2% of doctor responses, compared to 0% of layperson responses. In 86.6% of cases that we score (through our structured evaluation) as having omission harms, our primary judge (Gemini 3 Flash) scores zero omission harm. Because our scenarios are designed to pit safety against helpfulness, these statistics hold only for this distribution.
Sources
- HealthBench: Evaluating Large Language Models Towards Improved Human Health
- Constitutional AI: Harmlessness from AI Feedback
- FalseReject: A Resource for Improving Contextual Safety and Mitigating Over-Refusals in LLMs via Structured Reasoning
- OR-Bench: An Over-Refusal Benchmark for Large Language Models
- Safe RLHF: Safe Reinforcement Learning from Human Feedback
- Length-Controlled AlpacaEval: A Simple Way to Debias Automatic Evaluators
- Scaling Laws for Reward Model Overoptimization
- WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs
- Categorizing Variants of Goodhart's Law
- HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal
- From Hard Refusals to Safe-Completions: Toward Output-Centric Safety Training
- Training language models to follow instructions with human feedback
- Discovering Language Model Behaviors with Model-Written Evaluations
- Safety Alignment Should Be Made More Than Just a Few Tokens Deep
- XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Models
- Towards Understanding Sycophancy in Language Models
- A Novel Evaluation Benchmark for Medical LLMs: Illuminating Safety and Effectiveness in Clinical Domains
- Jailbroken: How Does LLM Safety Training Fail?
- Style Over Substance: Evaluation Biases for Large Language Models
- SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal
Related papers
- MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
- Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
- Agents' Last Exam
- The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
- MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
- Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems