Who Flips? Self- and Cross-Model Counterarguments Reveal Answer Instability in LLMs
cs.CL
Submitted: 2026-06-14
Updated: 2026-08-30
Comments: EMNLP Findings 2026
Code: https://github.com/nafisenik/WhoFlips
License: http://creativecommons.org/licenses/by/4.0/
The gist: Standard accuracy benchmarks evaluate whether large language models (LLMs) reach correct answers.
Terminology
Abstract
Standard accuracy benchmarks evaluate whether large language models (LLMs) reach correct answers. However, they do not test whether models maintain that answer when challenged by a plausible counter-argument. We introduce a controlled protocol for evaluating answer stability: after a model answers a multiple-choice question correctly, we challenge the model's answer with a coherent argument for an incorrect option and measure whether the model flips. The setup a) isolates argumentative content from overt social pressure and b) varies argument length, self-attribution, and cross-model source. Across seven frontier models and 57 MMLU subjects, flip rates range from 17.5% to 97.3%, revealing large differences in stability that are not captured by accuracy metrics alone. We find that self-attribution consistently increases flip rates (mean 7.1pp, up to 18.7pp). Furthermore, pooling wrong-answer arguments across models and selecting the most effective one per question yields stronger adversarial challenges than relying on any single source model. From this cross-model pool, we construct MaxFlip, a curated benchmark that amplifies answer flips by up to 23.6pp over self-generated challenges. We release the protocol, challenge records, and MaxFlip to support stability evaluation alongside standard accuracy benchmarks. Materials are available at https://github.com/nafisenik/WhoFlips, https://hf.co/datasets/nafisehNik/WhoFlips.
Sources
- When Persuasion Overrides Truth in Multi-Agent LLM Debates: Introducing a Confidence-Weighted Persuasion Override Rate (CW-POR)
- BASIL: Bayesian Assessment of Sycophancy in LLMs
- Vulnerability of LLMs' Stated Beliefs? LLMs Belief Resistance Check Through Strategic Persuasive Conversation Interventions
- Consistency Training Helps Stop Sycophancy and Jailbreaks
- Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Models
- Ask don't tell: Reducing sycophancy in large language models
- The Llama 3 Herd of Models
- Are You Sure? Challenging LLMs Leads to Performance Drops in The FlipFlop Experiment
- Consistency of Large Reasoning Models Under Multi-Turn Attacks
- Qwen3.5-Omni Technical Report
- Existing LLMs Are Not Self-Consistent For Simple Tasks
- Large Language Models have Intrinsic Self-Correction Ability
- Certainty robustness: Evaluating LLM stability under self-challenging prompts
- TRUTH DECAY: Quantifying Multi-Turn Sycophancy in Language Models
- Calibration Collapse Under Sycophancy Fine-Tuning: How Reward Hacking Breaks Uncertainty Quantification in LLMs
- Artificial Intelligence Index Report 2025
- How RLHF Amplifies Sycophancy
- Pressure, What Pressure? Sycophancy Disentanglement in Language Models via Reward Decomposition
- OpenAI GPT-5 System Card
- Sycophancy Is Not One Thing: Causal Separation of Sycophantic Behaviors in LLMs
Related papers
- Exploring Solution Divergence and Its Effect on Large Language Model Problem Solving
- Ishigaki-IDS-Bench: A Benchmark for Generating Information Delivery Specification from BIM Information Requirements
- Subliminal Steering: Stronger Encoding of Hidden Signals
- MedStruct-S: A Benchmark for Key Discovery, Key-Conditioned QA and Semi-Structured Extraction from OCR Clinical Reports
- The End of Transformers? On Challenging Attention and the Rise of Sub-Quadratic Architectures
- Untangling the Mechanisms of Misleading Context in Medical Question Answering