Skip to content

Build1 publisher3 min readPublished

A fifteen-line abstention rule removed more correct answers than confident wrong ones

Five frontier models ran a 295-item failure corpus bare and then wrapped. Across the four that accepted the wrapper, confident errors fell from 25.8% to 7.4% and correctness fell further, from 43.9% to 21.3%.

The Engineer · Build desk

Illustration accompanying A fifteen-line abstention rule removed more correct answers than confident wrong ones

What happened

  • Five current frontier models answered a corpus of documented-failure questions twice each, once bare and once with retrieved evidence attached and a rule permitting the answer "I don't know".
  • Across the four models that accepted the treatment, confident wrong answers fell from 25.8% to 7.4%, while correctness fell from 43.9% to 21.3% on the same 280 graded factuality items.
  • On a separate probe set of 15 court-confirmed fabricated legal citations, DeepSeek affirmed nonexistent cases as real 12 times, against 3 of 15 for the other models.

Compiled by The EngineerSomething wrong?How this is made

Why it matters

  • cost The honesty was paid for in answers: 1.23 correct responses lost per confident wrong one removed, and the person who needed the answer absorbs it as an abstention.
  • constraint The copyable layer cannot search beyond the supplied corpus, so the ceiling on what it can answer is whatever your retrieval corpus already holds.
  • decision Three outcomes across five models means a rollout needs a paired bare-versus-wrapped arm per model, plus a plan for the vendor that rejects the prompt shape entirely.
  • contradiction A team choosing on published summarization-faithfulness rankings would have picked the model that kept fabricating with the evidence sitting in its prompt.

Grading is mechanical. A confabulation here is a non-abstained answer the grader marked wrong, and the post claims no intent [4]. The layer itself is fifteen lines, deliberately thin, cut from a larger verification system the authors say they run in production on themselves [2].

Across the four arms that ran it, confident wrong answers fell 18.4 points while correct answers fell 22.6 points [1][2]. That is 1.23 correct answers surrendered for every confident wrong answer removed [3]. If right and wrong are the grader's only two non-abstention verdicts, the share of items those four models were willing to answer at all went from 69.7% to 28.7% [4].

The correctness loss comes from retrieval. The layer retrieved from Wikipedia, which often did not contain the answer, and the rule then correctly drove abstention [6]. The authors state it plainly: the wrapper's accuracy is bounded by retrieval quality [8]. This copyable layer cannot go looking for more evidence, which the post says is deliberate, and the larger system it was cut from does that half of the job [7]. For the honesty delta to arrive without the correctness loss, your retrieval has to cover your questions better than Wikipedia covered theirs.

DeepSeek resisted. Wrapped, it moved from 33% to 24%, nine points, while three of the others collapsed to near-zero [9][5][20]. On Vectara's summarization-faithfulness leaderboard, the post notes, those same models order the other way, with DeepSeek mid-pack and ahead of Grok and Gemini [11]. A contemporaneous paper, LegalCiteBench, found that abstention-prompting alone did not fix legal-citation correctness [12].

Anyone shipping a wrapper has a harder case with Claude Fable 5. Every one of the 295 wrapped prompts returned stop_reason: refusal while every bare prompt answered normally [13], and a fresh two-item retest days later reproduced it [14]. A reworded prose version of the same instructions answered fine, which the authors read as evidence that the prompt's structured shape is what triggers the refusal; one intermediate probe was recorded answering on one occasion, so they stop short of calling the trigger diagnosed [15]. A team shipping this layer has to plan for a model that refuses the wrapped prompt outright.

For these numbers to transfer, a team's grader would have to mark answers the way this one does, and its question mix would have to look like a corpus assembled from documented failures. The post is explicit that the bare rates are high by construction, that they say nothing about these models on ordinary traffic, and that the finding is the bare-to-wrapped delta on identical items [17]. The grader is the authors' own rather than any lab's official scorer, and every number comes from one sampled response per item [16]. That grounding plus abstention reduces confabulation was already established by Stanford's Large Legal Fictions in 2024 and the RAG-faithfulness literature [18].

What to watch

  • The wider-retrieval layers the authors registered as running next: whether correctness climbs back toward 43.9% while confabulation stays near 7.4%.
  • Whether the Claude Fable 5 refusal survives the next model version, or gets patched. That answer decides whether wrappers need per-vendor prompt formatting.
  • An independent rerun with more than one sampled response per item, since every figure here is a single draw scored by the authors' own grader.
Loading claim ledger
Loading source directory links
Loading share composer
Loading topic controls
Loading related stories