{"id":"https://openalex.org/W7161782947","doi":"https://doi.org/10.48550/arxiv.2605.19377","title":"The Evaluation Game: Beyond Static LLM Benchmarking","display_name":"The Evaluation Game: Beyond Static LLM Benchmarking","publication_year":2026,"publication_date":"2026-05-19","ids":{"openalex":"https://openalex.org/W7161782947","doi":"https://doi.org/10.48550/arxiv.2605.19377"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.19377","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.19377","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.19377","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136507443","display_name":"Paul Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Paul","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136507374","display_name":"Jade Garcia-Bourr\u00e9e","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Garcia-Bourr\u00e9e, Jade","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031849486","display_name":"Anne-Marie Kermarrec","orcid":"https://orcid.org/0000-0001-8187-724X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kermarrec, Anne-Marie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136567591","display_name":"Vincent Corruble","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Corruble, Vincent","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7092999815940857,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7092999815940857,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.05790000036358833,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.057500001043081284,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6276000142097473},{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.569599986076355},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.512499988079071},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4702000021934509},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.45210000872612},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3783000111579895},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.35580000281333923},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.34769999980926514}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6891999840736389},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6276000142097473},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.569599986076355},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.512499988079071},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4702000021934509},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.45210000872612},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4339999854564667},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4226999878883362},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3783000111579895},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.35580000281333923},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.34769999980926514},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.33730000257492065},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33550000190734863},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.33480000495910645},{"id":"https://openalex.org/C2777027219","wikidata":"https://www.wikidata.org/wiki/Q1284190","display_name":"Constant (computer programming)","level":2,"score":0.3052000105381012},{"id":"https://openalex.org/C2985583900","wikidata":"https://www.wikidata.org/wiki/Q722617","display_name":"Formal description","level":2,"score":0.30390000343322754},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.30090001225471497},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2978000044822693},{"id":"https://openalex.org/C2781311116","wikidata":"https://www.wikidata.org/wiki/Q83306","display_name":"Group (periodic table)","level":2,"score":0.27379998564720154},{"id":"https://openalex.org/C2780463512","wikidata":"https://www.wikidata.org/wiki/Q15122700","display_name":"Trainer","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C2776543023","wikidata":"https://www.wikidata.org/wiki/Q2147046","display_name":"Rework","level":2,"score":0.2531000077724457},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.25130000710487366}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.19377","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.19377","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.19377","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.19377","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.6429530382156372,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"As":[0],"jailbreaks,":[1],"adversarially":[2],"crafted":[3],"inputs":[4],"that":[5,77,157,210],"bypass":[6],"safety":[7],"constraints,":[8],"continue":[9],"to":[10,82,177],"be":[11],"discovered":[12],"in":[13,41],"Large":[14],"Language":[15],"Models,":[16],"practitioners":[17],"increasingly":[18],"rely":[19],"on":[20,104,159,169],"fine-tuning":[21,33,158,179],"as":[22,58],"a":[23,38,54,59,74,110,116,190,194,216,220],"defensive":[24],"strategy.":[25],"Yet":[26],"the":[27,43,49,69,92,105,113,140,143,175,178,184,203],"theoretical":[28],"foundations":[29],"underlying":[30],"this":[31],"robustness":[32],"remain":[34],"underexplored.":[35],"We":[36,132],"introduce":[37],"game-theoretic":[39],"framework":[40,182],"which":[42],"interaction":[44],"between":[45],"an":[46,200],"evaluator":[47,114],"(auditing":[48],"model":[50,145],"for":[51,120,142],"jailbreaks)":[52],"and":[53,80,151,207],"trainer":[55],"is":[56,68,91,192],"formalized":[57],"two-player":[60],"game.":[61],"A":[62],"key":[63],"feature":[64],"of":[65,71,139,187,197],"our":[66],"approach":[67],"use":[70],"group":[72,205],"actions,":[73],"mathematical":[75],"structure":[76],"captures":[78],"symmetries":[79],"transformations,":[81],"formally":[83],"represent":[84],"data":[85],"augmentation.":[86],"The":[87],"simplest":[88],"non-trivial":[89],"instance":[90],"circle":[93],"with":[94,166,174],"cyclic":[95],"translation":[96],"groups,":[97],"where":[98],"we":[99,147,153],"exhibit":[100],"various":[101],"regimes":[102],"depending":[103],"trainer's":[106],"generalization":[107],"range.":[108],"Below":[109],"critical":[111],"threshold,":[112],"maintains":[115],"constant":[117],"miss":[118],"ratio":[119],"linearly":[121],"many":[122],"rounds,":[123],"whereas":[124],"other":[125],"settings":[126],"can":[127],"yield":[128],"very":[129],"different":[130],"behaviors.":[131],"further":[133],"provide":[134],"empirical":[135],"evidence":[136,156],"supporting":[137],"locality-dependence":[138],"model:":[141],"three":[144],"families":[146],"tested":[148],"(Llama,":[149],"Qwen":[150],"Mistral),":[152],"have":[154],"significant":[155],"adversarial":[160,188],"prompts":[161,198],"induces":[162],"only":[163],"local":[164],"generalization,":[165],"refusal":[167],"rates":[168],"test":[170],"examples":[171],"highly":[172],"correlated":[173],"distance":[176],"prompts.":[180],"Our":[181],"recasts":[183],"central":[185],"object":[186],"evaluation:":[189],"benchmark":[191],"not":[193],"static":[195],"set":[196],"but":[199],"orbit":[201],"under":[202],"evaluator's":[204],"action,":[206],"audit":[208],"protocols":[209],"ignore":[211],"trainer-side":[212],"adaptation":[213],"cannot":[214],"distinguish":[215],"genuine":[217],"fix":[218],"from":[219],"memorized":[221],"patch.":[222]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-21T00:00:00"}