Urgent.News

What's breaking now, across thousands of outlets.

Tech

The Same 11 Prompts, Three Copies, 48 Hours: A Free Model Regression Battery

The same model read the same prompt three times in one hour and proposed three different action plans, each one delivered with the same tone of confidence. That was the moment I stopped treating the free model like a pure function and started reading it like a sensor: the signal exists, but only the statistics are worth trusting. I wanted to know whether my extraction code could survive a 48-hour…

The same prompt was read three times by the free model in one hour, resulting in three different action plans. The model's output was treated like a sensor, with only the statistics being trusted. The study aimed to determine whether the extraction code could handle a 48-hour regression run when the upstream model failed to maintain a single version of the truth.

To do this, an 11-prompt battery was created, ranging from single-key JSON requests to multi-paragraph summaries. The code then ran three copies of the model for each prompt, recording the raw output and refusing to tune anything mid-flight. The diversity ratio was used to measure the stability of the output, with values near 0.33 indicating agreement, values near 1.0 indicating noise, and everything in between being too small a sample to interpret.

The study found that short prompts were stable for a while but then flipped an entire key name, while long prompts showed high diversity from the first run and never improved. The flakiest part was not the model, but the assertion layer, as the output contract was defined too narrowly. The diversity ratio was only useful at the extremes, and a score of 0.33 meant agreement, while a score of 1.0 meant noise.

The study concluded that freezing the prompt list fiercely, keeping three cheap assertions, storing raw text and hashing it to JSONL, and dropping any prompt that showed 1.0 twice in a row were crucial steps to ensure stability. The study was performed using MonkeyCode's free model access and hosted on its free server option, as the author did not want to keep their laptop awake for two nights.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

A calendar library returned the same answer for every year — and my tests agreed with it

I build a Korean saju (BaZi) service. The whole pitch is that the numbers are computed deterministically and only the prose is written by a model, so the calculation layer is the one part that is not…

  • Calendar library returned same answer for every year
  • Independent astronomical computation provided eleven different results
  • Test suite passed all tests despite incorrect library output

First Action After Compromise: Blind the Audit

✓ Human-authored analysis; AI used for formatting and proofreading. If you're an attacker who's just landed in an AWS account, the most expensive thing about your future is detection.

  • Attackers disable audit trail to evade detection
  • Command used: aws cloudtrail stop-logging
  • Blind window can last several days

What 'Revocable' Actually Means at the Contract Level

If you've ever called approve() on an ERC-20 token and then moved on with your life, you've already brushed up against the thing this post is about: an approval is not a setting inside some app, it's…

  • Revocation removes user authorization to spend tokens.
  • Revocation involves a transaction setting allowance to zero.
  • Verifying allowance on chain prevents stale-permissive issues.

More from Tuesday 1 September →