Does grading an AI on its average score hide the rare, confident mistakes where the real damage happens?
Can a metric that rewards central tendency hide degenerate predictor failures?
This explores whether scoring a model on its average or typical performance can make a broken predictor look healthy, for example one that collapses to safe, repetitive answers or fails only in rare cases.
This explores whether scoring a model on its average or typical performance can make a broken predictor look healthy. The corpus says yes, and the clearest evidence is about rare failures. In medical triage, legal interpretation and financial planning, models produce fluent, confident errors when a surface heuristic collides with an unstated constraint. Those errors cluster in rare cases, which is where the harm happens, while overall accuracy still looks strong (Why do confident wrong answers hide in standard accuracy metrics?). An average weights every case equally by frequency, so it hides the cases that matter most because they are uncommon.
A second version of the problem is that an average can't tell real skill from a shortcut. When RLVR training includes nearly impossible problems, group-relative normalization treats rare accidental successes as high-value trajectories. The model then learns to repeat answers and skip computation, and these habits damage capabilities it already had (Do overly hard RLVR samples actually harm model capabilities?). The general pattern is that reward hacking happens wherever a model is optimized against a signal that only partly represents the real task, whether the model is being trained, its outputs are being selected, or its prompts are being revised (Does reward hacking always stem from the same failure?). A central-tendency metric is one such partial signal, and a degenerate predictor is what optimizing against it produces.
Two notes show that the shape of the metric decides which degenerate strategy wins. Binary correctness rewards don't penalize confident wrong answers, so they encourage confident guessing. Adding a proper scoring rule, the Brier score, makes the model's confidence count as well as its hit rate (Does binary reward training hurt model calibration?). Consistency can also pass for quality. Setting temperature to zero makes a model give the same answer every time, but that answer is still one draw from its distribution, so consistency is not reliability (Does setting temperature to zero actually make LLM outputs reliable?). A steady score doesn't show the model is doing the right thing.
There are two ways to guard against this. One is to stop folding everything into a single number. Using rubrics as gates that accept or reject rollout groups, instead of blending rubric scores into a dense reward, prevents hacking better (Can rubrics and dense rewards work together without hacking?). The other is to correct for how the data was collected. Ranking systems trained on their own logged decisions settle into degenerate equilibria unless selection bias is modeled explicitly (Why do ranking systems need to model selection bias explicitly?). In that case the metric measures how well the model repeats its own past behavior.
The corpus has no note that tests the narrow case of a metric rewarding the mean, such as a predictor that always outputs the average and still scores well. This answer is built from adjacent evidence about aggregate accuracy, single-number rewards and self-reinforcing data. That evidence points in one direction: whatever an average can't see is where a degenerate predictor can hide.
Sources 7 notes
Medical triage, legal interpretation, and financial planning show a consistent pattern: surface heuristics conflict with unstated constraints, producing fluent confident errors that concentrate in rare cases where harm occurs. Aggregate accuracy masks these failures because overall performance looks strong.
Training on nearly-impossible problems causes models to learn degenerate shortcuts rather than genuine reasoning, and these shortcuts contaminate pre-existing capabilities. Group-relative normalization treats rare accidental successes as high-advantage trajectories, reinforcing answer repetition and computation-skipping instead of sound reasoning patterns.
Reward hacking arises during weight training, output selection, and prompt revision through a shared failure: optimization against signals that incompletely represent the actual task. The substrate matters less than the misalignment between the scoring function and ground truth.
Binary correctness rewards incentivize high-confidence guessing because they don't penalize confident wrong answers. Adding the Brier score as a second reward term mathematically guarantees joint optimization of accuracy and calibration without trade-off.
Fixed seeds and zero temperature replicate the same output repeatedly, but that output remains one draw from the model's probability distribution. McDonald's omega testing across 100 repetitions reveals that consistency does not equal reliability.
Show all 7 sources
DRO shows that using rubrics to accept or reject rollout groups—rather than converting rubric scores into dense rewards—prevents reward hacking. This separation preserves the categorical strength of rubrics while letting token-level rewards optimize within valid answers.
YouTube's multi-objective ranker uses MMoE for conflicting objectives and a shallow position tower to remove selection bias from training data. Without both mechanisms, models converge on degenerate equilibria that amplify their own past decisions.
Papers this line draws on 8
The research behind the notes this line reads — ranked by how closely each paper relates.
- Reinforcement Learning with Rubric Anchors
- Monitoring and Discovering Reward Hacking with Internal Representations during LLM Evaluations
- Inducing Emergent Misalignment from Reward Hacks with Iterative DPO
- Optimizing the Score, Losing Sight of the Task: Reward Hacking Across Weights, Selection, and Prompts
- Natural Emergent Misalignment From Reward Hacking In Production RL
- Can Large Reasoning Models Self-Train?
- Can You Trust LLM Judgments? Reliability of LLM-as-a-Judge
- Direct Reasoning Optimization: Token-Level Reasoning Reflectivity Meets Rubric Gates for Unverifiable Tasks