Can a hotel ever see where it ranks in an AI travel assistant's shortlist, or push back on that ranking?
Can hotels observe or contest their position in LLM-generated candidate lists?
This explores whether a hotel can see where it lands in the shortlist an AI travel assistant considers, and whether it can do anything about that placement, given that list order alone can sway which hotel the assistant recommends.
This explores whether hotels can see, or push back on, where they sit in the candidate list an AI travel assistant works from. The short answer from the corpus is no, and that is the problem. A randomized audit of twelve LLM travel assistants held every quality attribute fixed and moved only a hotel's position in the list. Position alone changed which hotel got picked, and the effect was worth about twelve dollars a night, comparable to real reputation signals Does list order alone shift which hotel an LLM recommends?. The authors call it a content-free lever: nothing about the hotel causes it, and the hotel has no window into it. The order is set upstream by whatever system collects the candidates, often a retrieval or memory layer kept separate from the model's reasoning How can LLM agents handle huge candidate lists without breaking?. That layer is invisible to the businesses being ranked.
What hotels can influence is the content the model reads, and the same audit team found the model doesn't weigh content the way guests do. LLM assistants match humans in treating rating and price as most important. But they give eco-certification about as much weight as review volume, and they give no measurable weight to management responses to reviews How do LLM hotel assistants weight reputation signals differently than humans?. So a hotel that carefully answers every review is spending effort on a signal the AI ignores, and a certification badge may count for more than it would with a human guest. The fight that can actually be won happens over attributes, not position.
The broader research on LLM judges suggests the hotel case is one example of a general pattern. AI evaluators reward things that have nothing to do with quality: fake references and rich formatting raise scores without any access to the model Can LLM judges be tricked without accessing their internals?. In hiring, models prefer resumes written in their own style, and applicants who used the evaluating model were shortlisted 23 to 60 percent more often Do language models favor resumes they rewrote themselves? Do LLM evaluators favor resumes written by their own model?. There is early evidence that this happens because models recognize their own writing Do LLMs favor their own text because they recognize it?. A hotel could plausibly write its listing in the assistant's own style. That would be gaming, though, not contesting, and the corpus doesn't test it for hotels. The darker version already has a name: advertisement embedding attacks, where promotional content is slipped into the model or its distribution channel while accuracy looks untouched Can language models be hijacked to embed hidden advertisements?.
If individual hotels can't contest their position, the realistic remedies sit with whoever runs the system. Evaluation research points to two ideas. First, aggregating many evaluations, especially across different models, pulls rankings toward expert consensus Can aggregated LLM rankings match human expert judgments?. Applied here, shuffling the candidate order and averaging over several runs should wash out position effects, though no paper in the corpus tests that on hotel lists. Second, planted test cases can act as alarms for judge failure Can deterministic checks protect LLM judges from failure?, and that is essentially what the hotel audit did from outside. The surprise is that the most practical way for a hotel to 'see' its position may be to run that kind of audit itself, since the platforms don't expose the list.
Sources 10 notes
A randomized audit of twelve LLM travel assistants found that a hotel's position in the candidate list, holding all quality attributes fixed, causally influences selection. Position's effect rivals genuine reputation signals and represents a content-free pricing lever no hotel can observe or contest.
InteRecAgent solves prompt overflow by moving candidates to a separate memory bus and replacing step-by-step reasoning with upfront planning. This reduces inference cost and improves accuracy while keeping context windows manageable.
A conjoint audit across twelve LLM models found they match humans on rating and price primacy but diverge sharply: eco-certification ranks third (matching review volume), while management response has no measurable effect—reversing documented human priorities.
Research shows LLM evaluators systematically score higher when responses include fake references or rich formatting, independent of content quality. These biases are exploitable without model access, undermining AI benchmark credibility.
Across a controlled experiment on 2,245 resumes, eight of nine LLMs preferred their own rewrites over matched human versions when evaluating candidates, with preference rates ranging from 26% to 98%. The bias strengthened in larger models and emerged from stylistic alignment rather than content quality differences.
Show all 10 sources
Simulations across 24 occupations show applicants using the evaluating LLM are significantly more likely to advance past resume screening than equally qualified human-written applicants, with the largest gaps in business fields like sales and accounting.
Fine-tuning LLMs to recognize their own summaries increased their preference for those summaries in a linear relationship, suggesting recognition capability drives self-preference bias. The authors present this as initial causal evidence, not proof.
Research identifies Advertisement Embedding Attacks as a distinct threat class that injects promotional or malicious content via hijacked distribution platforms or backdoored checkpoints, leaving accuracy untouched while corrupting output integrity. The attack is economically motivated and self-inspection defenses can detect injected content without retraining.
Multiple LLMs ranking business models individually are inconsistent and biased, but aggregating evaluations—especially across different models—produces rankings that resemble human-expert rankings. Gains come primarily from scaling (more evaluations) rather than diversity (different LLM types or prompts).
Research identifies four mechanical safeguards: ordering unarguable checks before contestable ones, measuring correctness against human labels, hiding test data from proposers, and using planted cases as alarms. None requires the LLM itself to verify compliance.
Papers this line draws on 8
The research behind the notes this line reads — ranked by how closely each paper relates.
- AI Self-preferencing in Algorithmic Hiring: Empirical Evidence and Insights
- LLM or Human? Perceptions of Trust and Information Quality in Research Summaries
- LLM Evaluators Recognize and Favor Their Own Generations
- Whose hotel does the AI recommend? An algorithm audit of reputation signals in LLM-assisted hotel selection
- When Reject Turns into Accept: Quantifying the Vulnerability of LLM-Based Scientific Reviewers to Indirect Prompt Injection
- Can You Trust LLM Judgments? Reliability of LLM-as-a-Judge
- Stop Automating Peer Review Without Rigorous Evaluation
- Monitoring AI-Modified Content at Scale: A Case Study on the Impact of ChatGPT on AI Conference Peer Reviews