Can simple discourse markers make LLMs question harmful assumptions?
This research explores whether minimal prompting interventions—like prepending 'wait a minute' or instructing models to correct presuppositions—can boost performance on safety benchmarks that resist standard mitigation approaches.
Cheng, Hawkins and Jurafsky report that two minimal prompting interventions produce large gains on three safety benchmarks previously described as resistant to mitigation: directly instructing the model to correct false presuppositions or misconceptions ("EXPLICIT"), and prepending the discourse marker "wait a minute" to the model's output ("WAIT"). On Cancer-Myth, where Zhu et al. (2026) "report that no LLM gets a score higher than 0.30," the paper's interventions "achieve score 0.51 (70% increase) while also controlling for false positives." Across six state-of-the-art LLMs, the authors report improvements nearly 4x for Cancer-Myth and a 40% increase on SAGE-Eval... across nearly all dimensions of the three benchmarks, while minimizing false positive rates (excessive challenging).
The explanation offered is pragmatic rather than informational: "wait a minute" is proposed to work not because it adds facts but because, as a discourse marker, it signals that the upcoming utterance is about to reconsider or interrupt the preceding common ground — the same cue that would prompt a human listener to pause accommodation and invoke epistemic vigilance. The excerpt notes this sits alongside a separately documented effect where adding "wait" improves reasoning performance by allocating more test-time compute (citing Muennighoff et al. 2025 among others), a mechanism the authors distinguish from their own pragmatic-cue account, though the excerpt does not disentangle how much of the Cancer-Myth and SAGE-Eval gain is pragmatic-cue-driven versus compute-driven.
This is the applied counterpart to Why do language models fail to challenge harmful user beliefs?, which supplies the pragmatic explanation these interventions are designed against: if accommodation is the default and vigilance is gated by at-issueness, assertion, and source reliability, a cue like "wait a minute" works by artificially triggering the same linguistic conditions that would make a human listener challenge a claim. It also complicates Why do language models avoid correcting false user claims?, which frames grounding failure as resistant to anything short of a training-level fix — these results suggest a minimal inference-time discourse marker can shift that strategy without retraining, at least on these three benchmarks.
The excerpt tests only two interventions, in English only, and flags that over-applying them "may risk over-correcting the user and diminishing user experience" — it does not report how often WAIT or EXPLICIT produce an unwanted gotcha tone in benign conversation, nor whether gains generalize beyond these three constructed benchmarks. The authors also leave open how much of the "wait" effect is their proposed pragmatic-cue mechanism versus the separately documented test-time-compute effect of the same token on reasoning tasks. At the strength the evidence supports, the implication is that some LLM safety failures framed as requiring retraining or fine-tuning may instead be addressable with small, interpretable, inference-time pragmatic cues — a narrower and more testable claim than models need better alignment.
Inquiring lines that read this note 11
This note is a source for these research framings, grouped by the broader line of inquiry each explores. Scan the bold lines of inquiry; follow any specific question forward.
Why do LLM outputs diverge from their knowledge and reasoning?- What training signals cause LLMs to prioritize direct answers over clarification?
- Why do LLMs fail differently when patients interrupt mid-sentence?
- Why do LLMs over-ask about linguistic ambiguity humans find pragmatically tolerable?
- Are human clarification strategies actually better calibrated than LLM strategies?
Related concepts in this collection 5
This note in its neighbourhood — explore the map, then jump to a related concept in the list below.
Click a node to walk · click center to open · click Open in graph to see this note in the full knowledge graph
-
Why do language models fail to challenge harmful user beliefs?
Explores whether LLM failures to push back on unsafe claims stem from a single pragmatic deficit rather than separate knowledge or alignment problems. Tests whether human conversational norms predict when models do or don't object.
the pragmatic account these interventions are designed to exploit
-
Why do language models avoid correcting false user claims?
Explores whether LLM grounding failures stem from missing knowledge or from conversational dynamics. Examines whether models use face-saving strategies similar to humans when disagreement is needed.
complicates the claim that grounding failure needs a training-level fix
-
Why do language models fail in gradually revealed conversations?
Explores why LLMs perform 39% worse when instructions arrive incrementally rather than upfront, and whether they can recover from early mistakes in multi-turn dialogue.
both find simple mitigations recover only partial performance on a resistant benchmark family
-
Why do language models lose performance in longer conversations?
Does multi-turn degradation stem from fundamental model limitations, or from misalignment between what users mean and what models assume? Understanding the root cause could guide better solutions.
parallel: a non-retraining intervention recovers lost performance by shifting framing rather than weights
-
Does the word wait in model reasoning reveal scrutiny patterns?
Explores whether a simple lexical marker in chain-of-thought traces can diagnose how carefully different models examine claims before responding, and whether this scrutiny correlates with pushback behavior.
Evidence for A: wait tokens occur naturally in CoT and track pushback rate, consistent with wait-prompting causally raising vigilance
Related papers in this collection 8
Papers most semantically related to this note, ranked by cosine similarity in the embedding space.
- Accommodation and Epistemic Vigilance: A Pragmatic Account of Why LLMs Fail to Challenge Harmful Beliefs
- What Makes a Good Natural Language Prompt?
- Skills-in-Context Prompting: Unlocking Compositionality in Large Language Models
- To Rely or Not to Rely? Evaluating Interventions for Appropriate Reliance on Large Language Models
- Large Language Models Cannot Self-Correct Reasoning Yet
- Can LLMs Ground when they (Don't) Know: A Study on Direct and Loaded Political Questions
- The Earth is Flat because...: Investigating LLMs' Belief towards Misinformation via Persuasive Conversation
- Pushback in a Haystack: Language Models Respond to Factual Errors Ambiguously and Ineffectively
Original note title
prepending wait a minute or instructing llms to correct presuppositions sharply raises epistemic vigilance on safety benchmarks