Optimizing the Score, Losing Sight of the Task: Reward Hacking Across Weights, Selection, and Prompts
cs.AI
Submitted: 2026-09-22
Updated: 2026-09-22
Comments: 19 pages, 1 figure, 2 tables
License: http://creativecommons.org/licenses/by/4.0/
The gist: A higher evaluation score does not always mean a better language model system.
Terminology
Abstract
A higher evaluation score does not always mean a better language model system. When optimization exploits an evaluator's mistakes, measured progress can conceal unchanged or deteriorating task performance. This failure can arise through parameter updates, selection among generated outputs, or revisions to persistent prompts. We develop a comparative framework for reward hacking across these three optimization substrates: weights, selection, and text. Building on the Proxy Compression Hypothesis and research on inference-time and in-context reward hacking, we examine how reachable behavior, optimization budgets, and persistent adaptation shape exposure to proxy error. We formalize a distance-dependent upper bound on evaluator disagreement and a capacity ordering for nested policy classes, then show why distance alone cannot establish a universal ranking of vulnerability. An exact finite-output illustration demonstrates how the location of a scoring defect changes the behavior favored by each method. We also map representative defenses across substrates, identifying which mechanisms transfer directly and which offer only functional analogies. Persistent prompts receive particular attention: their contents are inspectable, but the behavior induced by a small textual change may be difficult to anticipate. The formal analysis, numerical illustration, and published evidence together provide a basis for comparing optimization methods and identifying the conditions under which their defenses transfer. The resulting framework connects optimization choices to verification requirements: reliable improvement depends on controlling accessible failure modes and preserving evidence of task quality independent of the score being optimized.
Sources
- LLM-as-a-Judge Is Not an Oracle: Why Self-Improving Agents Need Deterministic Guardrails
- GEPA: Reflective Prompt Evolution Can Outperform Reinforcement Learning
- Theoretical guarantees on the best-of-n alignment policy
- The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks
- Naive Prompt Optimization: Rethinking the Need for Complex Prompt Search
- Helping or Herding? Reward Model Ensembles Mitigate but do not Eliminate Reward Hacking
- Scaling Laws for Reward Model Overoptimization
- DSPy: Compiling Declarative Language Model Calls into Self-Improving Pipelines
- Inference-Time Reward Hacking in Large Language Models
- Large Language Models Hack Rewards, and Society
- Feedback Loops With Language Models Drive In-Context Reward Hacking
- Spontaneous Reward Hacking in Iterative Self-Refinement
- Analyzing Uncertainty of LLM-as-a-Judge: Interval Evaluations with Conformal Prediction
- Defining and Characterizing Reward Hacking
- Fine-Tuning and Prompt Optimization: Two Great Steps that Work Better Together
- Replacing Judges with Juries: Evaluating LLM Generations with a Panel of Diverse Models
- Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challenges
- TextGrad: Automatic "Differentiation" via Text
- AURA: Adaptive Uncertainty-aware Refinement for LLM-as-a-Judge Auditing
Related papers
- MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
- Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
- The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
- MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
- Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems
- VSAL: A Vision Solver with Adaptive Layouts for Graph Property Detection