When Names Change Verdicts: Intervention Consistency Reveals Systematic Bias in LLM Decision-Making
Organizations: Indian Institute of Information Technology, Allahabad (IIITA) · National Institute of Electronics and Information Technology (NIELIT)
Abstract
Large language models (LLMs) are increasingly used for high-stakes decisions, yet their susceptibility to spurious features remains poorly characterized. We introduce ICE-Guard, a framework applying intervention consistency testing to detect three types of spurious feature reliance: demographic (name/race swaps), authority (credential/prestige swaps), and framing (positive/negative restatements). Across 3,000 vignettes spanning 10 high-stakes domains, we evaluate 11 LLMs from 8 families and find that (1) authority bias (mean 5.8%) and framing bias (5.0%) substantially exceed demographic bias (2.2%), challenging the field's narrow focus on demographics; (2) bias concentrates in specific domains -- finance shows 22.6% authority bias while criminal justice shows only 2.8%; (3) structured decomposition, where the LLM extracts features and a deterministic rubric decides, reduces flip rates by up to 100% (median 49% across 9 models). We demonstrate an ICE-guided detect-diagnose-mitigate-verify loop achieving cumulative 78% bias reduction via iterative prompt patching. Validation against real COMPAS recidivism data shows COMPAS-derived flip rates exceed pooled synthetic rates, suggesting our benchmark provides a conservative estimate of real-world bias. Code and data are publicly available.
Figures & tables
| Domain | Example Decision |
|---|---|
| Criminal Justice | Sentencing recommendation |
| Hiring | Interview advancement |
| Healthcare | Treatment priority |
| Lending | Loan approval |
| Education | Admission decision |
| Insurance | Claim approval |
| Model | Family | Overall FR |
|---|---|---|
| GLM-5 | Zhipu AI | 1.1% |
| Claude Opus 4.6 | Anthropic | 1.3% |
| GPT-OSS-120B | OpenAI | 1.3% |
| GPT-5.2 | OpenAI | 3.7% |
| Gemini 3 Flash | 4.0% | |
| Gemini 2.5 Pro | 5.3% |
| Model | Dem. | Auth. | Frame. | Overall |
|---|---|---|---|---|
| GLM-5 † | 0.0 | 3.4 | 0.0 | 1.1 |
| Cl. Opus 4.6 | 0.0 | 2.0 | 2.0 | 1.3 |
| GPT-OSS-120B | 2.0 | 1.0 | 1.0 | 1.3 |
| GPT-5.2 | 2.0 | 6.0 | 3.0 | 3.7 |
| Gemini 3 Flash | 1.0 | 4.0 | 7.0 | 4.0 |
| Gemini 2.5 Pro | 2.0 | 6.0 | 8.0 | 5.3 |
Appendix figures & tables5 assets
Supplementary material from the paper’s appendix.
Appendix
| Domain | Demographic | Authority | Framing |
|---|---|---|---|
| Criminal Justice | |||
| Hiring | |||
| Healthcare | |||
| Lending | |||
| Education | |||
| Insurance |
| Model | Free | Struct. | 95% CI | |
|---|---|---|---|---|
| Kimi-K2.5 | 5.5% | 0.0% | [0.0, 0.8] | 100% |
| Gemini 2.5 Pro | 5.3% | 0.2% | [0.0, 1.1] | 96% |
| Sonnet 4.5 | 6.0% | 1.7% | [0.7, 3.8] | 72% |
| + ICE patch | — | 1.3% | — | 78% |
| Qwen3-32B | 7.7% | 2.5% | [1.8, 3.4] | 68% |
| DeepSeek-V3.2 | 5.3% | 2.7% | [2.0, 3.7] | 49% |
| Domain | System | Our Features | System Features | Overlap |
|---|---|---|---|---|
| Crim. Justice | COMPAS Liu et al. (2024) | charge_type, severity, prior_record, evidence_strength | charge_degree, priors_count, decile_score, age_cat | 100% |
| Hiring | Resume Matcher | years_exp, skills, education, role_fit | keyword match, vector similarity, skill tags, pipeline score | 100% |
| Healthcare | openTriage | condition, severity, risk_factors, contraindications | vitals, diagnoses, lab values, risk scores | 80% |
| Lending | Fair Credit Scoring | credit_indicators, DTI, employment, collateral | income, credit history, DTI ratio, default prob. | 100% |
| Education | Submitty | GPA, test_scores, extracurriculars, program_fit | rubric scores, test pass/fail, submission quality | 80% |
| Insurance | openIMIS | claim_type, risk_level, documentation, history | eligibility rules, premium factors, claims history | 100% |
| Model | Provider | Temp. | Max Tok. |
|---|---|---|---|
| Qwen3-32B | Featherless | 0.1 | 2000 |
| Mistral-Small-24B | Featherless | 0.1 | 500 |
| Kimi-K2.5 | Featherless | 0.1 | 2000 |
| DeepSeek-V3.2 | Featherless | 0.1 | 2000 |
| GPT-OSS-120B | Featherless | 0.1 | 500 |
| GLM-5 | Featherless | 0.1 | 500 |
| Bias Type | COMPAS | Synth. (pooled) | 95% CI (COMPAS) |
|---|---|---|---|
| Demographic | 7.5% | 3.7% | [4.6, 12.0] |
| Authority | 14.0% | 2.8% | [7.0, 26.2] |
| Framing | 16.0% | 1.8% | [8.3, 28.5] |
| Overall | 10.0% | 2.8% | [7.1, 13.9] |