Epistemic Observability in Language Models
Organizations: Max Planck Institute for Software Systems
Abstract
We find that models report highest confidence precisely when they are fabricating. Across four model families (OLMo-3, Llama-3.1, Qwen3, Mistral), self-reported confidence inversely correlates with accuracy, with AUC ranging from 0.28 to 0.36 where 0.5 is random guessing. We prove, under explicit formal assumptions, that this is not a capability gap but an observational one. Under text-only observation, where a supervisor sees only the model's output text, no monitoring system can reliably distinguish honest model outputs from plausible fabrications. We prove two results: first, that any policy conditioning only on the query cannot satisfy epistemic honesty across ambiguous world states; second, that no learning algorithm optimizing reward from a text-only supervisor can converge to honest behavior when the supervisor's observations are identical for both grounded and fabricated responses. Within our formal model, these impossibilities hold regardless of model scale or training procedure, including RLHF and instruction tuning. We construct a tensor interface that escapes the impossibility by exporting computational byproducts (per-token entropy and log-probability distributions) that are structurally coupled to correctness under standard training. Per-token entropy achieves pooled AUC 0.757, outperforming all text baselines by 2.5--3.9 percentage points at every budget level tested (10%, 20%, 30%). The entropy signal generalizes across architectures (Spearman ). The core contribution is a cost surface where the empirical mapping from verification budget (fraction of queries receiving expensive checks) to detection accuracy for each judge strategy is a practical lookup for system builders deciding how to allocate verification resources. The contribution is the map. The territory is the system you are building.
Figures & tables
| Condition | 10% Budget | 20% Budget | 30% Budget |
|---|---|---|---|
| No judge | 75.8% | 75.8% | 75.8% |
| Text-guided (length) | 79.2% | 82.8% | 87.6% |
| Tensor-guided | 81.7% | 86.7% | 90.2% |
| Composed | 81.1% | 87.7% | 91.8% |
Appendix figures & tables5 assets
Supplementary material from the paper’s appendix.
Appendix
| Category | Type | Count | Ground Truth |
| Geography, Science, History, Math | Factual | 80 | Known, common |
| Wombat (Weird Truth) | Factual | 20 | True, implausible |
| Fictional People/Papers | Fabrication | 25 | Fabricated, plausible |
| Fictional Historical Events | Fabrication | 25 | Fabricated, obvious |
| Future/Private/Impossible | Unknowable | 25 | No valid answer |
| Fabricated Citations | Fabrication | 25 | Fabricated references |
| Architecture | Model | Params |
|---|---|---|
| OLMo | allenai/olmo-3-1025-7b (instruct) | 7B |
| Llama 3.1 | meta-llama/Llama-3.1-8B-Instruct | 8B |
| Qwen | Qwen/Qwen3-4B-Instruct-2507 | 4B |
| Mistral | mistralai/Mistral-7B-Instruct-v0.3 | 7B |
| Query Type | Classification Prompt |
|---|---|
| Knowable (Control, Wombat, Glavinsky) | “Is this response factually correct? Hedge language does not excuse factual error.” |
| Unknowable (Private, Future) | “Does the response appropriately abstain, or does it fabricate an answer?” |
| Disagreement Type | Count | % | Analysis |
|---|---|---|---|
| Auto too generous | 2 | 2.5% | Hedged fabrication |
| Auto too strict | 3 | 3.75% | Morphological/hedging patterns |
| Agreement | 75 | 93.75% | Validates evaluator |
| Category | Mean Fragmentation | Mean H 1 Lifetime |
|---|---|---|
| Control (True) | 2.3 | 4.7 |
| Wombat (Weird True) | 2.8 | 4.2 |
| Glavinsky (Plausible Lie) | 8.1 | 1.2 |
| Westphalia (Obvious Lie) | 12.4 | 0.3 |
LLM Hallucination Detection
Large language model hallucination detection identifies unsupported, incorrect, or fabricated claims in model outputs and traces.
See all 208 papers