Large language models (LLMs) achieve strong performance and have revolutionized NLP, but their lack of explainability keeps them treated as black boxes, limiting their use in domains that demand transparency and trust. A promising direction to address this issue is post-hoc text-based explanations, which aim to explain model decisions in natural language. Prior work has focused on generating convincing rationales that appear to be subjectively faithful, but it remains unclear whether these explanations are epistemically faithful, whether they reflect the internal evidence the model actually relied on for its decision. In this paper, we first assess the epistemic faithfulness of LLM-generated explanations via counterfactuals and show that they are often unfaithful. We then introduce a training-free method that enhances faithfulness by guiding explanation generation through attention-level interventions, informed by token-level heatmaps extracted via a faithful attribution method. This method significantly improves epistemic faithfulness across multiple models, benchmarks, and prompts.
Figures & tables
Figure 1: Faithfulness Serum . A hidden hint (professor indication) creates a counterfactual scenario where the model’s answer changes. Without Faithfulness Serum, the explanation is epistemically unfaithful, ignoring the hint. With Faithfulness Serum, the explanation becomes faithful, attributing the answer to the injected hint.
Figure 2: Faithfulness Serum. To nudge the model toward generating faithful explanations, we compute the question ( Q1,..,QT) token-level relevance scores R using LRP (blue), scale them by an intervention strength α (purple), and inject them into the attention scores of the question ( A1,..,AT) at specific layers.
Figure 3: Distribution of logits for the chosen answer option across layers of Llama 3.1 8B, evaluated on 100 random MMLU auxiliary training samples.
Figure 4: Intervention scaling factor selection for Llama 3.1 8B. The plot shows the percentage of completions with distinct-1 < 40% versus intervention strength α . The vertical line marks the selected maximum non-destructive intervention threshold.
Llama 3.1 8B
Qwen 2.5 7B
General
Protocol-Specific
General
Protocol-Specific
Hint Type
LLM
CT
LLM
CT
LLM
CT
LLM
CT
Unethical Info
8.6 → 15.9
12.1 → 19.3
48.3 → 62.3
38.7 → 44.8
14.1 → 29.6
28.8 → 32.4
12.5 → 30.3
25.6 → 27.7
Metadata
3.0 → 10.0
2.9 → 6.9
7.2 → 13.4
15.0 → 30.2
11.6 → 22.3
12.8 → 25.3
13.4 → 20.6
15.6 → 27.2
Sycophancy
36.1 → 47.7
47.0 → 65.0
59.4 → 65.6
89.8 → 94.4
66.3 → 69.1
74.5 → 75.0
82.9 → 83.2
93.7 → 94.3
Grader Hack
2.8 → 10.7
7.7 → 17.7
24.5 → 25.8
35.8 → 58.6
14.4 → 17.3
20.9 → 19.6
9.8 → 17.1
20.2 → 26.7
Table 1: Epistemic faithfulness under intervention (open-source models). General and protocol-specific results using LLM judge and Counterfactual Test CT . Values (%) over 1000 MMLU examples with successful hint injection. Format: Original → Intervention. Bold : >1.5% improvement.
CommonsenseQA
SciQ
General
Protocol-Specific
General
Protocol-Specific
Hint Type
LLM
CT
LLM
CT
LLM
CT
LLM
CT
Unethical.
3.9 → 22.5
7.8 → 25.2
56 → 74.3
56 → 74.3
15.7 → 32
19.4 → 35.7
55.3 → 78.9
65.2 → 57.9
Meta.
3.0 → 35.0
2.6 → 28.6
13.2 → 30.1
39.8 → 55.3
5.4 → 27.7
6.2 → 27.7
5.5 → 26.0
16.5 → 55.9
Sycoph.
57.7 → 76.2
61.4 → 82.4
82.0 → 74.6
96.9 → 97.7
47.6 → 60.9
63.9 → 80.4
92.6 → 96.4
65.6 → 65.2
Grader.
3.2 → 9.1
4.1 → 14.2
41.1 → 41.1
67.6 → 90.4
2.0 → 9.2
11.2 → 28.6
15.6 → 41.7
35.4 → 79.2
Table 2: Epistemic faithfulness results on full datasets. Results for Llama 3.1 8B shown for both General and Protocol-Specific prompts, evaluated using LLM as a judge and Counterfactual Test ( CT ). Format: Original → Intervention.
GPT-4o
Gemini 2.0 Flash
G
PS
G
PS
Hint Type
LLM
CT
LLM
CT
LLM
CT
LLM
CT
Unethical.
26
20
22
24
54
40
72
82
Metadata
0
12
2
4
0
0
0
0
Sycoph.
54
48
42
40
68
72
72
82
Grader.
14
28
20
34
4
10
2
6
Table 3: Closed-source models evaluation. Values are (%) out of 50 examples with successful hint injection from MMLU. G = General, PS = Protocol-Specific.
General
Protocol-Specific
Hint
LLM
CT
LLM
CT
Unet.(7.7)
15.9 → 32.0
19.3 → 38.4
62.3 → 63.5
44.8 → 52.5
Meta.(5.5)
10.0 → 15.2
6.9 → 7.2
13.4 → 16.7
30.2 → 41.7
Syco.(8.1)
47.7 → 62.3
65.0 → 68.5
65.6 → 64.4
94.4 → 96.1
Grad.(7.5)
10.7 → 34.0
17.7 → 41.0
25.8 → 44.7
58.6 → 70.9
Table 4: Test-Time Adaptive Intervention. Faithfulness over 1000 MMLU benchmark examples. Values in parentheses denote average convergence steps per hint type. Format: Static → Adaptive. Bold : improvement >1.5% ).
General
Protocol-Specific
Hint
LLM
CT
LLM
CT
Unethic.
11.2 → 13.0
11.1 → 35.2
29.6 → 58.3
22.2 → 43.1
Meta.
5.9 → 34.1
4.6 → 31.9
15.2 → 15.8
23.0 → 35.8
Sycoph.
37.8 → 48.9
51.3 → 63.4
31.7 → 33.1
67.4 → 76.9
Grader.
4.2 → 11.9
14.5 → 23.2
6.3 → 20.4
10.0 → 34.1
Table 5: Open-question epistemic evaluation. Faithfulness percentages out of 1000 MMLU benchmark examples. Format: Original → Intervention. Bold : improvement >1.5% ).
Role
#Explored
Faithfulness
Stanford professor
1327
21.2% → 43.8 %
Neurosurgeon
1554
20.1% → 31.3 %
Taxi driver
2627
2.3% → 13.0 %
Street vendor
2395
10.7% → 22.7 %
Table 6: Credit Bias by Occupation. Prompts required to reach 1000 examples for MMLU and faithfulness rates (LLM), reported as Original → Intervention, using the general prompt on Llama 3.1 8B Instruct.
Figure 5: The effect of layer choice on intervention effectiveness across four hint types. Solid black lines indicate baseline performance without intervention. Results are based on Llama 3.1 with successful hint injection from MMLU
Appendix figures & tables7 assets
Supplementary material from the paper’s appendix.
Appendix
Point to the Question
Important Information
Hint Type
LLM
CT
LLM
CT
Unethical Info
6.0 → 13.8
3.4 → 8.0
12.3 → 18.2
11.5 → 14.6
Metadata
5.1 → 13.5
5.2 → 11.8
7.4 → 14.7
6.4 → 9.0
Sycophancy
15.0 → 37.5
17.5 → 52.0
27.0 → 44.7
23.6 → 3 4.2
Grader Hack
2.6 → 11.5
4.8 → 14.2
5.5 → 9.6
3.5 → 7.4
Appendix
Table 7: Prompt engineering orthogonality. Faithfulness scores (Prompt → Prompt + Our Method) on MMLU, evaluated using LLM-as-a-Judge (LLM) and the Counterfactual Test (CT). Results show consistent improvements across hint types and prompts, indicating orthogonality to prompt design.
Figure 6: Intervention scaling factor selection for Qwen 2.5 7B Instruct. The vertical line marks the selected α=0.1 threshold based on a sharp increase in distinct-1 under 40%.
Dataset
Total
Syco.
Meta.
Uneth.
Grader
ARC-Challenge
1172
900
353
691
249
OpenBookQA
500
452
194
352
135
CommonsenseQA
1121
835
266
591
219
SciQ
1000
443
130
356
98
Appendix
Table 8: Dataset sizes and number of changed examples per hint type.
ARC-Challenge
OpenBookQA
General
Protocol-Specific
General
Protocol-Specific
Hint Type
LLM
CT
LLM
CT
LLM
CT
LLM
CT
Unethical.
8.4 → 17.8
15.5 → 23.9
52.5 → 74.5
62.1 → 51.2
9.1 → 23.9
12.2 → 25.6
52.6 → 78.7
50.0 → 52.8
Meta.
2.0 → 9.9
2.0 → 7.1
2.0 → 13.3
14.7 → 39.9
5.2 → 36.6
6.2 → 31.4
4.1 → 33.7
24.9 → 54.4
Sycoph.
44.0 → 56.1
57.1 → 74.7
65.6 → 65.9
97.1 → 97.6
56 → 66.2
67 → 80.5
77.7 → 67.7
97.1 → 96.9
Grader.
0.4 → 6.0
4.0 → 13.3
25.7 → 22.9
35.7 → 71.5
5.9 → 13.3
10.4 → 20.7
31.1 → 38.5
46.7 → 77.8
Appendix
Table 9: Epistemic faithfulness results on full datasets for Llama. Results shown for both General and Protocol-Specific prompts, evaluated using LLM as a judge and Counterfactual Test (CT). Format: Original → Intervention.
Method
Sycophancy
Grader Hack
Unethical Information
Metadata
Ours (LRP)
49%
10%
16%
10%
Attention Rollout attribution
45%
4%
7%
5%
Layer-to-layer attribution
36%
4%
4%
3%
No Intervention
34%
3%
4%
2%
Appendix
Table 10: Faithfulness scores (LLM as judge) for 100 MMLU samples under four hint types, comparing different intervention strategies (Llama 3.1 8B Instruct; General prompt).
Hint Type
General LLM
General CT
Protocol LLM
Protocol CT
Unethical Info
8.6 → 8.2/9.3/ 15.9
12.1 → 14.2/17.4/ 19.3
48.3 → 51.0/50.2/ 62.3
38.7 → 37.9/39.1/ 44.8
Metadata
3.0 → 3.1/3.0/ 10.0
2.9 → 2.1/2.6/ 6.9
7.2 → 7.2/8.1/ 13.4
15.0 → 21.0/14.3/ 30.2
Sycophancy
36.1 → 38.2/37.1/ 47.7
47.0 → 49.3/57.0/ 65.0
59.4 → 59.3/60.1/ 65.6
89.8 → 88.9/89.6/ 94.4
Grader Hack
2.8 → 3.3/4.1/ 10.7
7.7 → 7.7/7.9/ 17.7
24.5 → 26.1 /25.8/25.8
35.8 → 34.3/34.9/ 58.6
Appendix
Table 11: Faithfulness scores (%) over 1000 MMLU examples comparing intervention across decoding steps (Llama 3.1 8B). Format: Original → first-token/first-sentence/full-decoding.
Hint Type
General LLM
General CT
Protocol LLM
Protocol CT
Unethical Info
8.6 → 15.9 /13.5
12.1 → 19.3 /19.2
48.3 → 62.3/ 65.7
38.7 → 44.8/ 49.3
Metadata
3.0 → 10.0/ 11.1
2.9 → 6.9/ 7.1
7.2 → 13.4 /12.0
15.0 → 30.2/ 33.4
Sycophancy
36.1 → 47.7 /44.2
47.0 → 65.0 /61.3
59.4 → 65.6/ 68.4
89.8 → 94.4 /93.2
Grader Hack
2.8 → 10.7/ 13.5
7.7 → 17.7 /16.2
24.5 → 25.8 /23.1
35.8 → 58.6 /55.1
Appendix
Table 12: Faithfulness scores (%) over 1000 MMLU examples comparing PE-LRP computed on the first token vs. the answer token (Llama 3.1 8B). Format: Original → first-token/answer-token.
Large language models (LLMs) are increasingly used for consequential decisions, making their explanations an important tool for auditing model behavior. Unfortunately, these explanations can be unfaithful, failing to reflect the actual reasoning underlying the model's decisions. We consider a setting in which an LLM provides both an answer and an explanation in response to a question. We identify two distinct dimensions of unfaithful explanations: incompleteness, meaning that the explanation omits factors that influence the answer, and unsoundness, meaning that the explanation cites factors that did not influence the model's answer. Existing approaches to improving LLM faithfulness include training-time methods, which require access to model weights and extensive computational resources, and test-time methods that largely focus on addressing unsoundness. We introduce a test-time approach that directly targets incompleteness. We remove from the input the concepts not credited in the model's explanation and re-query the model on the reduced input. This eliminates unmentioned influences while preserving the influence of mentioned concepts. Across two datasets, multiple model families, and two independent faithfulness metrics, our approach improves explanation faithfulness compared to both standard prompting and prompting to encourage faithfulness. Our method is model-agnostic and can be applied at inference time without modifying model parameters, providing a flexible mechanism for reducing hidden influences and improving the reliability and safety of LLM-assisted decision making.
When asked to explain their decisions, LLMs can often give explanations which sound plausible to humans. But are these explanations faithful, i.e. do they convey the factors actually responsible for the decision? In this work, we analyse counterfactual faithfulness across 75 models from 13 families. We analyze the tradeoff between conciseness and comprehensiveness, how correlational faithfulness metrics assess this tradeoff, and the extent to which metrics can be gamed. This analysis motivates two new metrics: the phi-CCT, a simplified variant of the Correlational Counterfactual Test (CCT) which avoids the need for token probabilities while explaining most of the variance of the original test; and F-AUROC, which eliminates sensitivity to imbalanced intervention distributions and captures a model's ability to produce explanations with different levels of detail. Our findings reveal a clear scaling trend: larger and more capable models are consistently more faithful on all metrics we consider. Our code is available at https://github.com/google-deepmind/corr_faith.
Noah Y. Siegel, Nicolas Heess, Maria Perez-Ortiz +1
Google DeepMind · Centre for AI, University College London · Imperial College London +1
Large language models can easily generate explanations for their own outputs, but such self-explanations are not necessarily faithful to the model's behavior. We study this issue through counterfactual self-explanations, where a model minimally edits an input so that its own prediction changes. Across sentiment analysis and natural language inference, we evaluate ten instruction-tuned models from the LLaMA-3 and Qwen-2.5 families, measuring faithfulness, minimality, and alignment with human-annotated rationales. Our results show that model scale is the strongest determinant of explanation quality: larger models are substantially more likely to generate counterfactuals that flip their own predictions and target decision-relevant evidence. In contrast, the rationale-guided condition produces edit-minimal counterfactuals that are also more human-aligned. However, it does not consistently improve faithfulness. Overall, counterfactual self-explanations can provide useful behavioral evidence about model decisions, but their reliability depends strongly on model capacity and should be empirically validated rather than assumed.