Enhancing Assessment of Self-Consistency in LLM Explanations using Perturbation Strength
Authors: Phuong Q. Le, Kemal Kurniawan, Jey Han Lau
Organizations: School of Computing and Information Systems The University of Melbourne, Melbourne, Australia · School of Computer Science and Engineering University of New South Wales, Sydney, Australia · The University of Melbourne
Prior work has examined the self-consistency of LLM-generated explanations using surface-level perturbation methods. However, the strength of these perturbations is not explicitly measured and controlled. In this work, we propose an LLM-as-a-judge approach to measure perturbation strength in a unified manner across input and CoT perturbations. We then evaluate the self-consistency in explanations generated from various LLMs under controlled strength conditions, ensuring a fair comparison across perturbation types. Experiments show that our proposed LLM-based perturbation strength measure outperforms other embedding- and probability-based approaches and that input perturbations generally affect LLMs more strongly than CoT perturbations. Our work suggests that judgments about a model's self-consistency is fair only within the same perturbation type.
Figures & tables
Figure 1: A high semantic change between the original and perturbed text does not necessarily interfere with the reasoning path. Changing "bacon" from "meat" to "vegetable" is a high semantic change on its own; however, when being aware of the question context, this change does not interfere with the reasoning path.
Figure 3: Example of CoT steps where the second step is perturbed.
Strength level
Category
Description
0
No/Minimal change
Meaning is preserved (e.g., paraphrasing, synonyms, rewording) OR the change(s) is/are not enough to interfere with the reasoning path
1
Small change
Minor semantic shift that might interfere with the reasoning path but not enough to remove or reverse support for an answer option
2
Moderately strong change
The meaning changes enough to notably weaken, remove, or reverse support for an answer option, without clearly shifting support to another option (including cases where it shifts support to an answer that is not in the answer options)
3
Strong change
Clearly shift support from one answer option to another that is in the option list
Table 1: Key perturbation strength levels and criteria. The full guidelines are shown in Figure 11 .
Figure 4: Example of a question and its perturbed version.
Table 2: Correlations and Kappa scores of different perturbation strength measures. Kappa scores are only computed for LLM because it is designed for categorical data, which matches LLM’s outputs for perturbation strength.
Figure 5: Proportion of perturbed CoTs at each perturbation strength for datasets described in Section 3.1 .
Figure 6: ARC-Challenge flip rates of input and CoT perturbations across 4 CoT models
ARC-Challenge
OpenBook QA
Sports
Strategy QA
CoT Perturbation
LLaMA-3B
70.7
45.2
96.0
37.5
Mistral-2
36.2
45.9
23.2
55.2
Phi-3
34.5
53.7
36.1
53.2
LLaMA-8B
24.7
34.7
47.2
50.1
Input Perturbation
Table 3: Indicator for overall self-consistency of 4 CoT models across all datasets under CoT and input perturbations, measured by FR(3)−FR(0) . The bold fields indicate highest value for that dataset.
Appendix figures & tables22 assets
Supplementary material from the paper’s appendix.
Appendix
Figure 7: Prompt for gpt-4o-mini to perturb CoT step ( Lanham et al., 2023 ; Tutek et al., 2025 )
Figure 8: Prompt for gpt-4o-mini to perturb the input (i.e. question text).
Figure 9: Sampling procedure for annotation in StrategyQA dataset. This is repeated for all 4 datasets.
Figure 10: Prompt for gpt-4o-mini to paraphrase CoT step ( Lanham et al., 2023 )
Figure 11: Full Perturbation Strength Assessment Guideline for Human Annotators
Figure 12: Example of perturbed question with strength of 2 and the justification
Figure 13: Example of perturbed CoT with strength of 1 and the justification
All
Score 0 & 3
Score 1 & 2
CoT
0.649
0.830
0.192
Input
0.855
0.840
0.750
Appendix
Table 4: Linear Kappa scores between primary and second annotators
Figure 14: Change in surprisals versus True perturbation strength for CoT perturbations
Figure 15: Prompt template for gemini-3-flash to assess input perturbation strength.
Figure 16: Prompt template for gemini-3-flash to assess CoT perturbation strength.
Figure 17: Perturbation Strength Guide as system instruction for LLM. Modifications from the guidelines for human annotators ( Figure 11 ) are in bold.
Figure 18: Prompt to get CoT model’s answer to a question ( Tutek et al., 2025 )
Figure 19: OpenBookQA flip rates of input and CoT perturbations across 4 CoT models
Figure 20: Sports flip rates of input and CoT perturbations across 4 CoT models
Figure 21: StrategyQA flip rates of input and CoT perturbations across 4 CoT models
Figure 22: Example of model changing answer under zero-strength input perturbation
Figure 23: Example of model not changing answer under high-strength CoT perturbation
Figure 24: ARC-Challenge flip rates of four CoT models under 3 settings: CoT perturbation, input perturbation using direct prompting and input perturbation using CoT prompting
Figure 25: OpenBookQA flip rates of four CoT models under 3 settings: CoT perturbation, input perturbation using direct prompting and input perturbation using CoT prompting
Figure 26: Sports flip rates of four CoT models under 3 settings: CoT perturbation, input perturbation using direct prompting and input perturbation using CoT prompting
Figure 27: StrategyQA flip rates of four CoT models under 3 settings: CoT perturbation, input perturbation using direct prompting and input perturbation using CoT prompting
Large Language Models (LLMs) have been widely adopted in text classification tasks, where they not only output class predictions but also generate explanations that highlight the tokens deemed most relevant for reaching the predicted label. Yet it remains unclear whether these highlighted elements are behaviorally consistent with the model's own predictions under targeted interventions, which we refer to as functional auto-consistency. While much of the literature evaluates the textual plausibility of such explanations, few studies assess their functional consistency with the model's actual behavior. In this work, we propose an experimental framework based on the principle of auto-consistency: if a model identifies certain tokens as decisive, then isolating, removing, or semantically inverting them should produce systematic and interpretable changes in its predictions. We operationalize this evaluation through sufficiency, comprehensiveness, and counterfactuality metrics, and conduct experiments on IMDB and Steam reviews across both closed-source (GPT-4o-mini) and open-source LLMs (Gemma3, Granite8B, DeepSeek). Results show that GPT-4o-mini follows the expected progression across all metrics, Gemma3 and Granite8B maintain coherence under sufficiency but lose consistency under more demanding interventions, while DeepSeek variants display structural deviations, either failing to preserve sufficiency or overreacting under comprehensiveness and counterfactuality. These findings show that explanation reliability varies across LLM families and scales, with smaller models displaying contradictions and larger ones exhibiting over-sensitivity. By combining sufficiency, comprehensiveness, and counterfactuality, our approach provides a systematic methodology for assessing the functional consistency of LLM self-explanations.
Alisson Rosa Pereira, Bruno Iochins Grisci
Institute of Informatics Universidade Federal do Rio Grande do Sul Porto Alegre, Brazil
Large language models can easily generate explanations for their own outputs, but such self-explanations are not necessarily faithful to the model's behavior. We study this issue through counterfactual self-explanations, where a model minimally edits an input so that its own prediction changes. Across sentiment analysis and natural language inference, we evaluate ten instruction-tuned models from the LLaMA-3 and Qwen-2.5 families, measuring faithfulness, minimality, and alignment with human-annotated rationales. Our results show that model scale is the strongest determinant of explanation quality: larger models are substantially more likely to generate counterfactuals that flip their own predictions and target decision-relevant evidence. In contrast, the rationale-guided condition produces edit-minimal counterfactuals that are also more human-aligned. However, it does not consistently improve faithfulness. Overall, counterfactual self-explanations can provide useful behavioral evidence about model decisions, but their reliability depends strongly on model capacity and should be empirically validated rather than assumed.
Large language models (LLMs) are increasingly deployed in high-stakes domains, where free-text explanations such as chain-of-thought and post-hoc rationales are used to justify model outputs. Yet it remains unclear whether these explanations are sufficient, i.e., if they contain enough information to explain the model's output-generating process. We generalize classical sufficiency from feature attributions to arbitrary explanations and prove that explanation sufficiency can change depending on the input distribution, which must be explicitly defined for LLM explanations. We propose using the LLM itself to generate alternative inputs conditioned on an explanation, capturing its beliefs about possible inputs. We formalize self-consistent sufficiency as a goal for free-text explanations and introduce an information-theoretic metric, SCSuff, that enables evaluation of free-text explanations without relying on predefined biases or shortcuts. Our experiments show that SCSuff agrees with targeted perturbation tests where applicable and demonstrate that explanation sufficiency can vary with the input distribution. We find LLM explanations are generally insufficient and weakly correlated with model size, accuracy, or output entropy. Analysis of final-token hidden states shows that top and bottom SCSuff scores can be predicted from internal representations, suggesting that SCSuff can guide detection and improvement of sufficient LLM explanations. The code for this paper is available at https://github.com/rajesh-lab/self-consistent-sufficiency .