Checking the Checkers: A Synthesis of Verifier Noise and Robustness in RLVR
Organizations: Independent Researcher TX, USA · Independent Researcher CA, USA
Abstract
Reinforcement learning with verifiable rewards (RLVR) has become a principal recipe for improving the reasoning of large language models (LLMs). It rests on the assumption that the checker scoring each response is itself correct. In practice, rule-based checkers reject correct answers in unexpected formats, unit tests accept incorrect programs, and LLM judges can be led to approve empty or adversarial responses. This work surveys 58 studies that measure, analyze, or mitigate such verifier errors. We ask what errors verifiers make, how they affect training, which mitigations work against which errors, and how the findings extend to self-generated, rubric- and judge-based, and verifier-free rewards. The evidence suggests that the structure of an error matters more than its rate. Random errors mostly slow learning, though under a fixed budget or KL regularization they also lower final accuracy. False positives that the policy can learn to trigger can cause plateaus or collapse, sometimes even with a low initial error rate. Whether a verifier wrongly rejects or accepts depends on what it checks and who built it, not on its family. Its errors shift as the policy improves, and most mitigations have been tested against only one kind of error. We compile the findings into comparison tables, reconcile apparent conflicts in the literature, and propose a reporting protocol to make future results comparable.
Figures & tables
| Study | Reward signal and error | Outcome | Key result |
| Egashira [ 14 ] | Rule checker; injected random FP/FN, systematic FN, exploitable FP | Random: delay (lower endpoint for OLMo at 50 % FNR); exploitable FP: plateau or collapse | Pass@1 0.6 with a “python” trigger vs. 85.6 clean |
| Rad [ 17 ] | Unit tests; random flips across | : delay or lower endpoint; : no learning; : collapse | At : 16.0 FN-heavy vs. 14.6 FP-heavy (clean 20.8) |
| El Mansouri [ 19 ] | Rule and reward models; i.i.d. flips; no ratio clipping | Lower endpoint, strongly model-dependent | Losses of 0.2–30.7 points |
| Plesner [ 11 ] | Unit tests; symmetric flips; small model verifier | Group-level : graceful; sample-level: lower endpoint; 4B verifier: plateau | Best reward 0.704 vs. 0.871 with a 30B verifier |
| Lv [ 12 ] | Rule; question-wise flips; PPO | : graceful or delay; 50 %: no learning; Llama-3.1-8B: collapse at 30 % | 72.02 at 40 % flips vs. 75.85 clean |
| Cai [ 18 ] | Rule; class-conditional and format-dependent noise | Uncorrected: lower endpoint and loss of general capability | ARC-C 73.9 43.9 (Llama-3.2-3B) |
| Family | Tested against | Cost or gap |
|---|---|---|
| Noise-aware gradients [ 18 , 19 ] | Class-conditional noise; format FN; real reward models | Needs error rates; fails on model-aligned wrong labels [ 13 ] |
| Noise-robust regularization [ 70 ] | Random label corruption | Backbone-dependent; extra hyperparameters |
| Stronger verifiers [ 21 , 61 , 36 , 20 ] | Natural rule FN; judge hacking | Extra inference; small RL gains; own FP rarely reported |
| Judge hardening [ 25 , 8 ] | Discovered and master-key FP | One policy–judge pair; offline only in [ 8 ] |
| Structural checks [ 23 , 37 ] | Enumeration shortcut; PRM hacking | Task-specific; outcome-verifier errors untouched |
| Data audits [ 13 , 22 , 31 ] | Wrong labels; leaky tests; inherited hacking | Covers only what is audited |
| Theme | Report | Motivation |
|---|---|---|
| Verifier | Identity, version, extraction configuration and coverage; judging granularity and output cap; the evaluation grader, separately | [ 6 , 67 , 10 , 52 ] |
| Verifier error | FPR and FNR, or with an interval, on the policy’s own outputs at the start and end of training; noise structure, with FP and FN tested separately; adversarial probes of model verifiers; invalid-response rate | [ 17 , 14 , 20 , 61 ] |
| Training | An oracle reward beside the training reward; final and best checkpoints; pass@ with pass@1; seeds or variance; no reliance on entropy as a health signal | [ 14 , 13 , 35 ] |
| Evaluation | More than one model family; random- and format-reward baselines; post-cutoff benchmarks and a contamination probe; per-problem and per-category breakdowns | [ 33 , 34 , 43 , 75 ] |
| Label-free rewards | Reward accuracy against gold, not only pseudo-label accuracy | [ 41 , 42 ] |
| Data and release | Audited reference labels; distillation data filtered on true reward; released verdicts and code | [ 13 , 31 , 27 ] |