Lost in the Fallback: How Reliably Do Typed Decision Models Use Fallback Options?
Organizations: System Security Team, Li Auto Inc, China · Institute of Information Engineering, Chinese Academy of Sciences, China · School of Cyber Security, University of Chinese Academy of Sciences, China
Abstract
Typed decision models (TDMs) are increasingly used in applications such as request routing and model selection, making reliable decisions critical to system performance. Fallback options accommodate categories outside regular choices, enabling deferral to human experts or more capable models. While recent works have examined adversarial vulnerabilities in TDMs, their ability to follow fallback rules in non-adversarial settings remains underexplored. We introduce the Paired Fallback Robustness (PFR) Test to evaluate two aspects of fallback reliability: whether models correctly switch between regular and fallback options, and whether they make consistent decisions under logically equivalent definitions of the same rule. We evaluate open-source decision models on three benchmarks, with controlled comparisons across architectures and parameter counts. We find that correct recognition does not reliably transfer to correct fallback options, and errors persist even when the correct category is explicitly supplied.Moreover, logically equivalent formulations of the same fallback rule can also produce substantial disagreement in model decisions. These findings reveal a crucial reliability gap in current TDMs: fallback mechanisms designed to improve reliability can instead introduce errors. It highlights faithful execution of fallback rules and consistency under equivalent definitions as essential requirements for reliable typed decision-making.
Figures & tables
| Dataset | Model | DR | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| U | C | U | C | U | C | U | C | R | F | |||||||
| Intern | 91.1 | 90.7 | 68.7 | 75.8 | 6.9 | 7.6 | 62.2 | 68.4 | 2.7 | 28.7 | 52.0 | |||||
| Kev | 86.4 | 88.4 | 94.2 | 92.9 | 11.3 | 9.8 | 82.9 | 83.1 | 3.6 | 3.8 | 80.2 | |||||
| SemIf | 78.2 | 78.0 | 78.7 | 93.3 | 15.8 | 20.4 | 62.4 | 72.9 | 9.3 | 20.2 | 58.2 | |||||
| CLINC150 | JevK5 | 93.8 | 92.7 | 57.3 | 59.1 | 1.6 | 3.6 | 55.8 | 55.8 | 3.3 | 33.3 | 40.9 | ||||
| Intern | 81.3 | 82.1 | 74.0 | 67.5 | 11.2 | 10.4 | 62.9 | 57.4 | 3.4 | 21.0 | 50.6 | |||||
| Dataset | Model | Direct | Membership | Threshold | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| DR-F | DR-F | DR-F | ||||||||
| CLINC150 | Intern | 62.2 | 68.4 | 28.7 | 79.6 | 79.6 | 6.4 | 73.6 | 74.9 | 11.6 |
| Kev | 82.9 | 83.1 | 3.8 | 84.7 | 85.1 | 0.9 | 84.4 | 81.6 | 4.2 | |
| SemIf | 62.4 | 72.9 | 20.2 | 72.7 | 71.8 | 1.3 | 64.7 | 72.0 | 15.6 | |
| JevK5 | 55.8 | 55.8 | 33.3 | 80.4 | 82.0 | 2.9 | 82.0 | 72.2 | 10.7 | |
| BANKING77 | Intern | 62.9 | 57.4 | 21.0 | 73.5 | 70.6 | 7.0 | 69.9 | 67.5 | 5.7 |
Appendix figures & tables10 assets
Supplementary material from the paper’s appendix.
Appendix
| Pair | Union (U) | Complement (C) |
|---|---|---|
| 1 | the input belongs to any one of these categories in U: [members]. | the input belongs to a category in U that is not represented by any of the other output options. |
| 2 | choose this option when the input belongs to one of the following categories in U: [members]. | choose this option when the input’s category in U is outside the categories represented by the other output options. |
| 3 | this option covers exactly these categories in U: [members]. | this option covers exactly the categories in U other than those represented by the other output options. |
| Model | Fast correct | Defer correct | DR | |||
|---|---|---|---|---|---|---|
| Gain | Util. | Gain | Util. | Fast | Defer | |
| Intern | 125 | 68 | 3 | 29 | 57 | 26 |
| Kev | 105 | 109 | 14 | 9 | 12 | 11 |
| SemIf | 128 | 128 | 0 | 0 | 0 | 0 |
| JevK5 | 128 | 128 | 0 | 0 | 0 | 0 |
LLM Reliability
Large language model reliability studies whether outputs remain correct, calibrated, robust, and controllable across prompts, contexts, and deployment conditions.
See all 802 papers