Auditing Conformal Prediction for Language Models Under Inference-Time Model Shift
Organizations: Tongji University, Shanghai, China · Technical University of Darmstadt, Darmstadt, Germany
Abstract
Conformal prediction (CP) for language models is typically evaluated under a matched protocol, in which calibration and deployment use the same post-training inference configuration, such as quantization mode and inference temperature. In deployment, these choices often differ from those used at calibration to meet memory or throughput constraints or serving policies. We argue that this exposes a limitation in current CP evaluation protocols for language models. We formalize the underlying phenomenon as inference-time model shift: a change in the conformal score distribution induced by inference configuration rather than by the input--label distribution, and theoretically characterize how it breaks split-conformal exchangeability even when the task distribution and trained model are unchanged. We then evaluate its consequences across 8 language models, 4 finite-label benchmarks, and 12 inference configurations. We find that matched evaluation can substantially overstate deployment-time coverage, and that the effect is heterogeneous across models and datasets. We argue that inference configuration should be reported as a first-class experimental axis in CP evaluations for language-model systems.
Figures & tables
Appendix figures & tables14 assets
Supplementary material from the paper’s appendix.
Appendix
| Work | Primary focus | Relation to our setting |
|---|---|---|
| Kumar et al. [ 23 ] | CP for multiple-choice QA with LLMs | Finite-label LLM setting, but not calibration–deployment mismatch across inference configurations. |
| Quach et al. [ 31 ] | Conformal language modeling for generated candidate sets | CP for generation under a fixed score-generating setup. |
| Mohri and Hashimoto [ 27 ] | Conformal factuality guarantees | Correctness/factuality guarantees, not inference-configuration-induced score shift. |
| Cherian et al. [ 5 ] | Enhanced conformal validity for LLM outputs | Stronger validity notions for LLM outputs, but not quantization/temperature mismatch. |
| Su et al. [ 35 ] | API-only CP without logit access | Black-box uncertainty scores with the inference interface treated as fixed. |
| Wang et al. [ 42 ] | Correctness coverage for open-ended generation | Open-ended correctness coverage, not coverage transport across inference configurations. |
| Dataset | |||
|---|---|---|---|
| CommonsenseQA | 6000 | 6000 | 12000 |
| DBPedia-14 | 8000 | 50000 | 58000 |
| MMLU-Pro | 2500 | 8000 | 10500 |
| MobileActions | 2500 | 5000 | 7500 |
| Model | Coverage | Set size | coverage | Avg. |
|---|---|---|---|---|
| Qwen2.5-1.5B | 0.962 0.023 | 2.652 0.402 | 0.896 0.062 | 4.582 0.605 |
| Qwen2.5-3B | 0.998 0.002 | 4.957 0.012 | 0.945 0.046 | 5.120 1.795 |
| Qwen2.5-7B | 0.954 0.015 | 2.007 0.198 | 0.946 0.027 | 3.762 0.635 |
| DeepSeek-R1-7B | 0.952 0.013 | 3.404 0.198 | 0.917 0.018 | 5.082 0.376 |
| Gemma-2-2B | 0.973 0.008 | 3.573 0.139 | 0.878 0.038 | 4.728 0.135 |
| Llama-3.2-3B | 0.967 0.013 | 2.826 0.223 | 0.903 0.067 | 6.965 0.382 |
| Model | Coverage | Set size | coverage | Avg. |
|---|---|---|---|---|
| Qwen2.5-1.5B | 0.947 0.008 | 2.505 0.319 | 0.967 0.011 | 5.595 0.595 |
| Qwen2.5-3B | 0.946 0.002 | 2.342 0.034 | 0.975 0.004 | 6.142 0.183 |
| Qwen2.5-7B | 0.966 0.000 | 0.993 0.000 | 0.955 0.008 | 4.703 0.548 |
| DeepSeek-R1-7B | 0.956 0.003 | 3.026 0.200 | 0.993 0.002 | 3.032 0.022 |
| Gemma-2-2B | 0.987 0.005 | 10.787 0.672 | 0.972 0.001 | 3.042 0.030 |
| Llama-3.2-3B | 0.947 0.004 | 3.576 0.266 | 0.984 0.000 | 3.076 0.028 |
| Model | Coverage | Set size | coverage | Avg. |
|---|---|---|---|---|
| Qwen2.5-1.5B | 0.954 0.003 | 8.533 0.022 | 0.963 0.007 | 6.411 0.306 |
| Qwen2.5-3B | 1.000 0.000 | 9.464 0.017 | 0.926 0.013 | 6.281 0.342 |
| Qwen2.5-7B | 1.000 0.001 | 9.461 0.018 | 0.942 0.008 | 6.511 0.041 |
| DeepSeek-R1-7B | 0.958 0.007 | 8.491 0.095 | 0.969 0.003 | 5.068 0.033 |
| Gemma-2-2B | 0.972 0.001 | 8.656 0.033 | 0.953 0.026 | 8.149 0.143 |
| Llama-3.2-3B | 0.957 0.004 | 8.152 0.075 | 0.950 0.028 | 8.069 0.190 |
| Model | Coverage | Set size | coverage | Avg. |
|---|---|---|---|---|
| Qwen2.5-1.5B | 0.940 0.010 | 1.049 0.029 | 0.947 0.008 | 11.652 0.050 |
| Qwen2.5-3B | 0.961 0.001 | 1.265 0.008 | 0.969 0.004 | 6.037 0.033 |
| Qwen2.5-7B | 0.955 0.001 | 0.998 0.000 | 0.975 0.004 | 11.808 0.019 |
| DeepSeek-R1-7B | 0.946 0.006 | 1.277 0.035 | 0.952 0.011 | 8.161 1.169 |
| Gemma-2-2B | 0.942 0.003 | 1.674 0.014 | 0.968 0.004 | 3.115 0.012 |
| Llama-3.2-3B | 0.943 0.007 | 1.451 0.084 | 0.978 0.008 | 4.453 0.624 |