Auditing evaluation artifacts and data leakage in large language model systems for rare disease diagnosis
Organizations: The Children’s Hospital, Zhejiang University School of Medicine, Hangzhou, 310052, China. · The College of Biomedical Engineering and Instrument Science, Zhejiang University, Hangzhou, 310027, China.
Abstract
Augmented large language model (LLM) systems have reported high benchmark accuracies in rare disease diagnosis, yet their real-world clinical utility remains unproven. A recent meta-analysis flagged augmented LLM diagnostic evaluations as having a high risk of bias due to suspected data leakage; however, the precise impact of these vulnerabilities on model inference has yet to be fully quantified. In this study, we present a comprehensive empirical audit to quantify evaluation artifacts across prevailing AI paradigms, using a repository of over 60,000 cases from diverse public and independent clinical cohorts. By reconstructing a state-of-the-art agentic framework, we demonstrate that candidate-space contamination artificially inflates performance: enforcing strict cross-dataset isolation resulted in a marked performance decline, with the cross-dataset mean Recall@1 decreasing from 54.3% (under conventional one-vs-rest evaluation) to 40.3% (Hedges' g = 0.94). Similar spatial overfitting in supervised classifiers caused diagnostic accuracy to drop from an internal mean of 42.9% to 16.7% across external cohorts (Cohen's d = 2.01). Furthermore, we quantify how LLMs infer diagnoses by exploiting retrospective therapeutic cues in clinical narratives, and how temporal misalignment in foundational knowledge bases leads to performance fluctuations. We conclude that prevailing evaluation protocols for augmented LLM systems inadvertently reflect data leakage rather than genuine medical reasoning. To address these systematic artifacts, we propose a rigorous evaluation framework - coupling strict data-isolation protocols with standardized benchmarking safeguards - to ensure future diagnostic AI for rare diseases is evaluated on actual clinical robustness.
Figures & tables
| No. | Dataset | Country/Region | Case-level PMID | Total Cases | Unique Diseases | Mean HPO Terms |
| Literature-derived cohorts | ||||||
| - | RareArena | Multi-country | 49,760 | 4,597 | 11.5 | |
| I | Phenopacket | Multi-country | 8,101 | 516 | 9.3 | |
| II | LIRICAL | Multi-country | 384 | 262 | 11.2 | |
| III | PhenoDP | Multi-country | 130 | 72 | 14.2 | |
| IV | RDmaster | Multi-country | 201 | 62 | 10.0 | |
| System (year) | AI Paradigm | Diagnostic Features | Scope | CC | SO | PCL | TKB | Overall Risk |
| DeepRare (2026) 51 | Agent | HPO Terms # & WES | P | + | – | – | + | + |
| RareAgents (2026) 6 | Agent | HPO Terms & Symptoms | P | + | – | – | + | + |
| MINT (2026) 43 | FT LLM | HPO Terms & Demographics | P | – | + | – | + | + |
| RareSeek (2025) 50 | RAG & FT LLM | Clinical Text | P | – | + | + | + | + |
| Deep-DxSearch (2025) 53 | Agent & RL | Clinical Text | P | + | + | – | + | + |
| MEDDxAgent (2025) 34 | Agent | HPO Terms | R | + | – | – | + | + |
| Evaluation Artifact | Manifestation | Proposed Evaluation Guideline |
| Temporal Knowledge Bias | Inconsistencies in the KB versions that models rely on lead to substantial performance fluctuations, with diagnostic accuracy shifting based on version differences. | Chronological Synchronization: Enforce a single, chronologically aligned KB version across all models to prevent KB version-driven evaluation artifacts. |
| Spatial / Institutional Overfitting | Models memorize institutional documentation habits, cohort-specific diagnosis-phenotype associations and disease prevalence rather than learning generalizable phenotype-disease profiles. | Cross-institutional Validation: Replace standard intra-dataset splits with mandatory out-of-distribution validation using independent, institutionally isolated clinical cohorts. |
| Candidate-space & Literature Contamination | Retrieval systems exploit structural data leakage by matching query cases to homologous records originating from the exact same publication, family pedigree, or institution. | Source-level Deduplication: Exclude structurally and institutionally related cases from the reference bank, enforcing PMID-level cross-deduplication for literature-derived cohorts. |
| Post-Hoc Cue Leakage | Retrospective clinical narratives embed downstream therapeutic interventions and targeted lab results, allowing LLMs to infer diagnoses retrospectively. | Semantic Decoupling & Sanitization: Benchmark primarily using standardized phenotypic profiles such as HPO terms. When evaluating raw clinical texts, systematically redact post-hoc therapeutic and administrative cues. |
| Post-hoc Hypothesis Shifting | Iterative prompt engineering and hyperparameter tuning directly on the evaluation set cause benchmark overfitting and compromise generalizability. | Blinded Evaluation & Pre-registration: Lock model weights, prompt templates, and evaluation pipelines prior to testing. Utilize independent validation sets to prevent test-set optimization. |
| Dataset Heterogeneity | Substantial variations in diagnostic difficulty and disease spectrum across case datasets make single-source evaluations unrepresentative. | Multi-tiered Cross-dataset Auditing: Diagnostic systems must be benchmarked across multi-tiered datasets to reliably verify generalization across diverse data origins and clinical complexities. |
Clinical Language Model Evaluation
Clinical language model evaluation measures whether AI systems are accurate, safe, fair, and useful across medical tasks and care settings.
See all 419 papers