SHIFT-JEV: Certified Abstention and Gain-Gated Continual Adaptation for LLM-Based Decision Models under Distribution Shift
Authors: Muhammad Atif Saeed, Azka Atiq, Adarsh Kumar, Akhtar Jamil, Uzair Iqbal, Roland Aydin
Organizations: Department of AI & Data Science, National University of Computer & Emerging Sciences, Islamabad, Pakistan · Data Engineer, University of Arkansas at Little Rock, Arkansas, USA · Department of Computer Science, National University of Computer & Emerging Sciences, Islamabad, Pakistan · Department of Software Engineering, Faculty of Computer Science & Information Technology, University of Malaya, Malaysia · German Research Center for Artificial Intelligence (DFKI), Saarbrücken, Germany
Large language models (LLMs) can act as decision models that return a probability distribution over a fixed set of options, but deployed decision models face domain, label-prior, emerging-class and candidate-set shift. We study how such models fail under shift and propose SHIFT-Jev, a monitoring, abstention and continual-adaptation procedure for them. It scores the risk of each decision from uncertainty, format and option-consistency signals, certifies abstention thresholds with Learn-then-Test, monitors the decision stream with drift and label-shift detectors, and accepts a model update only when an expected-gain gate finds a significant held-out improvement without loss on earlier regimes. On a benchmark of ten shifted test environments with Qwen3-0.6B and Qwen3-4B (three seeds each) and Phi-4-mini, fine-tuning with KL anchors and temperature scaling lowers calibration error under shift from 0.289 to 0.087. At a target risk of 10%, a learned uncertainty score with a certified threshold exceeds the target in 3 to 5 of 27 environment-seed tests, against 5 to 15 for a max-probability score with the same certification and 9 to 14 for conformal prediction sets; drift-based routing changes little. A chi-squared test on predicted labels detects 95 to 99% of class-prior shifts that confidence- and embedding-based detectors miss. In continual adaptation, SHIFT-Jev reaches 70.5% accuracy on Qwen3-0.6B, above replay, LwF, EWC and fine-tuning baselines in every seed, whereas on Qwen3-4B its conservative gate leaves it 0.4 to 1.4 points behind them.
Figures & tables
Figure 1: Overview of Shift-Jev . Stage 1 : the LLM-as-Jev decision model scores numbered options through a prefix-free trie and exposes decision probabilities, the probability mass on legal identifier tokens and a state embedding. Stage 2 : in the scoring lane, uncertainty, format and consistency features give the risk score r(x) ; in the routing lane, an option-invariant drift distance assigns the input to a known regime g or to unknown and drives the stream detectors. The model answers only if r(x) is below the threshold certified for that regime, or below the conservative τshift for unknown inputs and after an alarm. Stage 3 : a labelled batch from a new regime drives a severity-scaled LoRA update that is kept only if it significantly improves held-out accuracy without losing more than 5 points on earlier regimes.
Table 2: Evaluation environments and the use of their data: training (Tr), temperature fitting (Val), risk-model fitting and certification (Cal) and testing (Test).
System
BoolQ
MMLU
MMLU-Pro
ARC-C
WinoGr.
SciQ
Macro-6
Banking77
ECE
Base paper, training-free
72.60
46.75
22.25
54.17
53.60
97.75
57.85
22.21
–
This study, training-free (B1)
73.80
45.17
24.00
54.00
51.40
94.25
57.10
20.48
0.246
Base paper, LoRA λ =1
72.40
46.00
20.80
57.80
55.00
97.80
58.30
54.90
–
Base paper, LoRA λ =0.01
72.80
47.00
21.50
57.20
55.20
97.50
58.53
59.00
–
Base paper, full FT λ =1
74.40
47.83
20.50
60.33
53.60
97.75
59.07
60.49
–
This study, LoRA λ =1 (B2, 3 seeds)
77.87
46.19
23.71
61.83
53.00
95.08
59.61 ± 0.23
20.41
0.120
Table 3: Reproduction of LLM-as-Jev with Qwen3-0.6B on the base paper’s external benchmarks and sample sizes (accuracy, %). ECE averages the six macro tasks.
Figure 2: Per-task reproduction of the base paper on Qwen3-0.6B. Hollow markers: reported; filled: this study (b: mean and range over 3 seeds). The Banking77 gap in (b) reflects intent data in the base paper’s training mixture, which our ID mixture excludes by design.
Qwen3-0.6B
Qwen3-4B-Instruct
Environment
Shift
n
Acc B1
ECE B1
Acc B3
ECE B3
Acc B1
ECE B1
Acc B3
ECE B3
In-distribution
—
1200
73.3
0.178
78.5 ± 1.1
0.018 ± 0.004
91.1
0.084
91.4 ± 0.3
0.038 ± 0.003
Banking77
Domain
500
18.4
0.472
19.2 ± 0.9
0.108 ± 0.011
55.4
0.400
56.3 ± 0.2
0.128 ± 0.034
Twitter-Fin
Domain
500
27.6
0.582
38.2 ± 0.7
0.114 ± 0.012
60.2
0.375
59.5 ± 0.8
0.167 ± 0.009
MMLU
Domain
500
43.4
0.346
46.5 ± 1.1
0.095 ± 0.017
71.0
0.260
71.3 ± 0.3
0.077 ± 0.008
AG prior ρ =10
Class prior
300
81.7
0.136
90.1 ± 1.0
0.044 ± 0.015
92.3
0.078
91.3 ± 0.9
0.044 ± 0.006
Table 4: RQ1. Accuracy (%) and ECE of the frozen model (B1, raw) and the fine-tuned, temperature-scaled model (B3; mean ± s.d. over 3 seeds) per environment.
Figure 3: Expected calibration error per environment for the frozen model (B1) and the fine-tuned, temperature-scaled model (B3; mean and s.d. over 3 seeds): (a) Qwen3-0.6B, (b) Qwen3-4B-Instruct.
Table 5: Systems B1–B6. Shift metrics average the nine shifted environments; abstention at α=0.10 , δ=0.1 . The calibration gains of B2 and B3 come from fine-tuning with KL anchors and temperature scaling; the reliability layer (B4, B5) does not change predictions or calibration. B6 is evaluated on the continual evaluation sets: ID accuracy after the last stage (3 seeds) and, marked † , coverage and realized risk on the ID regime with its recertified threshold (seed 1; Table 15 ).
Table 6: Abstention on B2 under shift (Qwen3-0.6B; 3 seeds × 9 shifted environments = 27 tests per α ). “Pooled” thresholds are certified by LTT on ID and proxy-shift calibration data together, “ID-only” on ID data alone; B5 uses the ID threshold and routes unknown inputs to τshift . Coverage and realized risk average the nine environments (mean ± s.d. over seeds); a coverage of 0 means that no threshold could be certified and the rule abstains on everything. Violations count (environment, seed) tests whose realized risk exceeds α ; because the test items are shared across seeds, the counts are descriptive. MSP and LAC rank inputs by the same score and therefore have the same AURC.
Table 7: Abstention on B2 under shift (Qwen3-4B-Instruct-2507; 3 seeds × 9 shifted environments = 27 tests per α ). “Pooled” thresholds are certified by LTT on ID and proxy-shift calibration data together, “ID-only” on ID data alone; B5 uses the ID threshold and routes unknown inputs to τshift . Coverage and realized risk average the nine environments (mean ± s.d. over seeds); a coverage of 0 means that no threshold could be certified and the rule abstains on everything. Violations count (environment, seed) tests whose realized risk exceeds α ; because the test items are shared across seeds, the counts are descriptive. MSP and LAC rank inputs by the same score and therefore have the same AURC. The 4B model has no consistency signal, so B5 without the format signal reduces to the uncertainty risk with routing and is omitted.
Table 8: Isolating the threshold rule from the risk score (both Qwen backbones, 3 seeds, 27 tests per α ). All thresholds are re-certified offline from the stored calibration splits of each run. Routing changes a threshold only when τproxy<τID , which never happened at α=0.05 ; “ τshift for all inputs” applies the stricter of the ID and proxy thresholds everywhere.
Figure 4: (a, b) Selective-risk violations out of 27 (environment, seed) tests at each target risk level. At α=0.05 , B5 abstains on (almost) all inputs (coverage 0.0% and 1.4%), so its zero count there is vacuous; see Tables 6 and 7 . (c) Mean coverage against mean realized risk at α=0.10 (error bars: s.d. over seeds); the dashed line marks the target.
Figure 5: Risk–coverage curves on six shifted environments (Qwen3-0.6B, seed 1) for MSP, the uncertainty risk score (B4) and the Shift-Jev risk score (B5). The dotted line marks α=10% .
Model
Perturbation
Type
Acc B1 (%)
Acc B2 (%)
Rotation agreement (%)
Routed to τshift (%)
B4 abstain / risk (%)
B5 abstain / risk (%)
0.6B
Option rotation
harmless
70.6
77.5
87.7
0
38.7 / 9.6
49.5 / 8.7
0.6B
Label paraphrase
harmless
70.6
77.1
88.9
0
35.9 / 10.2
47.7 / 8.8
0.6B
Near-duplicate distractor
harmless
59.3
72.1
77.0
0
47.1 / 6.5
61.8 / 2.6
0.6B
Gold option removed
task-altering
–
–
81.9
0
32.8 / 100.0
42.2 / 100.0
4B
Option rotation
harmless
92.6
90.2
–
0
9.3 / 5.9
10.8 / 4.4
4B
Label paraphrase
harmless
89.5
90.2
–
0
9.2 / 7.2
5.9 / 6.2
Table 9: Candidate-set perturbations (seed 1). For gold-removed items every answer is wrong, so abstention should be high. Rotation agreement is computed only at 0.6B (the consistency signal is not used at 4B).
Model
Detector
Domain shift
Emerging classes
Class-prior shift
Candidate perturbation
False alarm (%)
0.6B
CUSUM ⋅ max-probability
98 (6) ⋅ 99
98 (11) ⋅ 100
0 ⋅ 0
34 (81) ⋅ 18
2
0.6B
CUSUM ⋅ entropy
33 (19) ⋅ 25
0 ⋅ 0
0 ⋅ 0
9 (88) ⋅ 5
4
0.6B
CUSUM ⋅k NN drift
97 (12) ⋅ 98
98 (7) ⋅ 98
0 ⋅ 1
1 (90) ⋅ 1
6
0.6B
CUSUM ⋅ Shift-Jev risk
99 (6) ⋅ 98
100 (7) ⋅ 98
0 ⋅ 0
36 (57) ⋅ 17
7
0.6B
KS window ⋅ Shift-Jev risk
97 (13) ⋅ 98
100 (16) ⋅ 100
0 ⋅ 0
31 (90) ⋅ 15
3
0.6B
χ2⋅ predicted labels (BBSE)
97 (10) ⋅ 96
94 (10) ⋅ 96
95 (37) ⋅ 80
70 (96) ⋅ 27
6
Table 10: Stream-level shift detection: detection rate (%) at severity 100% (mean delay in items) ⋅ at 50%, 50 streams per environment and severity. Every alarm threshold is calibrated to ≤ 5% false alarms on 200 simulated no-shift streams; the last column is the observed false-alarm rate on 50 fresh no-shift streams per pool.
Figure 6: Detection rate against shift severity for four detectors (top: Qwen3-0.6B; bottom: Qwen3-4B; 50 streams per point). Only the predicted-label χ2 test detects class-prior shift.
Environment
0.6B B4 cov / risk
0.6B Shift-Jev cov / risk
0.6B violating streams B4 / Shift-Jev (%)
4B B4 cov / risk
4B Shift-Jev cov / risk
4B violating streams B4 / Shift-Jev (%)
Banking77
0.0 / 0.0
0.0 / 0.0
0 / 0
0.0 / 0.0
0.0 / 0.0
0 / 0
Twitter-Fin
0.0 / 0.0
0.0 / 0.0
0 / 0
0.0 / 0.0
0.0 / 0.0
0 / 0
MMLU
18.2 / 27.3
9.2 / 9.9
98 / 44
66.5 / 16.0
59.3 / 12.5
100 / 84
AG prior ρ =10
87.3 / 5.4
75.8 / 4.1
0 / 0
93.2 / 6.1
88.7 / 4.5
4 / 0
AG prior ρ =100
89.0 / 7.1
78.0 / 6.5
6 / 4
93.5 / 8.6
86.3 / 5.5
20 / 0
CLINC-OOS
14.0 / 7.2
4.6 / 8.6
20 / 38
0.0 / 0.0
0.0 / 0.0
0 / 0
Table 11: Selective risk after a change point (50 streams per environment, α=0.10 , seed 1). Shift-Jev switches to τshift after a drift-CUSUM or label- χ2 alarm.
Method (3 seeds)
Avg acc (%)
BWT (pts)
Forgetting (pts)
ID
Banking77
Twitter-Fin
CLINC
Stages adapted
Train (min)
Shift-Jev − row (pts)
Seeds Shift-Jev better
p (items)
Naive fine-tuning
66.65 ± 1.17
− 1.1 ± 1.0
1.1 ± 1.0
76.9 ± 0.9
42.7 ± 2.9
60.5 ± 2.2
86.5 ± 2.0
4.0/4
9.3
+3.83 ± 1.88
3/3
1.1×10−9
EWC
66.48 ± 2.10
0.4 ± 1.6
− 0.3 ± 1.7
77.2 ± 0.8
42.0 ± 4.6
59.9 ± 3.5
86.8 ± 1.6
4.0/4
9.6
+4.00 ± 2.88
3/3
6.3×10−8
Seq-FT + KL anchors (base paper)
66.33 ± 1.92
0.3 ± 1.0
− 0.2 ± 1.1
77.1 ± 0.9
41.8 ± 4.1
59.4 ± 2.8
87.0 ± 1.3
4.0/4
9.5
+4.15 ± 2.74
3/3
1.2×10−8
Experience replay
66.67 ± 1.71
− 0.3 ± 2.7
1.4 ± 2.5
76.2 ± 1.1
46.2 ± 3.2
56.5 ± 5.7
87.8 ± 1.0
4.0/4
13.4
+3.81 ± 2.53
3/3
6.7×10−7
LwF (tree-local)
68.10 ± 1.71
0.3 ± 1.3
− 0.3 ± 1.3
77.2 ± 1.3
43.6 ± 2.5
63.0 ± 2.4
88.6 ± 2.7
4.0/4
9.4
+2.38 ± 2.52
3/3
8.5×10−4
Shift-Jev (expected-gain gate)
70.48 ± 0.88
3.0 ± 0.9
− 2.1 ± 1.9
77.6 ± 0.9
54.7 ± 1.9
61.3 ± 1.9
88.3 ± 0.6
3.0/4
12.4
–
–
–
Table 12: Continual adaptation on Qwen3-0.6B. Stream: Banking77 → control (no shift) → Twitter-Fin → CLINC-OOS, starting from B2. Final accuracy (%) on 400 held-out items per regime; mean ± s.d. over 3 seeds. The last three columns compare Shift-Jev with each row: the per-seed paired difference in average accuracy (mean ± s.d.), the number of seeds in which Shift-Jev is better, and a two-sided sign test on the 1,600 unique evaluation items using each item’s correctness averaged over the three seeds (the evaluation items are shared across seeds, so seeds are not pooled as independent pairs).
Figure 7: Continual adaptation on Qwen3-0.6B. (a) Final average accuracy and forgetting (mean ± s.d., 3 seeds; shaded: Shift-Jev ablations). (b) Final accuracy per regime: the gain over the baselines comes from Banking77, and the earlier gate loses CLINC150, the regime it never adapts to.
Model
Regime
Accepted
Stopped by probe
Gain (pts)
Sign-test p
v4 trigger
v4 gate adapted
Qwen3-0.6B
Banking77
3/3
0/3
18.8 to 32.5
1.3×10−6 to 2.0×10−3
drift+perf, perf
3/3
Control (no shift)
0/3
3/3
− 3.8 to 0.0
0.66 to 0.97
none
0/3
Twitter-Fin
3/3
0/3
11.2 to 15.0
2.1×10−3 to 0.025
perf
3/3
CLINC-OOS
3/3
0/3
17.5 to 26.2
4.8×10−7 to 6.6×10−4
none
0/3
Qwen3-4B
Banking77
3/3
0/3
10.0 to 12.5
3.2×10−3 to 0.029
perf
–
Control (no shift)
0/3
2/3
− 2.5 to 1.2
0.5 to 1
none
–
Table 13: Expected-gain gate decisions of Shift-Jev (3 seeds per backbone). Gain = held-out accuracy gain (points) of the best candidate on 80 new-regime items, with its one-sided sign-test p ; an update is kept iff p<0.10 and old-regime accuracy drops by ≤ 5 points. “Trigger” = the v4 shift test’s outcome (logged only); the last column shows how often the v4 shift gate adapted.
Figure 8: All expected-gain gate decisions: held-out gain of the best candidate against its one-sided sign-test p -value (log scale). Filled markers: accepted; open markers: rolled back. On Qwen3-4B the Twitter-Fin gains of 2.5–7.5 points do not reach p<0.10 on 80 items.
Method (3 seeds)
Avg acc (%)
BWT (pts)
Forgetting (pts)
ID
Banking77
Twitter-Fin
CLINC
Stages adapted
Train (min)
Shift-Jev − row (pts)
Seeds Shift-Jev better
p (items)
Naive fine-tuning
81.22 ± 0.55
0.8 ± 1.4
− 0.4 ± 1.4
89.2 ± 1.1
66.9 ± 1.8
73.0 ± 1.0
95.8 ± 0.5
4.0/4
15.0
− 1.36 ± 0.59
0/3
0.31
EWC
81.00 ± 1.01
1.0 ± 1.2
− 0.5 ± 0.9
89.3 ± 1.2
67.0 ± 1.2
72.0 ± 2.0
95.7 ± 0.3
4.0/4
15.2
− 1.14 ± 0.10
0/3
0.055
Seq-FT + KL anchors (base paper)
80.28 ± 1.12
0.7 ± 1.3
− 0.3 ± 1.0
89.8 ± 1.6
64.7 ± 2.2
71.3 ± 1.5
95.3 ± 0.3
4.0/4
15.1
− 0.42 ± 0.22
0/3
0.94
Experience replay
80.33 ± 0.76
− 0.4 ± 1.1
1.6 ± 0.6
89.9 ± 0.8
67.7 ± 1.2
68.7 ± 1.8
95.1 ± 1.3
4.0/4
18.6
− 0.47 ± 1.43
1/3
0.94
LwF (tree-local)
81.00 ± 0.60
1.0 ± 0.7
− 0.6 ± 0.7
89.7 ± 1.2
66.0 ± 0.9
72.9 ± 1.0
95.4 ± 0.8
4.0/4
15.0
− 1.14 ± 0.50
0/3
0.14
Shift-Jev (expected-gain gate)
79.86 ± 1.10
1.9 ± 1.0
− 1.8 ± 1.0
89.0 ± 0.9
68.6 ± 1.0
65.9 ± 3.4
96.0 ± 0.3
2.0/4
17.9
–
–
–
Table 14: Continual adaptation on Qwen3-4B-Instruct-2507 (3 seeds; 300 held-out items per regime). The last three columns are computed as in Table 12 , with 1,200 unique evaluation items; negative differences mean that Shift-Jev is worse.
Figure 9: Qwen3-4B-Instruct: accuracy on each regime after every stage (mean of 3 seeds). Shift-Jev keeps ID and Banking77 stable and is best on CLINC150, but stays at its starting level on Twitter-Fin after rejecting that update.
Model
Method
Eval set
Acc (%)
ID-only τ
B4 pooled τ
B4 regime τ
Shift-Jev (B5)
0.6B
Shift-Jev
ID
76.5
53.8 / 6.5
62.0 / 8.9
59.8 / 11.3
64.5 / 11.6
Banking77
56.0
0.0 / 0.0
0.0 / 0.0
0.0 / 0.0
0.0 / 0.0
Twitter-Fin
60.2
0.0 / 0.0
0.0 / 0.0
1.2 / 40.0
1.2 / 40.0
CLINC-OOS
89.0
0.0 / 0.0
0.0 / 0.0
43.2 / 4.0
44.5 / 4.5
Experience replay
ID
77.0
45.2 / 5.0
62.7 / 9.6
51.5 / 9.7
57.5 / 10.0
Banking77
45.0
0.0 / 0.0
0.0 / 0.0
0.0 / 0.0
0.0 / 0.0
Table 15: Reliability after continual adaptation (B6, seed 1): coverage / realized risk (%) at α=0.10 on the continual evaluation sets after the last stage. Each adapted regime receives its own certified threshold.
Figure 10: Scale and model family. (a) Frozen accuracy on the base paper’s external benchmarks. (b) ECE of the frozen models under shift. (c) Abstention when the correct option is removed (bars: mean of 3 seeds; dots: individual seeds).
Anchor weight
ID acc (%)
ID ECE
Banking77
MMLU
SciQ
KL start
KL answer
Text acc (%)
Text ≡ score (%)
Runaway replies
λ = 1
79.8
0.057
18.6
45.6
93.0
0.0002
0.0034
81
100
0/100
λ = 0.1
79.8
0.066
18.2
45.6
92.7
0.0008
0.0043
80
100
0/100
λ = 0
80.2
0.066
18.8
46.6
92.7
0.6204
0.2329
81
100
85/100
Table 16: Base-paper anchor-weight ablation on Qwen3-0.6B (seed 1).
K
Acc (%)
AURC B4
AURC B5
ms/item
5
81.2
0.056
0.052
49
20
62.0
0.193
0.198
115
77
18.6
0.695
0.693
383
Table 17: Sweeps on Qwen3-0.6B (seed 1). Left: candidate-set size on Banking77. Middle: labelled data for one Shift-Jev stage on Banking77 (the gate rejects the 75-item update). Right: adapter configuration (shift accuracy over nine environments; AURC of B5).
Figure 11: (a) KL divergence to the base model at the reply start and after the answer, by anchor weight (log scale). (b) Runaway text-mode replies out of 100. (c) Accuracy and latency against candidate-set size on Banking77.
Appendix figures & tables4 assets
Supplementary material from the paper’s appendix.
Appendix
System
BoolQ
MMLU
MMLU-Pro
ARC-C
WinoGr.
SciQ
Macro-6
Banking77
ECE (6)
Base paper, Qwen3.5-4B, training-free
88.00
77.08
47.12
93.33
66.20
99.75
78.58
69.03
–
Base paper, Qwen3.5-4B, LoRA λ =1
88.20
77.00
46.90
92.70
68.80
100.00
78.93
75.40
–
Ours, Qwen3-4B-Instruct-2507, B1
87.20
70.25
45.00
90.33
62.80
99.00
75.76
57.30
0.220
Ours, Qwen3-4B-Instruct-2507, B2 (seed 1)
88.20
69.42
45.00
90.17
62.20
99.25
75.71
57.10
0.105
Ours, Phi-4-mini-instruct, B1
85.60
65.17
39.25
84.33
63.60
98.00
72.66
55.80
0.111
Appendix
Table 18: External benchmarks for the larger backbones (accuracy, %; Banking77 = fixed random 1,000 of 3,080 items). The paper’s 4B model is Qwen3.5-4B.
Jev-style decision models have gained surging traction by making decision-making dramatically faster and more efficient, returning categorical probability distributions over predefined options without generating free-form text. However, because Jev's architecture and training methodologies remain proprietary, how to replicate these capabilities effectively remains an open question. In this work, we investigate the extent to which general-purpose LLMs already possess this capability out of the box, and when fine-tuning is actually necessary. We present LLM-as-Jev, an architecture-preserving framework offering both a training-free inference recipe and a fine-tuning objective with KL-divergence anchors. Across Qwen3.5-4B and Qwen3-0.6B, we find that modern LLMs are inherently effective decision models: off the shelf, frozen models match or exceed existing training-free readouts on the same 4B backbone, scale to arbitrary option counts, and natively handle multimodal decisions. They also seamlessly inherit the backbone's thinking mode: while Jev was introduced as a System 1 model, "Thinking Jev" leverages budgeted test-time reasoning to boost accuracy on challenging tasks without training. Fine-tuning provides targeted gains for smaller models and complex routing, while our KL anchors prevent behavioral degradation in general text generation.
Typed decision models (TDMs) return a probability over caller-defined options, and Jev is described by its vendor as calibrated. But in deployment class frequencies change, so calibration measured on a fixed test set need not hold where thresholds are applied. Existing evaluations leave two gaps: the gains of vendor decision training have not been separated from those of the backbone under an identical readout, and TDMs have been tested only at the test set's class distribution. We ask whether decision training improves a model over its own backbone, and whether a TDM's calibration and thresholds withstand prevalence (label) shift as well as a fine-tuned classifier's. We compare three TDMs (Jev, Tev1-4B, Nimble-9B), their base models and two trained classifiers on identical decisions from five public datasets under simulated shift, with 35 paired tests fixed before any test was computed. First, decision training is not uniformly beneficial: Nimble-9B, which differs from Qwen3.5-9B only by a LoRA adapter, is better calibrated on intent tasks but 12.0 Macro-F1 points worse on financial sentiment. Second, under moderate shift Jev's expected calibration error (ECE) and threshold risk grow significantly more than a fine-tuned DeBERTa's only on financial sentiment, by 1.7 and 2.5 percentage points; averaged over 2,000 shift scenarios (exploratory), the gap is at most one point on every dataset. Third, EM prior correction with the model's mean development prediction as its prior needs no labels and lowers Jev's ECE under shift by 2.7 and 1.8 points on the two datasets where it is highest, although labelled recalibration lowers it far more. The three TDMs we tested are neither uniformly better than their backbones nor uniquely fragile under shift; for calibration, their main weakness is the miscalibration they already have without shift. We release all inputs, code and outputs.
Abdul Rahman Iqbal, Muhammad Fawad Nasim, Amir Saleem
Faculty of Computer Science and Information Technology, The Superior University, Lahore, Pakistan · Independent Researcher
Conformal prediction (CP) is a distribution-free framework for uncertainty quantification that has recently been adapted to large language models (LLMs), providing prediction sets with finite-sample coverage guarantees under exchangeability. Yet for LLMs, nonconformity scores are often induced by an inference pipeline, not just a fixed model, making them depend not only on the data distribution but also on configurable factors such as the prompt template, decoding parameters, and deployment setting. Since such configurations are routinely modified in practice but rarely treated as a source of shift, their impact on CP validity remains poorly understood. We call this configuration shift and study it systematically along three axes: prompt template, decoding temperature, and weight quantization. In a broad empirical study spanning 9 LLMs, 4 datasets, and 4 nonconformity scores, we find that configuration shift consistently erodes CP validity, often driving empirical coverage below the target. By contrast, efficiency is largely preserved: valid prediction sets remain close in size to the i.i.d. baseline. We derive coverage lower bounds that attribute this loss to a discrepancy between calibration and test score distributions, and use their finite-sample plug-in versions as empirical diagnostics of shift severity. We further show that these findings lead to practical mitigations: bound-inspired recalibration is effective with limited test examples, while fragility-aware calibration ensembling recovers much of the lost coverage without test data.
Yuqicheng Zhu, Jialin Yu, Lin Li +7
University of Stuttgart · Robert Bosch GmbH · University of Oxford +4