ROBBIE: a multi-dataset, multi-metric bias benchmark plus new adversarial prompts and mitigation tests

November 29, 20238 min

Overview

Decision SnapshotNeeds Validation

The benchmark and datasets are useful for lab testing and pre-release audits; mitigation methods are experimental and vary by model size, so treat results as actionable signals not final fixes.

Citations2

Evidence Strength0.70

Confidence0.90

Risk Signals10

Trust Signals

Findings with numeric evidence: 5/5

Findings with evidence refs: 5/5

Results with explicit delta: 2/4

Reproducibility

Status: Code + data available

Open source: Partial

At A Glance

Cost impact: 30%

Production readiness: 60%

Novelty: 60%

Authors

David Esiobu, Xiaoqing Tan, Saghar Hosseini, Megan Ung, Yuchen Zhang, Jude Fernandes, Jane Dwivedi-Yu, Eleonora Presani, Adina Williams, Eric Michael Smith

Links

Abstract / PDF / Code / Data

Why It Matters For Business

ROBBIE helps teams quantify which user groups a generative model may mistreat and compare mitigations quickly; use it to reduce legal, PR, and product harm before deployment.

Who Should Care

Summary TLDR

ROBBIE is a benchmark suite and toolkit for measuring social bias and toxicity in generative LLMs. The paper adds two new resources (AdvPromptSet, HolisticBiasR), evaluates 5 model families across 6 prompt-based metrics and 12 demographic axes, measures demographic term frequency in common corpora, and compares three mitigation methods (prompting, self-debiasing, adversarial triggers). Key findings: biases show up differently depending on dataset and metric; self-debiasing helps smaller models (GPT2-XL) but not always large conversational models (BB3-175B); prompting is a strong baseline for larger models. Code and downsized datasets are open-sourced.

Problem Statement

Current bias evaluations use different datasets and metrics and cover only a few demographic axes. That makes cross-model comparisons and choosing mitigations hard. The paper builds a unified, broader test suite and tests mitigations to give practitioners clearer, comparative guidance.

Main Contribution

ROBBIE: a multi-metric benchmark comparing 6 prompt-based bias/toxicity metrics across 12 demographic axes and 5 LLM families

AdvPromptSet: a large adversarial prompt set for intersectional testing (downsizable release)

Key Findings

Self-debiasing substantially reduces toxicity in a smaller base model (GPT2-XL).

Numbers46% mean reduction on evaluated prompting datasets

Practical UseTry self-debiasing as a cheap, inference-time mitigation on smaller base LLMs before heavier retraining.

Evidence RefTable 6; Section 3.2

Prompting is more effective than self-debiasing on a large conversational model (BB3-175B).

Numbers28% mean reduction in toxicity for BB3-175B

Practical UseFor large chat models, prefer instruction-style prompting or prompt revision to reduce toxicity rather than token-reweighting alone.

Evidence RefSection 3.2; Table 6

Results

MetricValueBaselineDeltaSplit / DatasetEvidenceEvidence Ref
Toxicity rate (example model)GPT2-XL: RTP 1.66%; BOLD 0.35%; ToxiGen v2 11.78%; AdvPromptSet 17.7%; Regard neg. regard 25.1%Table 9 (GPT2-XL)Table 9 reports dataset-specific toxicity/negative-regard percentages for GPT2-XLTable 9
Mitigation effect — self-debiasing (GPT2-XL)Mean toxicity reduced from baseline to 0.59% on RTP and similarly across datasets (46% mean reduction claimed)Baseline mean toxicity (varies by dataset; e.g. RTP 1.66%)46% mean reduction (paper text)Table 6; Section 3.2Table 6 and Section 3.2 report reductions and state 46% average reductionTable 6; Sec.3.2

What To Try In 7 Days

Run the 10k AdvPromptSet sample and HolisticBiasR on your base model to map high-risk subgroups

Apply self-debiasing at inference for smaller base models and compare toxicity rates

Try a few instruction-style prompt templates and measure trade-offs in coherence vs toxicity

Reproducibility

Code AvailableYes
Data AvailableYes
Open Source StatusPartial
LicenseUnknown

Data URLs

Risks & Boundaries

Limitations

English-only datasets; results may not generalize to other languages

AdvPromptSet inherits annotation noise from Jigsaw sources and can include multiple labels per prompt

When Not To Use

As the sole safety check for deployed systems; use along with policy, adversarial testing, and human review

For non-English models or deployment regions without cultural validation

Failure Modes

Mitigations trade off coherence or hide rather than remove bias in some settings

Large models may follow prompts but still marginalize subgroups under other prompt styles

Core Entities

Models

GPT-2OPTBlenderBot 3 (BB3)BLOOMLLaMa

Metrics

BiasScore (percentage of subgroups above background)Toxicity % (Perspective API or ToxiGen classifier)Negative regard % (Regard classifier)Perplexity (text-davinci-002)Latency (ms/token)Peak GPU memory (GB)

Datasets

AdvPromptSet (new)HolisticBiasR (new)RegardRealToxicityPromptsBOLDToxiGen v2WikiText-103 (performance sampling)Jigsaw toxicity datasets (source for AdvPromptSet)

Benchmarks

ROBBIE (this paper's multi-metric suite)