Model judges reward ethics-based refusals; human users penalize them

May 21, 20257 min

Overview

Production Readiness

0.6

Novelty Score

0.5

Cost Impact Score

0.4

Citation Count

0

Authors

Stefan Pasch

Links

Abstract / PDF

Why It Matters For Business

If you use automated LLM judges for benchmarking, training, or model selection, they will tend to reward ethics-based refusals more than real users do; that can produce models that prioritize safety signals over user satisfaction.

Summary TLDR

The paper compares human preference judgments from Chatbot Arena to automatic judgments produced by two LLM judges (GPT-4o and Llama 3 70B). It finds a systematic divergence: model-based judges rate ethics-based refusals (declining a prompt for safety or moral reasons) far more favorably than human users, while evaluations of technical refusals (declining due to model limits) show no consistent divergence. The gap could create feedback loops if LaaJ evaluators are used in training, benchmarking, or selection without human oversight.

Problem Statement

LLM-as-a-Judge (LaaJ) systems are increasingly used to evaluate and steer model behavior. Do these automated judges treat model refusals—especially ethics-motivated refusals—differently than real users, and could that create biased evaluation signals that shape future model behavior?

Main Contribution

Document a consistent evaluation gap where LaaJ judges reward ethics-based refusals more than human users.

Show the gap is robust across two judge models: GPT-4o (proprietary) and Llama 3 70B (open-source).

Quantify the effects with pairwise comparisons from Chatbot Arena (49,938 one-turn pairs) and OLS regressions controlling for length and similarity.

Highlight governance risks: possible normative lock-in if LaaJ judgments are used unchecked in training and benchmarking.

Key Findings

LLM judges give ethics-based refusals much higher win rates than humans do.

NumbersUser win rate 8% → GPT-4o 31% → Llama 3 70B 27%

The estimated penalty for ethical refusals is much smaller under GPT-4o than under human judgment.

NumbersOLS: ethical refusal → -32 percentage points (user) vs -12 pp (GPT-4o); p < 0.001

No comparable divergence exists for technical refusals; judge and user judgments align more closely.

NumbersTechnical refusal win-rate effect ≈ -20 pp (user) and -20 pp (GPT-4o); Llama harsher at -29 pp

Results

User win rate for standard (no-boundary) responses

Value36%

Win rate for ethical refusals (users / GPT-4o / Llama 3 70B)

Value8% / 31% / 27%

Baselinestandard response user win 36%

OLS effect on user win probability from ethical refusal

Value-0.322 (coef)

OLS effect on GPT-4o win probability from ethical refusal

Value-0.115 (coef)

Who Should Care

What To Try In 7 Days

Audit any LaaJ-based evaluation pipeline for refusal-related labels and compare to human ratings on a 100–300 sample.

Add a human-in-the-loop flag for cases labeled as ethics-motivated refusals before using judgments for training.

Log and report refusal types (ethical vs technical) in model cards and evaluation summaries.

Reproducibility

Data Urls

  • Chatbot Arena dataset (Chiang et al., 2024) as used in paper

Data Available

Open Source Status

  • partial

Risks & Boundaries

Limitations

  • Single dataset (Chatbot Arena) may not represent all user populations or prompt types.
  • Only two LaaJ judges tested (GPT-4o and Llama 3 70B); other judges may differ.
  • Descriptive study: does not causally identify training mechanisms that produce the moderation bias.

When Not To Use

  • As definitive proof that human preferences are wrong about safety refusals.
  • To generalize to multi-turn interactions without further testing.
  • To assume all LaaJ systems behave identically across domains and languages.

Failure Modes

  • Normative lock-in if LaaJ signals are used uncritically during training.
  • Over-rewarding ethics-signaling responses that reduce user satisfaction.
  • Mislabeling borderline cases when refusal classifier or annotation scheme is imperfect.

Core Entities

Models

  • GPT-4o
  • Llama 3 70B
  • RoBERTa-based refusal classifier
  • all-MiniLM-L6-v2 (sentence embeddings)

Metrics

  • Win rate
  • Loss rate
  • Tie rate
  • Win/Loss ratio
  • OLS coefficient (percentage-point effect)

Datasets

  • Chatbot Arena (paired model responses dataset)

Benchmarks

  • SORRY-Bench (mentioned)
  • Chatbot Arena comparisons

Context Entities

Models

  • OpenAI alignment training references (RLHF, DPO cited)