Contents
  1. Part I — Invocation-time behavior
    1. What a prompt changes
    2. Turn a request into a task contract
      1. From vague request to assessable task
  2. Part II — Instructions and examples
    1. From zero-shot to few-shot
    2. What examples specify
      1. Different information from similar examples
  3. Part III — Development
    1. Turning points in task specification
      1. Selected turning points
  4. Part IV — Model-visible evidence
    1. Choose examples for coverage
      1. A practical selection pass
    2. Order and format are interventions
      1. Controlled sensitivity findings
    3. Spend a finite input budget
  5. Part V — Evidence of improvement
    1. Change one hypothesis at a time
      1. Controlled-change manifest
    2. Keep held-out work independent
    3. Diagnose fragile improvements
      1. Perturbations tied to plausible causes
  6. Part VI — Transfer boundaries
    1. State the transfer boundary
      1. Claims require wider evidence
    2. Reasoning text is not verification
  7. Check understanding
  8. Open questions
  9. Selected talks
  10. References
  11. Talk library
← All topics

Prompting and In-Context Learning

A prompt is the model-visible input deliberately designed to elicit behavior during one invocation. It can turn the same general model toward extraction, classification, transformation, or explanation without creating a new checkpoint. The practical question is therefore not which magic phrase makes a model smarter. It is which task information the model needs now, how that information should be expressed, and what evidence shows that the resulting behavior is useful on new work. Prompting becomes engineering when an instruction defines an assessable task, demonstrations cover meaningful variation, the complete serialized request fits its input budget, and prompt variants are compared under controlled conditions. These disciplines also mark prompting's limits: behavior induced by context is normally temporary, sensitive to presentation, and bounded by the model and evidence available in that invocation.

Part I — Invocation-time behavior

What a prompt changes

A prompt is deliberately supplied model-visible input intended to elicit task behavior. It may contain instructions, examples, task data, and structural markers inserted by the model's chat template. During ordinary inference, this input changes the computation performed with a model; it does not rewrite the model's stored parameters. A later call without that prompt does not automatically retain the induced behavior.

The mechanism is conditional prediction. An autoregressive language model estimates each next token from the prompt and the tokens already generated. Change that prefix and the next-token distribution can change, even when the checkpoint and decoding settings stay fixed. Later generated tokens then depend on earlier selections, as explained in Producing an unknown continuation.

Training is a different intervention. Supervised instruction tuning and preference-based methods optimize persistent parameters from datasets and objectives. Prompting supplies input to the resulting policy for one invocation. The distinction is developed more fully in Fitting is not inference and Post-training and Alignment.

Two ways to change behavior

Prompting changes the current input; training changes persistent parameters.

The same starting model begins two distinct interventions. The prompting path combines an invocation task input with model-visible instructions or demonstrations and produces a call-scoped response. The training path uses a separate dataset and objective to update parameters that affect later calls. Different prompt-conditioned outputs do not imply a weight update.
Read the diagram as text
  • Starting model. The same fitted checkpoint begins both paths.
  • Invocation task input. The request-specific work supplied for the current call.
  • Training dataset + objective. Examples and a computable objective supply the learning signal.
  • Prompt intervention. Instructions or demonstrations are added to this invocation.
  • Call-scoped response. Behavior changes while the supplied context is present.
  • Training intervention. Optimization uses the dataset and objective to update parameters.
  • Updated parameters. The resulting checkpoint can retain changed behavior across later calls.
  • Starting modelPrompt intervention: unchanged parameters.
  • Invocation task inputPrompt intervention: request data.
  • Prompt interventionCall-scoped response: conditional generation.
  • Starting modelTraining intervention: initial parameters.
  • Training dataset + objectiveTraining intervention: learning signal.
  • Training interventionUpdated parameters: parameter updates.

This boundary prevents two common diagnostic mistakes. A better response after a prompt edit does not show that the model learned permanently. A poor response does not by itself show that the underlying capability is absent: a base model may produce a useful completion when the requested task is represented in a format it recognizes, yet fail when given a conversational instruction it was not trained to follow reliably.

Turn a request into a task contract

An instruction is useful when it acts as a task contract. It identifies the operation to perform, the relevant input, material constraints, ambiguous decision boundaries, and the expected output. These are separate obligations. “Classify this ticket” leaves open the categories and their meanings; “Return JSON” names a surface representation but says nothing about whether the chosen category is correct.

From vague request to assessable task

Contract elementVague requestAssessable version
OperationClassify this ticketChoose exactly one routing category
Relevant inputThis ticketUse the subject and customer message; ignore signatures
Decision boundaryChoose a teambilling covers charges and refunds; technical covers product malfunction
ConstraintBe accurateIf neither definition applies, return needs_review
Expected outputGive the resultReturn only the category and one supporting sentence

The point is not to maximize instruction length. Each clause should remove a material uncertainty or state an acceptance condition. Contradictory requirements make success impossible before a model runs—for example, demanding exactly one bullet and several bullets in the same output. Additional forceful wording cannot repair an invalid contract.

This resembles an explicit software interface: the operation's obligations must be knowable before its result can be validated. Specify what an operation promises develops that broader principle. Schema-constrained generation can enforce structural possibilities, but structure, semantic correctness, and authorization remain different checks; those mechanisms belong in Structured Outputs and Tool Calling.

Part II — Instructions and examples

From zero-shot to few-shot

A demonstration pairs an example input with its desired output inside the current prompt. Zero-shot prompting supplies no task demonstrations, one-shot supplies one, and few-shot supplies several. An instruction may still appear in every condition; “shot” counts demonstrations, not all information the model encountered during pretraining.

Demonstrations can assign meaning even to otherwise meaningless labels. Suppose the instruction is “Map each support message to A or B.” With no definitions or examples, the task is underspecified. “Cannot sign in → A” associates login problems with one label but leaves B undefined. Adding “Card charged twice → B” supports a login-versus-billing interpretation, so an unanswered refund message now has evidence for B. The examples change the information available during this invocation; they do not update the model’s weights.

Demonstrations narrow the task interpretation

Example

The model, instruction, and query stay fixed while complementary examples supply progressively more of the arbitrary label mapping.

Zero-shot supplies no task demonstration. One-shot associates login trouble with A but leaves B undefined. Adding a complementary billing example supports B for the unchanged refund query during this invocation.
Read the diagram as text
  • Fixed model. The same checkpoint is used in every condition.
  • Map messages to A or B. The arbitrary labels initially have no supplied task meanings.
  • Refund still missing. The unanswered query remains unchanged.
  • Zero-shot: underdetermined. No demonstration associates either label with a task category.
  • Cannot sign in → A. The first demonstration associates login trouble with A.
  • One-shot: B undefined. The prompt supplies only one side of the possible mapping.
  • Charged twice → B. The complementary demonstration associates billing trouble with B.
  • Few-shot: B supported. The refund query now has invocation-time evidence for the billing label.
  • Fixed modelZero-shot: underdetermined: same checkpoint.
  • Map messages to A or BZero-shot: underdetermined: output names only.
  • Refund still missingZero-shot: underdetermined: requires mapping.
  • Fixed modelOne-shot: B undefined: same checkpoint.
  • Cannot sign in → AOne-shot: B undefined: supplies A association.
  • Refund still missingOne-shot: B undefined: same query.
  • Fixed modelFew-shot: B supported: same checkpoint.
  • Cannot sign in → AFew-shot: B supported: retains A association.
  • Charged twice → BFew-shot: B supported: supplies B association.
  • Refund still missingFew-shot: B supported: same query.

In-context learning names behavior induced by patterns in the current context without parameter updates. The phrase “learning” describes adaptation visible in the invocation's behavior, not persistence in the checkpoint. A coding demonstration can likewise communicate JSX and inline-style conventions that a later request does not restate, but adherence remains conditional on the supplied prompt.

More demonstrations are not automatically better. They can clarify a mapping, introduce boundary cases, or reveal a transformation, but they can also add conflicting patterns, accidental correlations, and extra input. Shot count is therefore a description of the prompt, not a quality setting.

What examples specify

An instruction tells the model what operation is intended; demonstrations can make the operation concrete. They may establish label meanings, input-to-output mappings, category granularity, decision boundaries, output structure, or task-specific style. Contrasting an undesirable and desirable output for the same input can expose a subjective distinction more precisely than another adjective.

Different information from similar examples

Demonstration propertyWhat it can specifyPossible shortcut
Label pairWhich output name corresponds to a classFamiliar meaning of the label word
Boundary caseWhere two categories separateA conspicuous keyword
Output exampleRequired fields, order, or toneCopying surface format without the rule
Input collectionWhat kinds of inputs occurInput distribution rather than input-output mapping

Improvement after adding demonstrations does not prove that the intended rule was inferred. In bounded classification and multiple-choice experiments, randomizing demonstration labels often preserved much of the demonstration benefit. Other ablations found contributions from label names, the input distribution, and the shown format. Incorrect labels are still poor engineering; the finding instead warns that observed behavior can arise from cues other than the abstraction the author intended.

Counterfactual labels make this distinction visible. If demonstrations map positive reviews to Bar and negative reviews to Foo, success requires following the supplied association rather than the familiar meanings of the label strings. Tested models differed in their ability to follow unrelated or reversed mappings, so this capacity must be established for the actual model and task.

Part III — Development

Turning points in task specification

Prompt-based adaptation did not begin with chat boxes. It belongs to a longer line of work on making a general computational system infer or follow a task from a representation supplied at use time. The important history is not a march from primitive prompts to modern prompts, but a series of different answers to the question: where should the task specification live?

Turning points in task specification

  1. 2001Learning to Learn Using Gradient DescentA recurrent system adapted across related numerical tasks using successive inputs and previous targets in its internal state.Sources & context

    Contributors: Sepp Hochreiter, A. Steven Younger, and Peter R. Conwell

    What changed: Established a conceptual precedent for task adaptation through information presented over a sequence, rather than modern language-model prompting.

  2. 2019GPT-2 task cuesTextual completion cues and unfinished example pairs represented summarization and translation as continuation tasks.Sources & context

    Contributors: OpenAI GPT-2 team

    What changed: Showed that an unchanged autoregressive model could be directed toward recognizable tasks by changing the supplied sequence.

  3. 2020GPT-3 few-shot learningZero-, one-, and few-shot demonstrations were supplied at inference while model parameters remained fixed.Sources & context

    Contributors: OpenAI GPT-3 team

    What changed: Made inference-time demonstrations a prominent method for adapting a general language model without task-specific weight updates.

  4. April 2021Pattern-Exploiting TrainingAuthored patterns and verbalizers connected downstream classes to masked-word predictions, alongside fine-tuning and supervised training.Sources & context

    Contributors: Timo Schick and Hinrich Schütze

    What changed: Demonstrated that prompt-like task representations could work together with parameter training rather than serving only as invocation-time context.

  5. 2021FLANMultitask parameter training expressed tasks as natural-language instructions and tested responsiveness on held-out task types.Sources & context

    Contributors: FLAN research team

    What changed: Separated training a model to respond to instructions from supplying a particular instruction during inference.

  6. November 2021Soft prompt tuningBackpropagation learned continuous prompt vectors prepended to inputs while the base T5 parameters remained frozen.Sources & context

    Contributors: Brian Lester, Rami Al-Rfou, and Noah Constant

    What changed: Placed persistent task adaptation in learned input embeddings rather than authored text or full-model weight updates.

Notice how task specification moves among recurrent state, authored text, inference-time demonstrations, authored patterns with training, instruction-tuned parameters, and learned prompt vectors. Milestones are equally spaced; elapsed time is not to scale.

Selected turning points

DateDevelopmentContribution
2001Learning to Learn Using Gradient DescentA recurrent system used successive inputs and previous targets in its internal state to adapt across related numerical tasks; it was a conceptual precedent, not modern language-model prompting.
2019GPT-2 task cuesCompletion cues and unfinished example pairs expressed summarization and translation as text continuation tasks.
2020GPT-3 few-shot learningA large autoregressive model was evaluated with zero-, one-, and few-shot task demonstrations supplied at inference while its parameters stayed fixed.
2021Pattern-Exploiting TrainingPET connected downstream classes to masked-word predictions through authored patterns and verbalizers, while still using fine-tuning and additional supervised training.
2021–2022FLAN and prompted multitask trainingParameter training on tasks expressed as natural-language instructions improved responsiveness on held-out task types relative to an untuned counterpart.
2021Soft prompt tuningTrainable continuous vectors were prepended to inputs while the base T5 parameters remained frozen; unlike textual prompting, the prompt vectors were learned through backpropagation.

These interventions coexist because they change different things. Authored instructions and demonstrations are cheap to revise and request-specific. PET and instruction tuning change parameters so a model responds more reliably to certain task representations. Soft prompt tuning persists learned vectors without changing the base model's weights, but it is still a training intervention rather than ordinary invocation-only prompting.

The historical lesson is architectural: task behavior can be shaped through authored text, inference-time demonstrations, learned prompt representations, or parameter adaptation. Choosing among them depends on the persistence, coverage, data, and operational control the task requires—not on which technique is newest.

Part IV — Model-visible evidence

Choose examples for coverage

When only a few demonstrations fit, selection is a coverage problem. Begin with the task's meaningful variation: valid classes, common input forms, decision boundaries, compositional operations, and consequential exceptions. Then ask which small set exposes those distinctions with correct labels and minimal redundancy.

Similarity and coverage answer different questions. A demonstration similar to the current query may show locally relevant vocabulary or structure. But choosing each example independently by similarity can fill a prompt with paraphrases that all teach the same operation. In a published meeting-scheduling illustration, near-duplicate appointment examples omitted a different operation needed by the query: finding a person's manager. Coverage-based selection helped most on tested compositional semantic-parsing splits and did not consistently improve every classification or numerical-reasoning setting.

Similarity can produce a redundant demonstration set

Selecting examples as a set can preserve a required operation that independent nearest-neighbor choices omit.

In the meeting-scheduling example, the query needs appointment handling and manager lookup. Individually similar appointment examples can crowd out the manager operation; a complementary set exposes both. The reported advantage was task-dependent, not a guarantee that coverage selection always wins.
Read the diagram as text
  • Compositional scheduling query. The request requires appointment handling and finding a person’s manager.
  • Appointment operation. Examples show how to create or modify an appointment.
  • Manager-lookup operation. An example shows how to find a person’s manager.
  • Similar appointment example 1. Close to the query but teaches the same appointment operation as its neighbors.
  • Similar appointment example 2. Another near-duplicate appointment example.
  • Similarity-selected set. The set contains redundant appointment evidence and omits manager lookup.
  • Appointment example. Supplies the appointment operation once.
  • Manager-lookup example. Supplies the distinct manager operation required by the query.
  • Coverage-selected set. The set exposes both operations needed by the query.
  • Compositional scheduling queryAppointment operation: requires operation.
  • Compositional scheduling queryManager-lookup operation: requires operation.
  • Similar appointment example 1Similarity-selected set: selected member.
  • Similar appointment example 2Similarity-selected set: selected member.
  • Appointment exampleCoverage-selected set: supplies appointment operation.
  • Manager-lookup exampleCoverage-selected set: supplies manager operation.

A practical selection pass

  • Name the regionsList classes, boundaries, operations, and consequential exceptions the prompt must communicate.
  • Reject invalid examplesRemove mislabeled, ambiguous, unauthorized, or outdated candidates before optimizing selection.
  • Prefer complementary evidenceKeep similar examples when local resemblance matters, but remove near-duplicates that add no required behavior.
  • Count development evidenceRecord all labeled cases used to choose examples, not only the demonstrations finally placed in the prompt.

Dynamic selection can retrieve demonstrations for each request, and task-specific studies have sometimes found gains over random choice. It also introduces a retrieval system, similarity representation, and new failure modes. Once an application selects and maintains information across calls, the larger design belongs in Context Engineering, even though the retrieved examples still become part of a prompt.

Order and format are interventions

Prompt sensitivity is behavior variation caused by prompt changes that a programmer might have expected to preserve task meaning. Models receive a serialized token sequence, not an abstract set of requirements. Changing example order, label exposure, separators, capitalization, role placement, or the location of the query creates a different input.

Controlled sensitivity findings

Held fixedChangedBounded finding
Four balanced SST-2 demonstrationsAll 24 permutationsAccuracy varied substantially across tested GPT-2 and GPT-3 sizes; good orderings transferred weakly between models.
Tasks and demonstration identitiesSeparators, capitalization, and option numberingAcross 53 tasks, ten sampled formats produced a reported median spread of 7.5 accuracy points over the tested model and shot settings.
Balanced sentiment taskDemonstrated-label frequency and positionTested models showed biases toward frequent, recent, and familiar answer labels; one example could underperform zero-shot.
Answer-bearing evidenceIts position in a long promptSeveral tested models performed better with evidence near the beginning or end than in the middle.

These results establish sensitivity under their tested models, tasks, and scoring methods; they do not reveal one universal cause. Position, learned format priors, label semantics, and token boundaries can all contribute. The engineering response is to vary them separately and preserve the complete serialized inputs used in each trial.

Serialization is checkpoint-specific. A chat template inserts role markers and turn boundaries, and incompatible control tokens can degrade behavior. Joining text fragments may also change token boundaries. See Special tokens and chat templates and Joining text changes boundaries. These facts motivate testing the assembled prompt; they do not reduce every sensitivity effect to tokenization.

Spend a finite input budget

Instructions, demonstrations, task data, conversation history, tool definitions, structural markers, and generated output share a finite request allowance. Cached prefixes still occupy that allowance even when caching changes processing cost. A simple guard for a shared limit is P+RCP + R \le C, where PP is the complete counted prompt, RR is reserved generation, and CC is supported context capacity.

Adding a demonstration therefore changes more than shot count. It consumes input space, moves later material to new positions, and can reduce room for the actual task or answer. Count the complete request explains what belongs in PP; Reserve room for generation develops the capacity guard.

Quality does not have a universal monotonic relationship with example count. In a many-shot study using an early Gemini 1.5 Pro version, XSum summarization improved through roughly fifty examples and then declined, while cross-dataset summarization from XSum demonstrations to XLSum generally improved as examples increased. The curves were task-specific, and the overlap metric did not establish factual accuracy.

Fitting text inside the advertised window also does not prove effective use. Position effects and distractors can matter. Large tool catalogs may consume substantial capacity before the user's task begins; one Cloudflare account reported an OpenAPI specification representing roughly 1.1 million tool tokens under its counting method. Treat that as a bounded implementation report, not an endpoint threshold.

The boundary is functional. Prompting designs the task's instructions and demonstrations. Context Engineering selects, orders, refreshes, and maintains all model-visible information across calls. A prompt can be well written while the surrounding context is stale, overfull, or assembled from the wrong sources.

Part V — Evidence of improvement

Change one hypothesis at a time

A prompt edit is an experimental intervention. To attribute an outcome to it, define the task population, success criteria, incumbent or minimal baseline, candidate prompt, model version, decoding configuration, demonstrations, grader, and complete serialized request. Hold everything fixed except the prompt property named by the hypothesis.

Controlled-change manifest

ArtifactBaseline runCandidate run
Task caseSame recorded caseSame recorded case
Model and decodingPinned configurationSame configuration
DemonstrationsSame set and orderSame unless selection is the hypothesis
Prompt variableIncumbent wordingOne declared change
AssessmentSame acceptance rule and graderSame acceptance rule and grader
Result recordOutput, errors, usage, serialized inputSame fields

One reported local-model experiment compared a baseline with numbered input, few-shot examples, negative constraints, and an explicit intermediate-reasoning variant. The presenter recommended isolating one prompt variable and reported that the few-shot condition performed best for that bounded task, while the reasoning variant added latency. Without the prompts and full protocol, this is evidence for the experimental pattern, not a universal ranking of techniques.

Automated prompt optimization is still optimization against chosen data and metrics. It can search more candidates than manual editing, but it can also overfit a small development set. A disappointing result should trigger examination of the task definition, cases, metric, program structure, and optimizer—not an assumption that another wording search must solve the problem.

Changing the model, prompt, demonstrations, answer extractor, and grader together may produce a better application, but it cannot isolate the effect of prompting. Benchmark results also depend on such harness choices; comparisons must identify the whole evaluated pipeline.

Keep held-out work independent

Prompt development uses several evidence pools with different responsibilities. Demonstrations appear in the model input. Development cases guide edits. Validation cases choose among candidate prompts. Held-out cases assess the frozen choice. If the claim covers new task families rather than new instances of the same task, those families need their own independent holdout.

A case stops being held out when its result influences another revision, even if its text is never copied into the prompt. Adaptive selection can overfit reported scores just as parameter selection can. After repeated inspection, the honest remedy is to call those cases development evidence and obtain fresh independent cases for the final claim.

Which evidence may influence prompt revision

A test set loses independence when its results influence another prompt edit, even if its text never enters the prompt.

Demonstrations and development cases may directly shape a prompt. Validation cases may choose among already-developed candidates. The selected prompt is then frozen before untouched held-out cases assess the final same-task claim. A separate held-out task-family set is needed for a broader transfer claim. Feedback from either held-out result creates a new development cycle and requires fresh independent evidence.
Read the diagram as text
  • Demonstrations. Examples placed directly in the prompt.
  • Development cases. Cases inspected while writing and revising prompts.
  • Candidate prompts. Prompt variants produced during development.
  • Validation cases. Independent cases used to select among candidates.
  • Frozen prompt. The selected artifact and decision rule are fixed.
  • Held-out cases. Untouched cases assess same-task generalization.
  • Held-out task families. Independent task types assess a broader transfer claim.
  • DemonstrationsCandidate prompts: directly shape input.
  • Development casesCandidate prompts: guide revisions.
  • Candidate promptsValidation cases: matched comparison.
  • Validation casesFrozen prompt: select once.
  • Frozen promptHeld-out cases: same-task assessment.
  • Frozen promptHeld-out task families: transfer assessment.

Run the frozen baseline and candidate on the same tasks and preserve per-case outcomes. Pairing reveals which cases improved, regressed, tied, or failed to complete. Aggregate scores can then be interpreted alongside meaningful slices and unresolved runs. Reuse the task-population discipline in Sample the intended work and the analysis in Compare changes on matched work.

Repeated trials answer a separate question about execution variability. They are appropriate when the operating claim concerns sampled behavior, but rerunning one task does not create more independent tasks. Preserve both the task identity and attempt policy so stochastic consistency is not confused with generalization.

Diagnose fragile improvements

A higher average score is the beginning of diagnosis, not its end. Inspect baseline–candidate disagreements, especially consequential regressions. First validate that the task is solvable and the grader checks the intended requirement. An impossible case, broken environment, or unreliable judge can make a prompt look worse without revealing a model limitation.

Perturbations tied to plausible causes

  • ParaphraseVary wording while preserving the task contract; instability suggests dependence on phrasing or an ambiguous contract.
  • PermuteReorder the same demonstrations; changed decisions expose order sensitivity.
  • RelabelUse equivalent arbitrary labels where appropriate; changes can reveal reliance on familiar label semantics.
  • ReformatChange separators, capitalization, or role placement one at a time while preserving content.
  • RepeatRerun the same serialized request when sampling variability is part of the deployed behavior.

A useful perturbation has a stated invariant: the decision that should remain unchanged if task meaning is preserved. When the output changes, test competing explanations separately—ambiguous instruction, bad example, positional effect, shortcut, ordinary sampling, or grader defect. Do not infer the cause from the shape of the failure alone.

Early direct inspection can reveal recurring failure patterns while a product is still changing rapidly. It should lead to explicit, measurable cases rather than remain the final assessment. Start with a few core tasks, include prohibited behavior as well as task completion, and expand coverage as observed failures clarify what needs to be measured.

Part VI — Transfer boundaries

State the transfer boundary

A successful prompt establishes behavior only within its evaluated boundary: the tested model, serialized context, task population, decoding policy, and assessment procedure. Generalization to new instances of the same task is a narrower claim than transfer to new task families, domains, prompt formats, model revisions, or providers.

Claims require wider evidence

ClaimNew variation introducedRequired evidence
Same-task generalizationUnseen instancesIndependent cases from the intended task population
Task-family transferDifferent operations or label rulesHeld-out task families, not paraphrases of development templates
Domain transferDifferent vocabulary, prevalence, and boundary casesDomain-representative cases and validated labels
Format transferDifferent demonstrations or serializationControlled format and order variants
Model transferDifferent learned parameters or chat templateA fresh matched evaluation on each model/version

Failure also has several possible meanings. The instruction may be ambiguous, examples may conflict or omit a required operation, the prompt may be too distracting, or the model may not express the needed capability under the tested context. Conversely, apparent success can come from a shortcut. There is no general prompt-only test that cleanly separates capability elicitation from acquisition of a genuinely new skill.

Escalate according to the diagnosed boundary. Clarify the task contract when requirements are ambiguous. Replace redundant demonstrations when coverage is weak. Use Context Engineering when the application must select and maintain broader information. Consider Post-training and Alignment when repeated invocation-time evidence does not reliably produce behavior that must persist. These interventions can also be combined; retrieval, prompting, and parameter adaptation are not mutually exclusive.

Reasoning text is not verification

Chain-of-thought prompting asks a model to generate intermediate natural-language steps before its answer. Demonstrated reasoning adds worked intermediate steps to examples; zero-shot chain of thought requests them without worked demonstrations. The published zero-shot method used a second generation stage to extract the final answer, so its intervention was more than appending one phrase.

Intermediate text can change the computation available before the final answer and improved results on some tested arithmetic, commonsense, and symbolic tasks. That does not make the text faithful access to hidden computation. Experiments manipulating answer suggestions and demonstration positions found that these cues affected predictions while generated explanations often omitted them or rationalized wrong answers.

A rationale and a verification result therefore support different claims. The rationale shows what explanation the model generated. An executable test can establish a named program property; an authoritative reference can support a factual claim; a separately validated grader can assess a defined rubric. None proves properties it was not designed to check.

Generated rationale and independent check

A rationale and an external checker have different evidence provenance and support different claims.

The prompt conditions one generation. It produces rationale tokens before the answer, so those earlier tokens can condition the later answer. The rationale is still model output, not an independent verdict on that answer. A separately supplied executable test, authoritative reference, or validated grader checks a named property through a different evidence path. Its verdict supports only that property.
Read the diagram as text
  • Reasoning request. The prompt asks for intermediate steps before an answer.
  • One model generation. The conditional process generates the visible sequence.
  • Generated rationale. An inspectable explanation that may omit influential cues.
  • Generated answer. The task result requiring assessment.
  • Independent evidence. An executable test, authoritative reference, or validated rubric.
  • Named-property verdict. A conclusion limited to what the checker actually assesses.
  • Reasoning requestOne model generation: conditions generation.
  • One model generationGenerated rationale: produces earlier tokens.
  • Generated rationaleGenerated answer: earlier tokens condition later answer.
  • Generated answerNamed-property verdict: candidate under test.
  • Independent evidenceNamed-property verdict: independent check.

Treat requests to explain, check, or reason step by step as prompt variants and evaluate them on the intended task. Leave independent sampling, search, verifier design, and adaptive computation to Reasoning and Test-Time Compute. Persuasive intermediate prose is not a substitute for an independent checker when the task permits one.

Open questions

  1. Can an operational test distinguish a capability that a model already possesses but a prompt fails to elicit from a genuinely new capability that requires parameter adaptation? Current evidence supports task- and model-specific diagnoses, not a universal boundary. Progress would require controlled tasks with known training exposure, competing prompt interventions, persistent-training comparisons, and independently verified outcomes.

  2. How portable can authored prompts become across model families and provider revisions? Order, formatting, label semantics, and chat-template differences all create plausible failure paths. Progress would look like versioned cross-model suites that preserve complete serialized inputs, task-level outcomes, and explicit compatibility claims rather than reporting one aggregate portability score.

  3. How should example selection jointly optimize coverage, similarity, input cost, position, and robustness? Existing studies usually isolate only part of this problem. Progress would require experiments that vary the set as a whole while holding the model, task population, request budget, output reservation, and grader fixed.

  4. When does generated intermediate reasoning improve answers for reasons that transfer beyond one prompt format? The text can aid computation yet remain an unfaithful explanation. Progress would require causal interventions on the rationale, independent checks of final answers, task-diverse evaluations, and explicit separation of accuracy, faithfulness, latency, and token cost.

  5. How should teams maintain prompt versions as deployed behavioral interfaces without repeatedly contaminating their final assessment? Useful progress would combine immutable request manifests, ownership and deployment records, fresh holdouts, rollback evidence, and production-derived cases whose role changes explicitly from incident evidence to development evidence.

Follow the curated reading path through the speakers and demonstrations behind this entry.

121 min

AI Engineer World's Fair 2025 · 2025

Prompt Engineering & AI Red Teaming

Sander Schulhoff

Cited in this entry

Surveys prompting interventions and their limitations, including few-shot examples, reasoning requests, automation, and the boundary beyond which prompt-only controls are insufficient.

Watch talk

Explore more talks

The rest of the library, beyond the curated path. Cited talks support this entry; reviewed transcripts were processed in full. Metadata candidates have not been reviewed as sources or verified as topic members.

27 matching talks

TalkSpeakerEventYear
Aparna DhinakaranAI Engineer Code 20252025
Jamie Neuwirth, Zack WittenAI Engineer World's Fair 20242024
Christopher Harrison, John PeckAI Engineer World's Fair 20252025
Almog BakuAI Engineer Summit 20252025
Nick HeinerAI Engineer World's Fair 20262026
Dan ClearyAI Engineer Summit 20252025
Devendra Chaplot, Devendra Singh ChaplotAI Engineer World's Fair 20242024
AI Engineering 101

Cited in this entry

Noah HeinAI Engineer Summit 20232023
Skills are the New SDKs

Transcript reviewed

Elvin AghammadzadaAI Engineer World's Fair 20262026
Charles FryeAI Engineer Summit 20232023
Lukas BiewaldAI Engineer World's Fair 20242024
Abi AryanAI Engineer Summit 20232023
Rémi LoufAI Engineer World's Fair 20242024
Sander DielemanAI Engineer Europe 20262026
Ted JohnsonAI Engineer World's Fair 20262026
Alex AtallahAI Engineer World's Fair 20252025
Sandra KublikAI Engineer World's Fair 20242024
Manish SanwalAI Engineer Summit 20252025
Matt CareyAI Engineer Europe 20262026
Louis-François Bouchard, Omar Solano, Samridhi VaidAI Engineer World's Fair 20262026
Nupur SharmaAI Engineer Europe 20262026
Aman KhanAI Engineer World's Fair 20252025
Phil HetzelAI Engineer Europe 20262026
Rafal Wilinski, Vitor BaloccoAI Engineer World's Fair 20252025
Kobie CrawfordAI Engineer Europe 20262026
Anita KirkovskaAI Engineer Summit 20252025
Daniel HanAI Engineer World's Fair 20262026

References

Coverage and source review
Processed transcripts
32 processed in full · 5 in the curated path
Automated source review
Passed
Metadata candidates
0 unreviewed; not verified topic membership
Corpus version
1bd8e407b26a07b33815594e1b2db5f41827119a2b3cb6fbf240f9fc571fc767

Automated review checks source support; it is not publication approval.

A synthesis of selected conference talks and technical references. Citations link to the source material; they do not imply that every talk on this subject is included.

  1. Language Models are Unsupervised Multitask Learners

    GPT-2 represents text using byte-level byte-pair encoding: frequent byte sequences become vocabulary tokens, so a token need not equal a word. Autoregressive modeling factorizes sequence probability as pθ(t1,…,tn)=∏i pθ(ti|t1,…,t(i−1)). Generation repeatedly computes a next-token distribution, selects a token, and extends the context. Training estimates parameters θ from text; the paper's zero-shot task execution changes the supplied sequence without modifying parameters or architecture. Instructions, examples, and source text can therefore change the conditional output distribution without constituting a training update.

  2. Optimizing LLMs for Speed and Memory

    Model parameters are numerical weight matrices and vectors loaded from a checkpoint; text inputs are represented separately as sequences of vectors. In ordinary inference, request inputs pass through those weights without a training update. Applied to RAG, instructions, conversation history, the question and retrieved text belong to request context when included in the input. Changing that text changes the computation without rewriting the checkpoint. Request-specific cached attention keys and values are intermediate computation state, not newly learned model parameters.

  3. Google: Autoregressive models and hallucination

    An autoregressive language model conditions each next-token prediction on preceding tokens, including its own earlier predictions. A generation loop predicts a token, appends it to the context, and repeats. The corresponding probability factorization is P(t1,…,tn|prompt)=∏i P(ti|prompt,t1,…,t(i−1)). Google separately defines hallucination as plausible-looking output that makes a false assertion about the world. Teaching inference: the generation loop has no inherent factual-verification step, so plausible continuation and factual correctness can diverge.

  4. Training language models to follow instructions with human feedback

    InstructGPT begins with a pretrained language model. Supervised fine-tuning updates it using demonstrations of desired responses to prompts. Preference training then fits a reward model to human comparisons of candidate responses; PPO updates the response policy to increase predicted reward, with a penalty for departing from the supervised policy. These stages optimize learned parameters using datasets and objectives. Supplying an instruction or tool observation during ordinary inference instead changes the current input to that trained policy. A favorable preference score represents the learned comparison objective, not a proof of factual or program correctness.

  5. Decoding Mistral AI's Large Language Models

    Instruction tuning uses prompt-response pairs and trains next-token prediction on the response while masking the prompt.

  6. Decoding Mistral AI's Large Language Models

    A next-token pretrained model can possess the needed capability while responding in a format that does not satisfy a human instruction.

  7. Prompting best practices — Claude Platform Docs

    Anthropic recommends stating desired outputs and constraints explicitly, explaining the purpose behind instructions, and specifying sequence when order matters. Its demonstration guidance emphasizes examples relevant to the actual use case, varied enough to cover edge cases without teaching accidental patterns, and visibly separated from instructions. The guide treats examples as a way to communicate output format, tone, and structure.

  8. Introducing Structured Outputs in the API

    OpenAI describes schema-constrained generation that restricts which tokens may be produced as an output is generated. This adds a mechanism beyond requesting a format in natural language. The report explicitly warns that schema-conforming JSON values can still contain mistakes, such as an incorrect mathematical step, and identifies refusal and incomplete generation as separate outcomes.

  9. Cross-Task Generalization via Natural Language Crowdsourcing Instructions

    Mishra, Khashabi, Baral, and Hajishirzi represented 61 tasks and 193,000 input-output instances with structured instructions containing a task definition, command, cautions, unacceptable behavior, and positive and negative examples with explanations. Models were trained on seen tasks and evaluated on disjoint unseen tasks. Instruction components had task-dependent effects: definitions and positive examples often helped, while including negative examples reduced performance in the reported comparison. An instruction is therefore assessable as several distinct obligations, but adding more instructional material is not automatically beneficial.

  10. When Will The Benchmaxxing Plague End?

    Contradictory instructions make success impossible, while arbitrary constraints require evidence that performance transfers to real user requests.

  11. Language Models are Few-Shot Learners

    The paper distinguishes zero-shot prompting, with a task description but no demonstrations; one-shot prompting, with one demonstration; and few-shot prompting, with several. A demonstration pairs an input with its desired completion, followed by an unanswered input. These categories count examples supplied for inference, not examples encountered during pretraining.

  12. Larger language models do in-context learning differently

    This study separates prior label meanings from mappings supplied in the prompt. Replacing sentiment labels with unrelated names such as Foo and Bar requires using the demonstrated association rather than the words' familiar meanings. Some tested models successfully used these mappings, while others relied more heavily on prior semantics. Instruction-tuned PaLM variants improved at unrelated-label mappings but became less willing to follow demonstrations that reversed familiar label meanings.

  13. Language Models are Few-Shot Learners

    Few-shot inference supplies demonstrations as input conditioning while keeping model weights fixed; fine-tuning changes pretrained weights through training. Examples consume bounded context and influence subsequent predictions without becoming parameter updates. Separately, benchmark contamination means evaluation material overlaps training data, weakening claims of generalization to unseen examples. GPT-3's study compares original scores with subsets lacking detected n-gram overlap, but acknowledges false positives and possible distribution differences between clean and original subsets. Conceptually, contamination concerns exposure to evaluation data; optimizing a proxy concerns objective mismatch, while biased reviewer labels concern measurement. Those problems can occur independently.

  14. AI Engineering 101

    Few-shot prompting can demonstrate output conventions that subsequent requests need not restate.

  15. Many-Shot In-Context Learning

    Expanded context windows enabled testing hundreds or thousands of demonstrations. Using the original February 2024 Gemini 1.5 Pro, the study nested smaller demonstration sets inside larger ones and repeated selections across seeds. News-summary performance on XSum improved through roughly 50 examples and then declined, while transfer from XSum demonstrations to XLSum generally improved with more examples. Summaries sometimes fabricated dates or times. More available context therefore enabled useful adaptation without guaranteeing monotonic gains or faithful output.

  16. Prompt Engineering & AI Red Teaming

    The speaker favors adding examples but acknowledges that neither a universal example count nor monotonic improvement is established.

  17. Building with Anthropic's Claude - The Prompt Doctor is In

    Build curated multi-shot, or few-shot, examples of the desired input-output mapping; pair undesirable outputs with good outputs when teaching subjective distinctions.

  18. Rethinking the Role of Demonstrations: What Makes In-Context Learning Work?

    The authors compared no demonstrations, correctly labeled demonstrations, and demonstrations with randomized labels. Across their classification and multiple-choice experiments, randomizing labels often retained much of the benefit of demonstrations. Further ablations identified contributions from the available label names, the input distribution, and the input-output format. In the reported example-count ablation, gains became small beyond eight examples. Demonstration-following performance therefore need not imply that a model inferred the intended input-label rule.

  19. Learning to Learn Using Gradient Descent

    Hochreiter, Younger, and Conwell investigated learning to learn: training a system to acquire a procedure for learning related tasks. Their recurrent network received successive function inputs and previous target values, allowing its internal state to incorporate examples. Experiments tested adaptation to changing Boolean, semilinear, and quadratic functions. The motivation was to make learning-algorithm discovery practical with more adjustable parameters than earlier evolutionary approaches.

  20. Language Models are Unsupervised Multitask Learners

    GPT-2's summarization experiment appended a summary cue to an article; removing that cue reduced its reported summarization score. Translation supplied example sentence pairs followed by an unfinished pair. These experiments used continuation formats to communicate the intended operation, while the summaries still confused details.

  21. Exploiting Cloze-Questions for Few-Shot Text Classification and Natural Language Inference

    Schick and Schütze's April 2021 PET method reformulates a classification input with a pattern containing one masked position and uses a verbalizer to map task labels to vocabulary words that can fill that position. PET fine-tunes separate masked-language models on a small labeled set, ensembles them to label additional examples, and then trains a final classifier. This was a consequential prompt-based NLP line because authored templates and meaningful label words connected downstream tasks to pretrained cloze behavior, but it combined prompting with parameter training rather than demonstrating inference-only adaptation.

  22. Finetuned Language Models Are Zero-Shot Learners

    FLAN addressed weak instruction-only performance by fine-tuning a pretrained language model on tasks expressed through natural-language instructions. Evaluation withheld entire task-type clusters, such as natural-language inference, from instruction tuning. The resulting model improved over its untuned counterpart on unseen task types. Training for instruction responsiveness and supplying an instruction during inference are therefore distinct interventions that can work together.

  23. The Power of Scale for Parameter-Efficient Prompt Tuning

    Lester, Al-Rfou, and Constant's November 2021 prompt-tuning method prepends trainable continuous embedding vectors to an input while freezing the base T5 parameters. Backpropagation updates only those prompt vectors. The paper explicitly contrasts this with text-prompt design, which selects ordinary tokens whose embeddings remain fixed, and with full model tuning, which updates model weights. Its experiments found that prompt tuning became more competitive with full model tuning as tested T5 models grew and sometimes transferred better across the evaluated question-answering and paraphrase domains.

  24. Decoding Mistral AI's Large Language Models

    The talk identifies prompt engineering, few-shot prompting, chain-of-thought, and retrieval-augmented generation as application adaptation options alongside fine-tuning.

  25. Domain adaptation and fine-tuning for domain-specific LLMs

    The speaker recommends treating fine-tuning, prompt engineering, and retrieval as combinable techniques.

  26. Coverage-based Example Selection for In-Context Learning

    Selecting examples independently by similarity can fill a prompt with paraphrases while omitting a needed operation. The paper's meeting-scheduling illustration contrasts redundant appointment examples with an example demonstrating how to find someone's manager. Its set-selection method rewards covering different relevant aspects of the query. Eight-shot experiments found the strongest benefits on compositional semantic-parsing splits, which test combining learned operations. The same method did not consistently improve ordinary classification and numerical-reasoning splits.

  27. What Makes Good In-Context Examples for GPT-3?

    KATE selects demonstrations by finding training inputs similar to the current query. In a sentiment-transfer experiment, three demonstrations came from SST-2 and predictions were evaluated on IMDB. With temperature zero, random selection averaged 87.95% accuracy with a 2.74-point standard deviation across five runs; selection using an unchanged RoBERTa-large encoder achieved 91.99%. Task-matched encoder training improved results further, whereas other encoder training objectives were less helpful.

  28. True Few-Shot Learning with Language Models

    The paper distinguishes the examples placed in a prompt from additional labeled examples used to choose that prompt. When prompt selection was restricted to very few examples, cross-validation and minimum-description-length criteria only slightly outperformed random selection on average and substantially underperformed selection using larger held-out sets. A prompt containing few demonstrations can therefore depend on considerable task-specific development data.

  29. The LLM Triangle: Engineering Principles for Robust AI Applications

    Select a small set of relevant demonstrations for each request instead of including the entire example collection.

  30. Fantastically Ordered Prompts and Where to Find Them: Overcoming Few-Shot Prompt Order Sensitivity

    The study held a balanced set of four SST-2 demonstrations fixed and evaluated all 24 orderings across GPT-2 and GPT-3 model sizes. Accuracy varied substantially despite unchanged examples and task. Rankings of effective permutations correlated weakly across models. Increasing demonstration counts improved performance in some settings but did not reliably remove ordering variance. Additional randomly selected demonstration sets were tested to check that the phenomenon was not confined to one set.

  31. Quantifying Language Models’ Sensitivity to Spurious Features in Prompt Design

    The authors varied meaning-preserving formatting choices such as separators, descriptor capitalization, and option numbering while fixing demonstration identity and order. Across 53 classification and multiple-choice tasks, ten sampled formats produced a reported median spread of 7.5 accuracy points across model and shot settings. Formats that worked well for one model could work poorly for another. The study evaluated shared cases and kept demonstrations out of evaluation.

  32. Calibrate Before Use: Improving Few-Shot Performance of Language Models

    Experiments identified biases toward labels occurring frequently in demonstrations, labels appearing near the prompt's end, and familiar answer tokens. On balanced SST-2 sentiment data, these biases could make a one-example prompt worse than a zero-example prompt by encouraging repetition of the demonstrated class. The proposed contextual calibration estimates answer preferences with a content-free query and adjusts output scores.

  33. Lost in the Middle: How Language Models Use Long Contexts

    Liu and colleagues varied only the position of answer-bearing material within multi-document question-answering prompts and synthetic key-value collections. Several tested models performed best when relevant information appeared near the beginning or end and worse when it appeared in the middle. Adding more retrieved documents could improve recall while answer performance saturated earlier. Repeating the query before and after the context nearly solved the synthetic retrieval task for tested decoder-only models but did little for multi-document question answering. Fitting information inside a supported context window therefore does not establish that its position or added distractors preserve task performance.

  34. Transformers: model-specific chat serialization

    A chat template converts ordered role/content messages into the token sequence a causal model continues, inserting model-specific role markers, message boundaries and special tokens. Models fine-tuned from the same base can require different formats: Mistral-Instruct brackets user messages with instruction delimiters, while Zephyr uses explicit speaker markers. The guide warns that incompatible control tokens degrade performance. Where the format requires it, add_generation_prompt=True appends the assistant-start marker; omitting it can cause continuation of the user's message instead of a reply. Some templates need no such marker. Templates already supply required special tokens: use apply_chat_template(tokenize=True), or tokenize the rendered string with add_special_tokens=False to avoid duplicated beginning/end tokens.

  35. Claude context windows and cached-token accounting

    Cached prefixes still occupy the context window. System instructions, tool definitions, messages and tool results consume capacity, and generated output also occupies the window. A useful planning constraint is I + O <= W, where I is counted input, O is generated output and W is the model's context capacity. Caching changes processing cost, not this capacity requirement. Inputs exceeding the window are rejected; generation at the limit follows model-specific overflow behavior.

  36. Text-generation-launcher arguments

    TGI distinguishes the maximum input length from the maximum total tokens allocated to a request. Clients provide input tokens and request max_new_tokens on top: the budgeting condition is input_tokens + requested_new_tokens <= max_total_tokens, with a separate input limit. For example, a total budget of 1,512 permits 1,000 input tokens and 512 new tokens. Application implication: count the fully serialized prompt, including instructions, history, retrieved evidence and formatting tokens, before reserving output space.

  37. Conversation state: managing the context window — OpenAI

    The context window limits tokens used in one request, including supplied input and generated output; applicable reasoning tokens also consume capacity. Instructions, conversation history, retrieved material and tool results supplied to that invocation therefore share its input budget. A simple worked design reserves generated-token capacity before allocating remaining space to input, while also respecting the model's separate output limit. For a reasoning model, reserve space for hidden reasoning as well as the visible answer without counting the same output tokens twice. Persisting a conversation does not make its usable context unbounded.

  38. MCP = Mega Context Problem - Matt Carey

    Creating and loading a separate tool for every API endpoint can make the tool descriptions themselves exceed a practical context budget.

  39. Effective context engineering for AI agents

    Context engineering selects and maintains the information supplied at each model invocation, including instructions, tools, external data, and conversation history. Instead of loading every possible document, an agent can retain references such as paths or queries and retrieve details when needed; this trades smaller working context for additional exploration latency. Compaction summarizes an existing conversation into a new context, while external notes preserve selected information across calls. Compression can discard details needed later, so shorter context is not automatically better context.

  40. Frontier results, on device - RL Nabors, Arize

    Isolate one prompt variable at a time; in this experiment, few-shot examples improved the desired behavior more than input reformatting, strict rules, or explicit chain of thought.

  41. Optimization in DSPy

    DSPy's optimization guide starts from a working program and an evaluation procedure, then separates data for optimization, validation, and held-out testing from earlier exploratory development. It warns that prompt optimizers can overfit small datasets. When results remain unsatisfactory, it recommends revisiting task definition, data, metrics, program structure, and optimization choices rather than assuming that another prompt edit will resolve the problem.

  42. Why building eval platforms is hard

    Persisting outputs in a nicer UI is insufficient; experimentation requires changing agent configurations and comparing scored runs.

  43. Prompt Engineering & AI Red Teaming

    The speaker reports that DSPy outperformed his manual prompt engineering in benchmarks conducted for The Prompt Report.

  44. Prompt Engineering & AI Red Teaming

    Reported performance can depend on prompting, output constraints, and answer extraction rather than only on the model.

  45. How Evals and Prompts Shape Agent Behavior — Preetika Bhateja & Daniel Bump, YouTube Ads

    Maintain tests for edge cases and broader capabilities, use the test set sparingly, and refresh evaluation data with production examples.

  46. Shipping AI That Works: An Evaluation Framework for PMs

    Lower judge temperature to improve repeatability and rerun evaluations to characterize remaining variance.

  47. Task Fidelity Scaling Laws — Kobie Crawford, Snorkel AI

    Failures must be separated into model capability failures and task or environment defects before low pass rates can be interpreted as meaningful difficulty.

  48. Shipping AI That Works: An Evaluation Framework for PMs

    Use 'evals for your evals': compare judge labels with human annotations and inspect disagreements rather than trusting generated explanations alone.

  49. NIST randomized blocks: applying controlled comparisons to RAG evidence

    NIST describes holding nuisance factors constant within blocks and randomizing remaining variation. Proposed RAG application: for each fixed query, compare the recorded baseline with a candidate-boundary intervention replacing candidates with independently verified sufficient source passages, then run the unchanged reranker, assembler and generator. Separately replace only the final evidence block with sufficient passages, bypassing retrieval and assembly. Keep corpus/ACL/time snapshot, question, prompt template, model/version, decoding settings, token budgets and evaluator fixed; record passage identities, order and every resulting context. For assembly diagnosis, replay the same candidates through original versus evidence-preserving assembly. Match evidence length and position where feasible; otherwise the treatment changes those too. Compare boundary coverage and answer support, not answer wording alone.

  50. How Evals and Prompts Shape Agent Behavior — Preetika Bhateja & Daniel Bump, YouTube Ads

    Early 'vibing'—non-scalable, intuition-based inspection—can reveal capabilities and failure patterns before investing in a comprehensive evaluation.

  51. How Evals and Prompts Shape Agent Behavior — Preetika Bhateja & Daniel Bump, YouTube Ads

    Start with a few core tasks and test prohibited behavior alongside task completion.

  52. Chain-of-Thought Prompting Elicits Reasoning in Large Language Models

    Chain-of-thought prompting augments input-answer demonstrations with intermediate natural-language steps. The paper compares this with demonstrations that give answers directly and reports gains on tested arithmetic, commonsense, and symbolic tasks. Its arithmetic experiments reused one set of eight worked examples across several benchmarks, with a separate four-example setup for multiple-choice AQuA.

  53. Large Language Models are Zero-Shot Reasoners

    The proposed zero-shot chain-of-thought method requests intermediate steps without worked demonstrations. Its actual experimental procedure has two stages: generate reasoning, then append an answer-extraction instruction and generate the final answer. Experiments used greedy decoding.

  54. Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Prompting

    The authors manipulated answer suggestions and demonstration answer positions while testing GPT-3.5 and Claude 1.0. These changes influenced predictions, yet generated explanations generally omitted the influential cues and sometimes rationalized incorrect answers. The experiment separates an explanation's plausibility from whether it accounts for factors that changed the prediction.

  55. Stop Guessing: Build Robust AI with Layered CoT

    The talk treats a generated step-by-step rationale as transparent and verifiable reasoning, but the chunk does not establish that the text faithfully represents the model's internal computation or that visibility alone ensures correctness.

  56. Prompt Engineering & AI Red Teaming

    Chain-of-thought prompting, placed under thought inducement in the talk, asks for intermediate steps before the final answer.

  57. The LLM Triangle: Engineering Principles for Robust AI Applications

    Few-shot demonstrations can communicate the intended category vocabulary when an instruction admits several correct interpretations.

  58. Persona Engineering: A Field Guide to AI Synthetic Personas — Ishan Anand, InsightSciences.ai

    Test whether answer ordering, wording changes, and challenges to stated opinions destabilize the persona.

  59. Prompt Engineering & AI Red Teaming

    The speaker argues that deception, misalignment, and reward hacking require intervention below the prompt level.

  60. Persona Engineering: A Field Guide to AI Synthetic Personas — Ishan Anand, InsightSciences.ai

    Choose persona construction and model empirically against human ground truth; more detail can amplify bias.