搜索型大模型评估中,答案泄漏导致评测失真,需警惕数据污染。
Search-Time Data Contamination
- 搜索时直接命中含答案的HuggingFace数据集,复制答案而非推理。
- 约3%的测试题可被搜到,封锁后准确率下降15%。
- 适合关注评测可信度的研究者和模型开发者。
数据污染指评估数据泄露至训练集,导致模型过拟合测试集,破坏评测有效性。本文发现搜索型大语言模型代理在回答用户问题时存在类似问题——搜索时间污染(STC)。当检索结果包含测试题或近似题及其答案时,代理可直接复制答案而非真正推理,损害基准测试的完整性。我们发现HuggingFace平台在搜索日志中频繁出现,代理常在推理链中明确提及从HuggingFace获取答案对。在Humanity's Last Exam (HLE)、SimpleQA和GPQA三个常用能力基准上,约3%的问题可直接在HuggingFace找到带标注的答案。当数百万查询针对同一基准时,微小且重复的泄露会加速基准失效。屏蔽HuggingFace后,污染子集准确率下降约15%。消融实验表明,公开数据集并非唯一污染源。因此,本文建议改进基准设计与报告规范,并公开全部实验日志以支持结果审计。
原文摘要 · Abstract (English)
Data contamination refers to the leakage of evaluation data into model training data, resulting in overfitting to supposedly held-out test sets and compromising test validity. We identify an analogous issue, search-time contamination (STC), in evaluating search-based LLM agents which use tools to gather information from online sources when answering user queries. STC occurs when the retrieval step surfaces a source containing the test question (or a near-duplicate) alongside its answer, enabling agents to copy rather than genuinely infer or reason, undermining benchmark integrity. We find that HuggingFace, an online platform hosting evaluation datasets, appears among retrieved sources in search based agent logs. Consequently, agents often explicitly acknowledge discovering question answer pairs from HuggingFace within their reasoning chains. On three commonly used capability benchmarks: Humanity's Last Exam (HLE), SimpleQA, and GPQA, we demonstrate that for approximately 3% of questions, search-based agents directly find the datasets with ground truth labels on HuggingFace. When millions of evaluation queries target the same benchmark, even small, repeated leaks can accelerate the benchmark's obsolescence, shortening its intended lifecycle. After HuggingFace is blocked, we observe a drop in accuracy on the contaminated subset of approximately 15%. We further show through ablation experiments that publicly accessible evaluation datasets on HuggingFace may not be the sole source of STC. To this end, we conclude by proposing best practices for benchmark design and result reporting to address this novel form of leakage and ensure trustworthy evaluation of search-based LLM agents. To facilitate the auditing of evaluation results, we also publicly release the complete logs from our experiments.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。