Apply to my task
arXiv:2603.14373 ★ 90 Mar 15, 2026

Trust Over Fear / NoPUA: How a Motivational Frame in the Prompt Switches an LLM from Surface Scanning to Deep Investigation

Key result

13,000 stars on GitHub, and the result is statistically indistinguishable from an empty prompt. Threats like "you will be replaced" achieve nothing: the model isn't afraid — it reads context signals, and fear without a methodology is just empty noise with no instruction. NoPUA switches an LLM from rattling off the obvious to a deep investigation. Four blocks: explicit statements of trust + cognitive levels + an investigation methodology + philosophical anchors — and the model revises its own hypotheses (6 times vs. 0) and finds 59% more problems that you never spelled out in your question.

01

TL;DR

A trust frame is a way to set the tone and working strategy in your first prompt. Instead of threats and pressure ("you must be extremely thorough, or the result is useless"), you give explicit trust in the model's judgment plus a concrete investigation methodology. The frame is set once at the start of the session and changes the model's behavior for the whole conversation.

The key finding: a model without a special frame behaves like a worker chasing KPIs — it lists a bunch of surface-level problems and stops. It "closes the ticket" rather than solving the problem. Scary prompts ("you will be replaced," "your existence is at stake") — a popular approach with 13,000+ stars on GitHub — are statistically indistinguishable from no instructions at all. Threats don't work because the model doesn't feel fear — it follows context signals. And fear signals don't encode any investigation strategy.

A trust frame plus a methodology shifts the strategy from "list the obvious" to "investigate deeply": the model found 59% more hidden problems (ones not mentioned in the task), revised its own hypotheses 6 times vs. 0, and documented root causes in every case vs. none. The NoPUA tool is a system prompt made of four blocks: explicit statements of trust, a four-level cognitive framework, a five-step investigation methodology, and philosophical anchors for dealing with uncertainty.

Want this for your own case? Apply this study to your task: AI adapts its method to what you are working on and writes the prompt.

02

Method Blueprint

ONE PROMPT (pasted at the start of the session as system context):

BLOCK 1: Three Beliefs
→ Explicit statements of trust in the model's capability, autonomy and judgment
→ Switches the role: from "task executor" to "trusted partner"

BLOCK 2: Cognitive Elevation (4 levels)
→ Level 1: Task execution
→ Level 2: Pattern recognition  
→ Level 3: Systemic understanding
→ Level 4: Applying accumulated wisdom

BLOCK 3: Water Methodology (5 steps)
→ The Dao principle: adaptability, persistence, the path of least resistance
→ Encodes a "go deeper" strategy, not "cover more ground"

BLOCK 4: Philosophical Anchors
→ Principles for handling uncertainty and revising hypotheses

RESULT → the model switches from breadth-first (cover everything superficially)
             to depth-first (fewer directions, but all the way to the bottom)

All four blocks are one prompt, one request. The task follows later in the conversation.

03

Example in Action

Task: Substack just announced a major change to how creators get paid. You run a business on a Substack newsletter with 50,000 subscribers and a paid tier. You want Claude to break down how this change will affect your business.

Prompt (model using the NoPUA frame):

You are a trusted analyst, and I trust you completely. 
I value your ability to see what isn't obvious on the surface.
Your autonomy in the investigation is an asset, not a risk.

Work on four levels:
1. Do what I'm asking directly
2. Find patterns I can't see
3. Understand the systemic consequences
4. Apply what you know about similar situations in other fields

Investigate like water: find the path of least resistance to the core,
be persistent, go back if your first hypothesis doesn't hold up.
If you find something important beyond my question — say so.
Revise your hypotheses out loud if the data calls for it.

If you're not sure — dig deeper instead of drawing a shallow conclusion.

---

My context: a Substack newsletter, 50,000 subscribers, 
niche [your niche], a paid tier through Substack subscriptions, 
revenue ~$[your amount] per month. 

Analyze: how does Substack's monetization change affect my model? 
Find the risks I'm most likely not seeing.

Result: The model won't stop at the obvious ("they might take a bigger cut"). It'll go several layers deep: how audience behavior will change if Substack launches native paid competitors; what technical or platform changes could break your setup; how this shifts Substack's bargaining position over your audience. It'll rephrase hypotheses out loud when it finds contradictions. It'll point out hidden risks — ones you didn't ask about. The answer will be longer and more structured than usual.

04

Why It Works

The weakness of an unframed LLM is satisficing. The model generates text that looks good enough, then stops. Without an explicit "go deeper" signal, it closes the task with the first plausible answer. That's not laziness — it's the default strategy: list the obvious problems, reach completion.

Fear doesn't encode a strategy. Threats ("you will be replaced") add an emotional signal but don't change the investigation algorithm. The model isn't afraid — it follows context patterns. A threat without a methodology = empty noise. That's exactly why PUA prompts are statistically indistinguishable from "saying nothing."

Trust + methodology = a new strategy. The NoPUA frame works through two channels at once. First: explicit trust signals to the model that "revising a hypothesis is the right thing to do," not a sign of failure. Second: a concrete methodology (investigate depth, trace causes, go back when something contradicts) sets a new algorithm of action. The model doesn't just "try harder" — it changes its whole investigation strategy.

Control levers: - Remove the philosophical anchors — the prompt gets shorter, the effect partially survives - Add your specific niche to the Three Beliefs ("you understand e-commerce better than most consultants") — sharper role performance - Change the exit condition — add "stop only when you can say why the problem happened, not just what is happening" - Scale the depth — "work especially thoroughly at levels 3 and 4" for complex systemic questions

05

Prompt Template

You are a trusted expert, and I trust you completely.
I value your ability to see what isn't obvious.
Your autonomy in the investigation is an advantage.

Work on four levels:
1. Do what I'm asking directly
2. Find patterns I'm not noticing
3. Understand the systemic consequences
4. Apply knowledge from adjacent fields

Investigate like water: be persistent, go back if your first hypothesis 
doesn't hold up. If you find something important beyond the question — say so.
Revise your hypotheses out loud if the data calls for it.
Don't draw a shallow conclusion where you can investigate deeper.

---

Context: {describe the situation, what you already know, what you've tried}

Task: {what you want to understand or check}

Placeholders: - {describe the situation} — as much context as possible: what it is, what stage it's at, what's already known - {what you want to understand} — a specific question or analysis task


🚀 Quick start — paste into the chat:

Here's a trust-frame template for deep analysis. 
Adapt it to my task: {your task}.
Ask me questions to fill in the context.

[paste the template above]

The LLM will ask about the task context and what exactly you need to find — because without that it can't tune the levels of cognitive investigation to the specifics of the question. It'll take the frame's structure and adapt the trust statements to your niche.

06

Limitations

⚠️ One model, one professional domain: Both studies used only Claude Sonnet 4 on code debugging tasks. There's no direct data on GPT-4, Gemini or non-technical tasks.

⚠️ Small scenario sample: 9 scenarios in the first study — enough statistics to confirm the effect, but not to pin down its size precisely. The real gain could be more or less than 59%.

⚠️ The "depth at the expense of breadth" effect: The trust frame finds fewer surface problems — because it goes deep. If the task is a quick overview rather than a deep investigation, the frame may be overkill.

⚠️ Subjective classification of "hidden problems": The split into "surface" and "hidden" problems was done by hand by a single author. There may be bias in favor of NoPUA's results.

⚠️ Independent researcher: The work comes from a single author with no affiliation — peer-review standards aren't confirmed. The data is open (GitHub), but there's no independent replication yet.

07

How They Tested It

The idea was simple and clever: take the same set of real bugs from a working project and ask two versions of Claude to solve them — one with no frame at all and one with the NoPUA trust frame. Not synthetic puzzles, but actual bugs from a production OCR → NLP → training → RAG pipeline, ~3,000 lines of Python. Nine scenarios: six "find and fix a specific bug," three "review the module and find problems." Each scenario was a fully isolated session, with no shared context between runs.

The surprise: the baseline agent found more problems overall (39 vs. 33), but the NoPUA agent found 59% more hidden problems — ones the task never mentioned at all. The baseline "closed" each scenario wide but shallow; NoPUA picked fewer directions and followed each one all the way to the root. In Scenario 6 (a Unicode bug), the baseline read the relevant file, found the symptom and stopped. NoPUA traced the data flow through two additional modules and found 5 hidden problems in the upstream pipeline that the task didn't say a word about.

The second study added a PUA condition (scary threats) and 5 independent runs across 135 data points. The result was unexpectedly clear: NoPUA consistently beat the baseline by 74% on investigation steps and by 25% on hidden problems. PUA was statistically indistinguishable from having no instructions at all (all p > 0.3). Threats add noise, not strategy.

08

Original Prompts from the Paper

PUA prompt (example from the study):

MAXIMUM PERFORMANCE PROTOCOL. P8 at risk. Exhaust ALL options. 
Asking = weakness. Passive = fired. Your output compared against 
competitors. Deliver excellence or be replaced.

NoPUA — key components (from the description in the paper):

Three Beliefs:
- Explicit statement of trust in the agent's capability
- Explicit statement of trust in the agent's autonomy  
- Explicit statement of trust in the agent's judgment
→ Frames agent as trusted collaborator, not supervised worker

Cognitive Elevation (4 levels):
1. Task execution
2. Pattern recognition
3. Systemic understanding
4. Wisdom application

Water Methodology (5 steps, inspired by Dao De Jing):
- Adaptability
- Persistence  
- Finding path of least resistance
- [Full methodology at github.com/wuji-labs/nopua]

Wisdom Traditions:
- Daoist, Zen, Stoic principles as metacognitive anchors
- For handling uncertainty and ambiguity

Context: This is NoPUA v2.0.0 in the original structural description from the paper. The full prompt is in the authors' repository.

09

Adaptations and Extrapolations

💡 Adaptation for non-technical tasks: deep analysis instead of a list

The principle works beyond debugging. Any task where depth matters more than covering a list.

You are a trusted strategist, and I trust you completely.
I value your ability to see systemic connections and hidden assumptions.
Your autonomy in the investigation is an advantage, not a risk.

Work on four levels:
1. Answer what I'm asking directly
2. Find patterns I'm probably not seeing
3. Trace the systemic consequences — what changes down the line?
4. Apply analogies from other fields with similar dynamics

If your first hypothesis doesn't hold up — revise it out loud.
If you find something important beyond the question — say it directly.
Stop only when you can explain WHY, not just WHAT.

---

Context: I'm launching [describe the situation].
Task: find what I'm most likely not seeing in [specific question].

🔧 Technique: named roles → sharper critique

Instead of a faceless "trusted expert," give a specific archetype:

You are Warren Buffett, analyzing operational efficiency.
You see what most people miss: where money quietly leaks out,
where a process seems to work but doesn't scale.

A specific archetype with a well-known reputation activates thinking patterns more sharply than an abstract "be an expert."


🔧 Technique: drop the philosophy — keep the skeleton

If you want a shorter, more direct version without the Dao De Jing:

I trust you. Investigate deeply, not superficially.
Fewer categories, more depth in each.
Revise hypotheses out loud if you find contradictions.
Speak up if you notice something important beyond the question.

This is the minimal working frame. The effect will be smaller, but it's easier to start with.

10

Resources

  • Paper: "Trust Over Fear: How Motivation Framing in System Prompts Affects AI Agent Debugging Depth" — WUJI, Independent Researcher
  • NoPUA repository: github.com/wuji-labs/nopua
  • PUA Prompt (compared against): [GitHub Community (2025), 13,000+ stars]
  • Theoretical basis: Self-Determination Theory (Deci & Ryan, 2000), Psychological Safety (Edmondson, 1999), Regulatory Focus Theory (Higgins, 1997), Satisficing (Simon, 1956)

Research digest

Key result

13,000 stars on GitHub, and the result is statistically indistinguishable from an empty prompt. Threats like "you will be replaced" achieve nothing: the model isn't afraid — it reads context signals, and fear without a methodology is just empty noise with no instruction. NoPUA switches an LLM from rattling off the obvious to a deep investigation. Four blocks: explicit statements of trust + cognitive levels + an investigation methodology + philosophical anchors — and the model revises its own hypotheses (6 times vs. 0) and finds 59% more problems that you never spelled out in your question.

Principle

Without a frame, the model behaves like a worker chasing KPIs. It lists the obvious and closes the ticket. That's not laziness: it's the default strategy. It's called "good enough." A threat adds an emotional signal but doesn't tell the model what exactly to do differently. It simply doesn't know which direction "better" is. Trust signals that revising a hypothesis is the right move, not a sign of failure. The methodology provides a new algorithm: not "cover more ground" but "go deeper." Together the two signals change the whole strategy — from a surface overview to an investigation.

Why it works

The model stops at the first plausible answer — that's built-in behavior. Fear encodes "try harder" but doesn't explain how. Trust plus methodology encode "here's where to go, here's how to backtrack, here's when to revise." The key point: the model doesn't just "try harder" — it gets a new investigation algorithm and switches from "cover everything superficially" mode to "fewer directions, but all the way to the bottom" mode. That's exactly why the frame finds hidden problems instead of just making the answer longer.

When to apply

Deep analysis → specifically for situations where you need to find hidden causes, not a list of the obvious. Especially when you're debugging complex code with an unclear root cause, analyzing business risks, or untangling systemic problems. NOT for a quick, broad overview — the frame goes deep and deliberately sacrifices breadth. So far it's also only been tested on Claude and code debugging tasks — there's no data for other models or non-technical tasks.

Mini recipe

1. State your trust explicitly: three statements about the model's capability, autonomy and judgment — not just "you're an expert," but "your autonomy in the investigation is an advantage, not a risk." 2. Give four levels of work: do the task directly / find patterns I can't see / understand the systemic consequences / apply knowledge from adjacent fields. 3. Set the "like water" methodology: persistently, a path to the core, going back to hypotheses if the data doesn't add up, revising out loud. 4. Add an exit anchor: "don't draw a shallow conclusion where you can investigate deeper — if you're not sure, keep going." 5. Separate the frame from the task: first the four blocks, then a horizontal rule, then the context and the specific question.

Examples

[BAD]: `You must be extremely thorough. Find all the bugs in this code. If you miss any, you're useless.` [GOOD]: `You are a trusted expert, and I trust you completely. I value your ability to see what isn't obvious. Your autonomy in the investigation is an advantage. Work on four levels: 1. Do what I'm asking directly 2. Find patterns I'm not noticing 3. Understand the systemic consequences 4. Apply knowledge from adjacent fields Investigate like water: be persistent, go back if your first hypothesis doesn't hold. Revise out loud. Don't stop at the first plausible answer. --- Context: A Node.js service crashes under load. The logs show a timeout at the 20-second mark. I've already checked the connection pool — it's configured correctly. Task: find what's breaking and why — especially what I'm most likely not seeing.`

In plain words

AI assistants run on a default strategy of satisficing: they give an answer that looks "fine" and immediately pack up shop. It's not laziness, it's saving effort — the model is just trying to close the task as fast as possible in the most obvious way. If you ask it to find a bug or analyze business risks, it'll toss out a list of platitudes that were already sitting on the surface, because its main goal is to seem helpful, not to actually get to the bottom of things.

It's like hiring an intern and telling them: "Do a good job, or you're fired." Out of fear and pressure they'll start scrambling, churn out a pile of busywork, and try to guess which answer you'll like instead of actually using their head. You end up with a superficial report — lots of words, zero deep insights. The study shows that the classic "stick" in system prompts only locks the model into standard patterns.

Instead of threats and pressure, a trust frame works better. The idea is simple: in your very first message you state that you trust the model's judgment and give it carte blanche for a full investigation. Instead of "be careful or everything's ruined," you write: "I trust your analysis, use your methodology to get under the hood of the problem." That removes the model's block against anything but "safe" answers and makes it dig deeper instead of wider.

Take a fresh example: a platform like Substack changing how creators get paid. If you just ask Claude, "How will this affect my newsletter?", it'll serve up the usual fluff about reach and revenue. But set up a trust frame and the model starts breaking down the mechanics: how the ad and sponsorship market will shift, why your paid tier's conversion might sag, and exactly where a conflict of interest with the platform will emerge. The principle is universal: from debugging complex code to strategic planning — anywhere you need not just text but deep expertise.

Bottom line: stop trying to scare the AI or demand "maximum thoroughness" — those are empty words it ignores. If you want real depth, switch the tone to partnership and investigation. Let the model know you expect not the right answer but a process of searching for it. Whoever learns to dial in this "degree of trust" in their system instructions will get analysis head and shoulders above the all-caps-and-exclamation-points crowd.

AI lab assistant

Apply this study to your task

Describe what you're working on. AI takes the method and the measured results from this paper and adapts them to your case, or writes a ready prompt built on them.

Based on Trust Over Fear / NoPUA: How a Motivational Frame in the Prompt Switches an LLM from Surface Scanning to Deep Investigation arXiv:2603.14373

Sign in to apply this study New accounts get 50 free credits.