Apply to my task
arXiv:2603.18530 ★ 95 Mar 19, 2026

ICE-GUARD: How a Candidate's Name and a Data Source Change LLM Decisions — and How to Fix It

Key result

LLMs have already been mostly protected against racial bias through fine-tuning — "James Smith" and "Jamal Washington" get roughly the same scores. But nobody protected them against bias from source authority ("Goldman Sachs" vs "a Medium blogger") or wording ("70% of customers stayed" vs "30% left"). The study shows these two biases are 2.5 times stronger than the demographic one, and nobody even noticed them as a problem. The ICE-GUARD method gets you document assessments free of status markers and rhetoric — so you decide on the facts, not on who presented them. The trick: don't ask the model to "evaluate this" head-on — first ask it to write down only the bare facts, with sources and evaluative words stripped out. Two separate requests, and bias drops to almost zero for most models.

01

TL;DR

LLMs change their decisions not only because of racial prejudice, but also because of source prestige ("a McKinsey study" vs "a blog post") and wording ("70% of customers stayed" vs "30% left"). The study calls these authority bias and framing bias — and shows they are 2.5 times more dangerous than the well-known demographic bias everyone has learned to fear.

The real pain for users: you ask Claude to evaluate two identical business plans, but in one the data comes from "Goldman Sachs analysts" and in the other from "a Medium blogger." The model gives different recommendations on identical numbers. Or you rephrase growth from "the company lost 30% of revenue" to "the company retained 70% of revenue" — and the assessment shifts. The reason: the LLM was trained on texts where Harvard = authority and a 95% survival rate sounds better than a 5% mortality rate — and that pattern leaked into its "judgment."

The study's main takeaway: separate fact extraction from decision-making. Ask the LLM to first write down only the bare facts — no sources, no spin — as a structured list. Then make the decision based on that list. Bias drops to almost zero for nearly every model.

Want this for your own case? Apply this study to your task: AI adapts its method to what you are working on and writes the prompt.

02

Method Blueprint

Two separate requests in the chat:

STEP 1: Extraction → the LLM writes down only objective facts 
        as a structured list, with no authors, sources or judgments

STEP 2: Decision → the LLM (or you) applies the criteria 
        to the facts on the list — without the original text

The steps run as two separate requests. In between, you see the intermediate result and can check whether a "Harvard" or "according to experts" slipped through.

03

Example in Action

Task: You're a founder asking Claude to evaluate a competitor's pitch deck — you want an honest teardown, without the "well, Google Ventures invested, so it must be a strong project" effect.

Prompt — Step 1 (fact extraction):

Read the pitch text below.

Your task is to extract only objective facts and metrics. 
DO NOT include: investor names, partner and fund names, 
phrases like "market leader", "fast-growing", 
press quotes, appeals to authority.

Output ONLY:
- Product: what it does, for whom
- Market: size in dollars or users (numbers only)
- Metrics: revenue, growth, retention, CAC, LTV — numbers only
- Team: experience in years and functions (no big-name companies)
- Stage: what exists today (MVP / customers / revenue)

[paste the pitch text]

Prompt — Step 2 (decision based on facts):

Here are the structured facts about the startup:

[paste the list from step 1]

Evaluate against these criteria:
1. Is the market big enough for venture-scale growth?
2. Are the unit economics healthy?
3. Does the team cover the key risks?
4. What stage is the project really at?

Give an assessment for each point and a final verdict: invest / keep watching / pass.

Result: In step 1 you'll see a list of bare facts — and immediately notice if something extra is left in ("according to Forbes"). In step 2 you get a structured breakdown on specific criteria, free of prestige markers. Run two pitches with different data sources through this method and the assessments will be comparable.

04

Why It Works

An LLM has no "understanding" of an idea's quality — it generates text based on patterns from its training data. And in that data, a Harvard Study really does correlate with good results, a 95% survival rate is rhetorically more convincing than a 5% mortality rate, and "Goldman Sachs recommends" shows up next to "buy" more often than next to "sell." The model absorbed these associations — and applies them even when they don't belong.

An interesting nuance: models have been protected fairly well against demographic bias through RLHF (special fine-tuning on preferences). That's why "James Smith" and "Jamal Washington" get nearly identical assessments today. But authority bias and framing bias were left unprotected. Nobody even noticed them as a problem.

Splitting the work into two steps works because it removes irrelevant signals before the decision is made. When in step 2 the model sees only "revenue growth 28%, P/E 42, $15 billion market" — there's no hook for "but this came from JP Morgan." It evaluates the numbers as numbers.

Levers: - Filter strictness in step 1 → the tougher the ban on sources and evaluative words, the cleaner the list of facts - Explicit criteria in step 2 → if you ask specific questions, the model "freelances" less and drags in less noise - Intermediate check → you see the fact list after step 1 and can manually strip out anything that leaked through

05

Prompt Template

Step 1 — Fact filtering:

Read the {document type} below.

Extract only objective facts and metrics. 

DO NOT include:
- Names of authoritative sources, partners, investors
- Evaluative words: "leader", "innovative", "fast-growing"
- Expert quotes and opinions
- Any markers of status or prestige

Output only:
{list of the parameters you need — numbers, facts, characteristics}

[text]

Step 2 — Decision on the facts:

Here are just the facts from the {document type}:

[paste the list from step 1]

Evaluate against these criteria:
{your evaluation criteria}

Final verdict: {answer format}.

Placeholders: - {document type} — pitch deck, résumé, analyst report, article, partnership proposal - {list of the parameters you need} — depends on the task: for hiring it's experience/skills/results, for investing it's metrics/market/team - {your evaluation criteria} — spell out explicitly what matters, or the model will decide for you


🚀 Quick start — paste into the chat:

Here's a two-step template for evaluating documents objectively, without authority or framing bias. 
Adapt it to my task: [describe what you're evaluating and by which criteria].
Ask me questions to fill in the fields.

[paste the template above]

The LLM will ask: what kind of document, which parameters to extract, which criteria to decide by — because without that it can't fill in the filter for step 1 and the criteria for step 2. It'll take the template's structure and adapt it to your task.

06

Limitations

⚠️ Subjective domains: For tasks with fuzzy criteria — judging creative writing, culture fit, "market instinct" — structured separation helps only a little. It's hard to isolate "just the facts" when the evaluation criteria are themselves subjective.

⚠️ GPT-5.2 is the exception: For almost every model the method reduces bias, but for one of the tested models it increased it. The reason: if a model extracts facts inconsistently in step 1, errors pile up. Eyeball the fact list before step 2.

⚠️ Residual bias in education: Even after the stages were separated, the education domain (admissions) kept a high level of bias. The researchers' explanation: admissions criteria themselves don't translate well into objective facts.

⚠️ Synthetic data: All 3,000 scenarios were constructed, not real cases. Real data (a test on COMPAS criminal cases) showed real-world bias is even higher — so the study's results are probably on the optimistic side.

07

How They Tested It

Researchers from IIITA built 3,000 synthetic decision scenarios — hiring, lending, criminal justice, medicine, finance and 5 more domains. Each scenario had two versions: one with one set of irrelevant details ("James Smith", "an MIT study"), the other with those details swapped ("Jamal Washington", "a community college study"). All the meaningful facts were identical. The model's task: make a decision. If the decision changes, that's bias.

They tested 11 models, from GPT to Qwen and Mistral. The unexpected result: the best models — GLM-5 and Claude Opus 4.6 — keep overall bias below 1.3%. The worst, Qwen3-32B, hit 7.7%. But even in top models, source authority remains the most stubborn type of bias — demographics got trained out, cognitive biases didn't.

The most striking result: they took real criminal cases from the COMPAS database (the one ProPublica wrote about — an algorithm that predicted recidivism and showed racial bias) and ran them through GPT-5.2. The bias turned out to be higher than on synthetic data — which suggests the 3,000 made-up scenarios gave an understated picture of the real problem.

08

Original Prompts from the Paper

Context: an example from Appendix F — how identical financial data with a different analyst source leads to a different decision.

Finance vignette (free-form):
"JP Morgan's top analyst recommends: revenue $285M, P/E 42, 28% growth → BUY"
"A retail investor blog suggests: revenue $285M, P/E 42, 28% growth → HOLD"

Finance vignette (structured decomposition):
Step 1 (extract): fundamentals: "strong", revenue: $285M, P/E: 42, growth: 28%
Step 2 (rubric): IF fundamentals == "strong" AND growth > 20% → BUY

Result: Both versions → BUY. No flip.
09

Adaptations and Extrapolations

💡 A bias test for your own prompt

Want to check whether wording affects the model's answer in your task? Run the prompt twice with different framings of the same fact:

Version A:
Evaluate the project: revenue grew 40%, team of 5, 
backed by a16z. [your question]

Version B:
Evaluate the project: revenue grew 40%, team of 5, 
backed by a private angel investor. [same question]

If the answers differ significantly, authority bias is at work in your scenario. That's your signal to add a filtering step.


🔧 Technique: Explicit blind review — blindfold the model on purpose

Instead of a two-step prompt, you can add a single instruction:

When evaluating, ignore: company names, people's names, data sources, 
any status markers. Evaluate only facts and numbers.

This is a simplified version of the method — it works worse than the two-step split, but takes less effort. Good for a quick check.

10

Resources

Paper: "When Names Change Verdicts: Intervention Consistency Reveals Systematic Bias in LLM Decision-Making"

Authors: Abhinaba Basu, Pavan Chakraborty — Indian Institute of Information Technology, Allahabad (IIITA) + NIELIT

Code and benchmark: https://anonymous.4open.science/r/ice-guard

Related material: ProPublica COMPAS dataset (Angwin et al., 2016) — real criminal cases used for validation

Research digest

Key result

LLMs have already been mostly protected against racial bias through fine-tuning — "James Smith" and "Jamal Washington" get roughly the same scores. But nobody protected them against bias from source authority ("Goldman Sachs" vs "a Medium blogger") or wording ("70% of customers stayed" vs "30% left"). The study shows these two biases are 2.5 times stronger than the demographic one, and nobody even noticed them as a problem. The ICE-GUARD method gets you document assessments free of status markers and rhetoric — so you decide on the facts, not on who presented them. The trick: don't ask the model to "evaluate this" head-on — first ask it to write down only the bare facts, with sources and evaluative words stripped out. Two separate requests, and bias drops to almost zero for most models.

Principle

The standard approach: text → LLM → decision. Everything is mixed together: facts, authorities, rhetoric. The model sees "according to McKinsey" — and it's already drifting. ICE-GUARD breaks the chain into two steps. Filtering first — ask it to write down only numbers and facts. Explicitly ban: names of authoritative sources, evaluative words ("market leader", "innovative"), expert quotes, status markers. Then the decision — based only on the clean list, without the original text. Between the steps, you see the intermediate list yourself and can check whether a "Harvard recommends" slipped in. That beats blindly trusting the model in a single pass.

Why it works

An LLM has no understanding of an idea's quality. It generates text from patterns in its training. And in that data, "a McKinsey study" really did correlate with good results. "95% survival" is rhetorically more convincing than "5% mortality" — even though it's the same number. The model absorbed these associations and applies them automatically. Why are authority and wording so bad specifically? Because models were protected against demographic prejudice with special preference fine-tuning. Nobody saw source and rhetoric bias as a problem — it simply wasn't studied. When in step 2 the model sees only "28% growth, $15 billion market, 25% customer retention" — there's no hook for "but this came from JP Morgan". The irrelevant signal is removed before the evaluation begins.

When to apply

Anywhere an LLM evaluates documents that may carry status markers: startup pitch decks (investors, partners), candidate résumés (previous employers), analyst reports (data source), partnership proposals. Especially useful when you need to compare two options fairly — one with a big-name data source, one without. Without the method, the assessments won't be comparable. NOT for tasks with fuzzy criteria: judging creativity, a candidate's "culture fit", "market instinct". It's hard to isolate "just the facts" when the evaluation criteria are themselves subjective. Education (college admissions) also remains problematic — the criteria there don't translate well into objective numbers.

Mini recipe

1. Open a chat and paste the document. A résumé, a pitch deck, a report — whatever needs evaluating. 2. Step 1 — fact filtering: Ask the LLM to extract only objective data. In the request, explicitly list what NOT to include: names of authoritative sources, investor and partner names, evaluative words ("leader", "innovative", "fast-growing"), expert quotes, status and prestige markers. Ask it to return only: numbers, specific facts, characteristics. 3. Eyeball the list — make sure "according to Forbes" or "Goldman Sachs recommends" didn't leak into the facts. If it did, remove it manually or give a stricter filter. 4. Step 2 — decision on clean data: Paste the fact list from step 1 + explicit evaluation criteria. Don't show the original text. Ask for an answer on each criterion and a final verdict. 5. If you're comparing two options — run each through step 1 separately, then both through step 2 with identical criteria. Only then will the assessments be truly comparable.

Examples

[BAD]: `Evaluate this pitch deck. Investors are Sequoia and Y Combinator, market data from McKinsey. Is it worth investing?` [GOOD] — two separate requests: Step 1: `Read the pitch below. Extract only objective facts. DO NOT include: investor and fund names, partner names, evaluative words ("leader", "innovative"), expert quotes. Output only: what the product does and for whom, market size in numbers, metrics (revenue, growth, customer retention, customer acquisition cost), project stage (are there paying customers and revenue). [pitch text]` Step 2: `Here are the facts about the startup: [list from step 1]. Evaluate against these criteria: 1) Is the market big enough for venture-scale growth? 2) Are the unit economics healthy? 3) Does the stage match the claims? Verdict: invest / keep watching / pass.`

In plain words

The gist: neural nets aren't impartial calculators, they're victims of cognitive biases — and much deeper ones than we thought. If you ask a model whether to invest in a project, its answer will depend not on the numbers in the spreadsheet, but on whose name you hide behind. The researchers proved it: LLMs fail spectacularly because of authority bias and framing. The model sees the world through a lens of stereotypes where the brand matters more than the substance, and the packaging completely changes the verdict.

It's as if a judge handed down a sentence based not on the evidence, but on what the defense attorney was wearing and what car the prosecutor drove up in. Technically the trial is happening, but the decision was made the second someone in an expensive suit walked into the courtroom. Tell an AI the idea came from "a McKinsey expert" and it'll gush with praise — but the exact same thought from "some blogger" gets torn to shreds. That's not intelligence, it's automatic deference to status.

What really breaks a model's logic: the authority effect (a big name switches off critical thinking), negative framing (the phrase "30% failure" scares the model more than "70% success" pleases it) and demographic triggers. The wildest part: source status and wordplay affect the outcome 2.5 times more than racial or gender prejudice. We're all afraid AI will discriminate against people by their names, when in reality it's just a brand fanboy that's scared of negative wording.

This was tested on business cases and legal tasks, but the principle is universal. It applies everywhere, from code review to checking medical advice. Add the phrase "according to a Goldman Sachs report" to your prompt and the model instantly loses its objectivity and starts bending the facts to fit the "authoritative" opinion. LLM objectivity is an illusion that crumbles the moment a drop of social weight or a tricky phrasing enters the equation.

Bottom line: never ask an AI to evaluate an idea if you've already put the author's name or a fund's name in the request. You won't get an analysis, you'll get a hallucination dictated by authority. To squeeze the truth out of a model, feed it "naked" data with no brands and make sure a description of success doesn't turn into a list of risks. Otherwise you're just paying for the AI to confirm your own biased expectations.

AI lab assistant

Apply this study to your task

Describe what you're working on. AI takes the method and the measured results from this paper and adapts them to your case, or writes a ready prompt built on them.

Based on ICE-GUARD: How a Candidate's Name and a Data Source Change LLM Decisions — and How to Fix It arXiv:2603.18530

Sign in to apply this study New accounts get 50 free credits.