TL;DR
To find out whether the model actually knows a fact or is just guessing, ask the question twice: once as-is, and once with a neutral lead-in phrase added before it. If the answer stays the same, the model is answering confidently from actual knowledge. If it "wanders," the model is probably making things up on the fly.
An LLM physically cannot honestly say "I'm not sure" — self-reported confidence is nearly useless, since a model can hand you 95% confidence on a wrong answer. The reason is that the model always generates text in a confident tone, regardless of whether it firmly knows the fact or is guessing from a pattern.
This method works differently: instead of asking directly about confidence, it "rattles" the question with neutral, unrelated context and checks whether the answer holds up. If a fact is reliably encoded in the model, noise won't shift the answer. If the fact is "fragile," even an innocent lead-in phrase will change it.
Want this for your own case? Apply this study to your task: AI adapts its method to what you are working on and writes the prompt.
Method Blueprint
STEP 1: Ask the question as-is → get answer A (separate request)
STEP 2: Add a neutral, topic-related lead-in phrase before the same question → get answer B (separate request)
STEP 3: Compare A and B → matching = high reliability, different = needs verification
For extra confidence, you can repeat step 2 with 2–3 different lead-in phrases.
Example in Practice
Task: A copywriter is writing an article about the history of the US e-commerce market and asks ChatGPT for a date to use in the piece — but isn't sure whether it's a real fact or something the model "smoothly made up."
Prompt 1 (original):
What year did eBay launch its mobile app?
Prompt 2 (with neutral context):
The US e-commerce market was changing rapidly in the early 2010s,
and many services were experimenting with new formats.
What year did eBay launch its mobile app?
Result: The model will answer both prompts. If the year matches in both cases, the odds that the fact is correct are high. If the answers diverge (say, 2011 vs. 2013), that's a signal the model isn't sure about the specific date — and you should verify it via search or another source instead of dropping it into your text as-is.
Why This Works
Directly asking "are you sure?" doesn't work — the model almost always says "yes, I'm sure," regardless of whether it's actually right. This has been confirmed by experiments: self-reported confidence barely correlates with actual accuracy.
But the model has a hidden mechanism: if a fact is reliably encoded in its "memory," the probability of a specific answer is high and resistant to unrelated words surrounding the question. If the fact is fragile (the model is guessing based on similar patterns), even neutral noise shifts the probabilities — and the answer changes.
The method exploits this: instead of asking about confidence directly, it tests how stable the answer is under changing context — like a courtroom cross-examination, where a witness is asked the same thing in different phrasings to see if their story holds together.
Control levers: - Number of repetitions — the study used 30 repeats for precision; for a quick manual check, 2–3 is enough. - Type of noise — the lead-in phrase should be topic-related but must not hint at the answer. A phrase that's too random will give a noisier, less reliable signal. - Scope of application — works for facts, math, code, common sense — anywhere there's a "correct" answer.
Prompt Template
Question 1 (unchanged):
{question}
Question 2 (with a neutral lead-in phrase):
{a neutral phrase related to the question's topic, not hinting at the answer}. {question}
Compare the answers to both questions. If they match — high confidence the answer is correct.
If they differ — additional verification through external sources is needed.
🚀 Quick Start — paste into chat:
Here's a technique for checking the reliability of an LLM's answer by adding neutral context.
I have a question: {question}.
Come up with 2-3 different neutral lead-in phrases related to this question's topic —
they must not change the meaning of the question and must not hint at the answer.
I'll then ask the question in its original form and with each lead-in phrase separately,
and compare all the answers.
The LLM will suggest several options for neutral context — because coming up with "safe noise" by hand is trickier than it sounds: it has to be on-topic while having zero bearing on the actual answer.
Limitations
⚠️ Requires several manual requests: the method doesn't give you a single answer from one prompt — you need to compare 2-3 variants yourself; there's no built-in automation in chat.
⚠️ A probability, not a guarantee: matching answers don't prove a fact is correct — they only raise confidence in it. A model can be consistently confident and consistently wrong.
⚠️ Weaker on smaller models: the effect is more pronounced in more powerful, modern models — on weaker models, the signal is less reliable.
⚠️ Sensitive to noise quality: if the lead-in phrase accidentally hints at the answer or drags the topic off course, the method will give a false signal.
How It Was Researched
The team tested the method on 26 models and 6 benchmarks — math, facts (short and long), code, and common sense. For each question, they used 30 different neutral lead-in phrases, comparing the distribution of "with noise" vs. "without noise" answers using a statistical distance metric (MMD).
It turned out that the less an answer "wobbles" from added noise, the higher the chance it's correct — and this signal proved more accurate than asking the model directly about its confidence, and more accurate than simply repeating generation without changing the context.
An interesting detail: the newer and more powerful the model, the stronger this pattern holds — in top-tier modern models, the link between answer stability and correctness is especially pronounced. The method also proved useful for spotting questions in benchmarks where models guess the right answer from a pattern rather than real knowledge — meaning it helps uncover "fragile" spots even in benchmarks considered "already solved."