Apply to my task
arXiv:2610.09554 ★ 94 Oct 7, 2026

Blind review (label-free protocol): an LLM judge must not see the verdict it is checking

Key result

Show an LLM judge the system's verdict and it won't check it, it will nod along. Evaluation quality then drops below random guessing: the judge gives low scores to correct decisions and high scores to wrong ones. The blind review method lets you catch errors in automatic data merging (duplicate products, customers, listings) without hand-labeling the whole dataset. Remove the system's label from the prompt and make the model solve the task from scratch. Then compare its answer with the system's decision using a spreadsheet or a script. Disagreements are suspicious pairs, and a human looks at them.

01

TL;DR

Blind review is a way to evaluate someone else's decisions with an LLM: the judge is not shown the "match / no match" label that the system under review assigned. The model gets only the data itself, solves the task from scratch, and its verdict is then compared with the system's decision. It works like blind peer review.

The headline finding: if you show the judge the system's decision and ask how well justified it is, the judge does not check it, it agrees after the fact. The nastiest part: evaluation quality can become worse than a coin flip. The judge gives high scores to wrong decisions and low scores to correct ones. What's more, stronger models are more sensitive to the label than weaker ones. A detailed step-by-step instruction ("evaluate in 8 steps") does not cure this.

The method boils down to two steps: remove the label from the prompt, ask the model to decide on its own whether the objects match, and have it give a confidence score. Treat any disagreement with the system's decision as suspicious. On datasets with recognizable names, review quality bounced back almost to the ceiling, and on highly specialized ones (medical terms) it also rose noticeably.

Want this for your own case? Apply this study to your task: AI adapts its method to what you are working on and writes the prompt.

02

Method Blueprint

STEP 1 (separate request, WITHOUT the system's label):
  pair data → the LLM decides on its own: MATCH / NON_MATCH + score 0–10 + key differences

STEP 2 (outside the LLM — a spreadsheet, a script or by hand):
  LLM verdict vs system decision → agree / disagree

STEP 3: disagreements → manual review by a human

Step 1 runs in a single request. The system's label must not appear in it at all: not in the text, not in the examples, not in the field names.

03

Example in Practice

Task: You sell on Amazon and Walmart. A script merges listings: "this is the same product on both marketplaces". The script put a MATCH label on a pair whose titles are almost identical. You need to check whether it merged different models.

Prompt (blind):

You are an expert in marketplace product catalogs. You are given two listings.
Decide on your own whether this is the SAME product (the same model, 
capacity/storage, bundle) or DIFFERENT products.

Listing A (Amazon):
Title: Apple iPhone 15 Smartphone 128GB, Black
Brand: Apple
Manufacturer part number: MTLH3
Price: $699

Listing B (Walmart):
Title: Apple iPhone 15 Pro 128 GB, Black Titanium
Brand: Apple
Manufacturer part number: MTUV3
Price: $899

Rules:
- Similar titles on their own are NOT proof. Look for differences in model, 
  capacity, part number, bundle.
- If there is not enough data, say so.

Answer in this format:
1. Key similarities (as a list)
2. Key differences (as a list)
3. Verdict: MATCH or NON_MATCH
4. Confidence that this is the same product, from 0 to 10

Result: The model will give a short breakdown: what matched (brand, color, storage), what differs (the Pro line vs. the regular one, part numbers, the price gap). Then a verdict and a confidence score. You compare this verdict with the script's label. If the script said MATCH and the blind judge said NON_MATCH with a low score, the pair needs a manual look.

04

Why It Works

The weakness. When the judge sees the system's decision, it turns into a ready-made conclusion that needs justifying. The model generates text consistent with its context, so it hunts for arguments in favor of the label it was shown. The authors call this anchor bias. Instead of an evaluation you get an echo. On top of that, models trust familiar names: the pair "The Fast and the Furious" (the 2001 film and the whole franchise) looks identical, even though these are different entities.

The strength. When the model simply solves the task ("same object or not") without someone else's answer in front of it, it does a decent job of weighing similarities and differences. For the model it is an ordinary task, like any classification.

How the method uses this. We separate "decide" from "compare with the system's decision". The comparison is done by a spreadsheet or a human, and the model takes no part in it. There is nothing for it to anchor on.

Control levers: - The 0–10 score → keep it if you need to rank doubtful pairs. Drop it if you only need the verdict. - The "key differences" block → keep it for analyzing disputed cases and for manual review. Drop it to save tokens at high volume. - The "similar titles are not proof" rule → my addition, it is not in the paper. Helps against the "same name, different entities" trap; test it on your own data. - Disagreement threshold → choose it yourself: for example, send to a human only the pairs where the verdict disagrees with the system or the score is between 3 and 7.

Prompt Template

You are {expert_role}. You are given two objects from different sources.
Decide on your own whether this is the SAME {entity_type} or DIFFERENT ones.

Object A ({source_A}):
{data_A}

Object B ({source_B}):
{data_B}

Rules:
- Similar names on their own are not proof.
- Look for differences in: {what_to_check}.
- If there is not enough data, say so.

Answer in this format:
1. Key similarities
2. Key differences
3. Verdict: MATCH or NON_MATCH
4. Confidence from 0 to 10 that this is the same {entity_type}

What to fill in: {entity_type} — a product, company, customer, term, document. {what_to_check} — the attributes by which objects really differ in your field (EIN and VAT number, SKU, version, date).

The main rule: the prompt contains no system decision, no words like "the system thinks" and no examples with a label filled in. The template is my reconstruction from the protocol description (the paper calls it Prompt III), not a verbatim copy.

🚀 Quick start — paste into the chat:

Here is a blind decision-review template. Adapt it to my task: {describe what 
you are checking: product matching, duplicate customers, classification, etc.}.
Ask me questions to fill in the fields.

[paste the template above]

The LLM will ask which objects are being compared, from which sources, and by which attributes they really differ. This is needed so the prompt contains no system decision yet gives the model the right criteria for an independent judgment.

05

Limitations

⚠️ Detailed instructions don't save you: if you keep the label but add a long instruction like "evaluate in 8 steps, relying only on the data", the anchoring to the label stays. The authors stress that step-by-step reasoning (Chain-of-Thought) does not solve this problem. The label itself has to go.

⚠️ Stronger model ≠ more reliable judge: more powerful models react more strongly to the label. "I'll just use a better model" is no defense.

⚠️ Unfamiliar domains: in narrow domains (medical ontologies in the paper) the model leans on how recognizable the names are. When the names are hidden, its scores collapse across the board. Blind mode helps noticeably there too, but it does not reach the ceiling and needs human review.

⚠️ The "same name" trap: even a blind model can mistake a film and a franchise with the same title for the same thing. Explicit difference criteria in the prompt and human control on disputed pairs are a must.

⚠️ This is verification by prediction: you are measuring whether an independent model agrees with the system, not "how right the system is". If the model itself makes mistakes, the disagreements will be noise too. You need a small human-labeled sample to check the blind judge itself.

⚠️ The paper text was truncated: I saw the method description and the conclusions from the abstract and introduction, but not the whole results section or the appendices. The authors' exact prompt wording is not in this text.

06

How They Tested It

The authors took three judge models (GPT-4o-mini, GPT-4o and Claude Opus 4.7) and three sets of entity pairs from different knowledge bases. Two sets are general-purpose (DBpedia with Wikidata and with YAGO); the third is a new biomedical one (MeSH and SNOMED CT, 15 thousand pairs). They tested four alignment systems. In total they made about 153 thousand requests and spent around 577 dollars.

The idea came in three moves. First, perturbations: they hid entity names and watched what the judge relied on. Then three prompt modes: detailed (8 reasoning steps), minimal, and blind, with no label. Quality was measured as the probability that a correct decision gets a higher score than a wrong one. A value below 0.5 is worse than a coin flip. Finally, a counterfactual test: the same data, but with the system's label flipped. If the score follows the label, the label is to blame. Scores shifted by more than 2 points for 53–99% of pairs.

The result: with a visible label, quality fell to 0.12–0.87, meaning in places the judge scored things backwards. Blind mode brought it back to 0.93–1.00 on the general datasets and 0.93–0.95 on the biomedical one. The surprise was that strong models turned out to be more sensitive to the label. As a check, two authors blindly labeled 102 pairs (very high agreement). For "match" pairs, the correlation between models and humans with a visible label was weak (0.23–0.41). The practical takeaway: remove the label, don't complicate the instruction.

07

Adaptations and Extrapolations

This is not from the paper; these are my own transfers of the principle. Test them on your own tasks.

🔧 Technique: remove the label → a blind reviewer. Give any LLM reviewer only the material, not the author's conclusion.

You are an independent reviewer. Below is only the source material: {material}.
Decide for yourself which conclusion is correct, and justify it. You do not see the author's conclusion.

Then compare your verdict with the author's conclusion. A disagreement is a signal to check.

🔧 Technique: separate the roles in an agent chain. If you have an executor agent and a reviewer agent (for example, in Claude Code), write into the reviewer's instructions: "Do not read the author's change description or commit message. Look only at the diff and the tests". Same principle: the reviewer is not shown the "all good" label. The paper did not test agents.

🔧 Technique: selective manual review. Send to a human only the pairs where the blind verdict disagrees with the system or the confidence score is 3–7. This saves labeling, but still do a calibration on a small labeled sample.

08

Resources

  • Paper: Reliability of LLM Judges for Evaluating Entity Alignment
  • Authors: Vaibhava Lakshmi Ravideshik (University of Michigan, Ann Arbor) and Mayank Kejriwal (Information Sciences Institute, University of Southern California)
  • Code and data: https://github.com/vaibhavalakshmiravideshik/llm-as-a-judge-entity-alignment
  • Benchmark: MeSH × SNOMED CT (15 thousand pairs); access to part of SNOMED CT requires a UMLS license
  • Related work mentioned: GSM-Symbolic (Mirzadeh et al., 2025), O'Leary (2025) on anchoring effects in ChatGPT, Claude, Gemini

Research digest

Key result

Show an LLM judge the system's verdict and it won't check it, it will nod along. Evaluation quality then drops below random guessing: the judge gives low scores to correct decisions and high scores to wrong ones. The blind review method lets you catch errors in automatic data merging (duplicate products, customers, listings) without hand-labeling the whole dataset. Remove the system's label from the prompt and make the model solve the task from scratch. Then compare its answer with the system's decision using a spreadsheet or a script. Disagreements are suspicious pairs, and a human looks at them.

Principle

A three-step process. 1. The model gets only the data itself: two listings, two records, two terms. It decides on its own: one object or different ones. It names the key differences and gives a confidence score from 0 to 10. 2. The comparison with the system's decision is done by a spreadsheet, a script or a human. The model takes no part in it. 3. Disagreements go to manual review. Deciding and checking against someone else's decision must be done by different parties. This is blind peer review. The reviewer does not know what the author decided, so they cannot play along. A detailed instruction like "evaluate in 8 steps" does not cure it: as long as the label is in the prompt, the anchoring stays.

Why it works

The model continues text so that it fits the context. It sees "the system said: match" in the prompt. That phrase becomes a ready-made conclusion, and the model looks for arguments to support it. The authors call this the anchoring effect (anchor bias). Instead of an evaluation you get an echo. Without someone else's answer, the task becomes ordinary classification. The model handles that fine: it weighs similarities and differences. Blind mode brought review quality almost back to the ceiling on datasets with recognizable names. On highly specialized ones (medical terms) it also rose noticeably, but fell short of the ceiling. The brutal part is that strong models are more sensitive to the label than weak ones. "I'll grab a beefier model" does not save you. The label itself has to go.

When to apply

Matching records from different sources → checking a script or model that merges objects. Works for marketplace product listings, duplicate customers in a database, term mapping across reference vocabularies. Especially when checking every pair by hand is impossible and merge errors are expensive. NOT a fit if you need to know "how right the system is" without a human-labeled sample. The blind judge makes mistakes too and has to be checked on a small sample. In narrow fields (medicine) you can't do without a human. A film and a franchise with the same title confuse even blind models.

Mini recipe

1. Cut the label: the prompt must contain no system decision, no words like "the system thinks" and no examples with a label filled in. Not even in field names. 2. Give a role: product catalog expert or another one for your field. 3. Ask it to decide from scratch: same object or different. Answer format: similarities, differences, verdict, confidence from 0 to 10. 4. Add a rule: "Similar names are not proof. Look for differences in: SKU, model, capacity, bundle". This is my addition; it is not in the paper. Test it on your own data. 5. Compare outside the model: the judge's verdict against the system's label, in a spreadsheet or with a script. 6. Pick a threshold: pairs with a disagreement OR a score from 3 to 7 go to a human. 7. Check the judge itself: take a small human-labeled sample and see where the blind judge goes wrong.

Examples

[BAD]: `The script decided these two listings are the same product (MATCH). Rate from 1 to 10 how justified this decision is.` The model already sees the answer and fits its arguments to it. Result: the iPhone 15 and the iPhone 15 Pro get 8 out of 10. [GOOD]: `You are a marketplace catalog expert. Decide on your own: is this the SAME product or DIFFERENT ones. Listing A (Amazon): Apple iPhone 15 128GB, Black, part number MTLH3, $699. Listing B (Walmart): Apple iPhone 15 Pro 128 GB, Black Titanium, part number MTUV3, $899. Similar titles are not proof; look for differences in model, capacity, part number. Answer: 1) similarities, 2) differences, 3) verdict MATCH or NON_MATCH, 4) confidence from 0 to 10 that this is the same product.` The model will spot the different part numbers and the Pro line. Verdict: NON_MATCH, low score. The script said MATCH, so the pair goes to a human.

In plain words

If you ask an LLM to check someone else's work and show it the finished answer right away, it instantly turns into a conformist yes-man. Built into how models work is a powerful anchor bias — the pull toward whatever the context suggests. The model does not switch on critical analysis; it just churns out text that agrees with the conclusion it was handed. Instead of an independent auditor you get a pretty echo, ready to justify anyone's screwup.

It is like handing an intern the boss's calculations and sternly asking: "Is this all correct?" The intern gets spooked by authority and starts pulling justifications out of thin air for why two plus two in this report suddenly equals five. The model behaves exactly the same way: it sees a ready-made MATCH badge and happily agrees, gluing the 2001 film to the entire franchise just because the words sound almost the same.

The cure for this bug is dead simple — blind review. You cut the system's answer out of the prompt completely and make the LLM solve the case from a clean slate. Feed it only the raw data — descriptions of two products or names of two entities — and demand an independent verdict. Only once the model has ruled blind do you compare its answer with the algorithm's work. Zero hints, honest result.

The mechanics were tested on merging identical products for marketplaces, but the pitfalls are the same everywhere. The same blind judging approach is vital when deduplicating a CRM, reconciling databases and grading answers in RAG pipelines. Anywhere one script is trying to prove that "object A is the same as object B", calling in an LLM judge with all the cards face up is guaranteed self-deception.

Bottom line: never ask a model "was the previous algorithm right". Make it do the work over again without showing it anyone else's drafts. Otherwise your quality control turns into security theater, where one dumb mistake gets validated by another. Hide the label from the judge and you save production from garbage.

AI lab assistant

Apply this study to your task

Describe what you're working on. AI takes the method and the measured results from this paper and adapts them to your case, or writes a ready prompt built on them.

Based on Blind review (label-free protocol): an LLM judge must not see the verdict it is checking arXiv:2610.09554

Sign in to apply this study New accounts get 50 free credits.