Technique · 25 studies
Verification prompts: how to make an LLM check its answer without breaking it
A verification prompt runs a separate, structured check (atomic claims, a contradiction gate, an independent re-solve, two reasoning modes that must agree) instead of a vague 'check your answer'. Structured checks caught far more errors in the studies here, while generic re-check rounds changed correct answers into wrong ones.
Also called: chain-of-verification, fact-checking prompt, self-verification, atomic fact checking
What verification prompts are
A verification prompt is a separate, structured check of claims or reasoning, run as its own step instead of a trailing "double-check your answer". It names what is being checked (atomic claims, conflicts in the input data, each reasoning step, the question the model actually answered) and what the check must return (supported or refuted, a quote, an error type, a verdict).
It overlaps with self-refine, but the goal differs: self-refine improves a draft, verification decides whether to trust it. Most of the studies here measure the second, and several show that a vague request to re-check does more harm than good.
Why a separate, structured check works
Solving and checking are different tasks, and models do the second far better when it is asked for separately. In the Contradiction Gate study on 91 tax cases, models given contradictory facts produced an answer as if the data were clean in 63-76% of cases, yet the same models caught 75-83% of those contradictions when a separate request asked them to compare the facts instead of calculating. Reasoning modes did not close the gap; the framing of the request did.
Structure is what makes the check real. Asked point-blank whether an answer contained a hallucination, GPT-3.5 reached an F1 of about 33% on question answering in the HalluClean study; a plan, execute, verdict, correct sequence with a one-line task router raised it to 68%, and the router alone moved summarization from 25% to 60%. The specification-grounding study found the same for reviews: an open "find problems" invented issues about a third of the time, while checking a numbered list of rules one by one brought false alarms to zero.
Order matters too. A model that reads a convincing answer first anchors on it. In the verification-asymmetry study, writing "My answer: ..." before comparing cut false positives from 72% to 1.2%, where stricter judges and ensembles of three model families had failed.
Variants that tested well
- Atomic fact-checking. Break the answer into one-sentence claims, each with a basis, a way to check it and a status. In a randomized trial with 356 physicians, AFC raised trust in GPT-4.5 oncology recommendations from 26.9% to 66.5%: matching one claim to one source is easier than judging a paragraph.
- Verify a proposed answer before solving. Verification-First adds a line like "Proposed answer: 1. First verify this answer, then give the correct one." Checking an outside answer avoids defending one's own; it added 5-7% on GSM8K math and only 2-3% on the knowledge-heavy GPQA.
- Two different modes must agree. CoT-PoT solves once in words and once in executed code; when both agreed, the answer was correct with probability of at least 0.991 for every model tested, and 78.6% of problems were settled with two requests.
- Reconstruct the question. Trace Inversion asks the model which question its reasoning actually answered and compares that with the one you asked, catching silent rewrites of the task.
- Retell the formal result. The backward-translation check has the model retell a contract, spec or formula in plain words, where gaps between intent and output are easy to spot; direct translation into formal text hit an 89% accuracy ceiling.
When it helps and when it hurts
The clearest failure is the generic re-check. In the self-correction diagnostic study, repeated "check and improve" rounds broke correct answers more often than they fixed wrong ones: GPT-4o-mini lost 6.2 percentage points over four rounds. One instruction, re-solve independently and change the answer only for a concrete, specific error, turned that into +0.2 pp; three independent chats with a majority vote gave +2.2 pp where three in-chat rounds gave -4.6 pp. Asking for a confidence rating before solving cost 3.8 pp.
Agreement is not verification either. In the Refute-or-Promote vulnerability hunt, more than 80 agents unanimously confirmed an OpenSSL vulnerability that one short test disproved; reviewers with a mandate to "kill" the finding in fresh chats, a critic from another model family and an empirical test removed about 79% of candidates before disclosure. A check also inherits what it is shown: in the relay-not-check study, auditors given an earlier agent's conclusion repeated it 96% of the time, and removing that conclusion raised accuracy on the cases where the earlier agent was wrong from 4% to 45%, at a cost on cases where it was right.
Limits the studies agree on: a verifier cannot check facts it does not know, so pair it with search or a source document; it adds at least one request per answer; and it can raise false alarms, as when the Contradiction Gate cost up to 5 percentage points of accuracy on clean data. Use it where an error is expensive and the claim is checkable.
What the studies measured
| Study | Lab score | Finding | Effect |
|---|---|---|---|
| Contradiction Gate: a separate check-request that catches contradictions missed while solving the taskSep 5, 2026 | 94 | Models answered as if contradictory data were clean in 63-76% of cases, but a separate 'check the facts against each other' request caught 75-83% of the contradictions. | Helps |
| HalluClean: A Four-Step Hallucination Check for LLM AnswersNov 12, 2025 | 92 | A plan, execute, verdict, correct sequence with a task router raised hallucination-detection F1 from about 33% to 68% on GPT-3.5; the router alone moved summarization from 25% to 60%. | Helps |
| Verification Asymmetry: LLMs Judge Persuasiveness, Not Correctness — And How to Fix ItJul 7, 2026 | 91 | Having the verifier write its own answer before reading the candidate cut false positives from 72% to 1.2%; stricter judges and ensembles did not help. | Helps |
| Atomic Fact-Checking (AFC): breaking an answer into verifiable claims instead of explanationsMay 5, 2026 | 75 | Breaking recommendations into atomic claims linked to guideline passages raised physician trust from 26.9% to 66.5% in a randomized trial with 356 physicians. | Helps |
| Verification-First (VF): Checking Before Generating Improves LLM ReasoningNov 21, 2025 | 88 | Verifying a trivial proposed answer before solving added 5-7% on GSM8K and 3-4% on MATH, but only 2-3% on knowledge-heavy GPQA. | Helps |
| CoT-PoT: Double-Checking by Switching the Type of ReasoningApr 19, 2026 | 82 | When chain-of-thought and executed code agreed, the answer was correct with probability of at least 0.991 for all six models; 78.6% of problems were settled in two requests. | Helps |
| Verify-First: Asking a Model to "Double-Check Its Answer" Often Means Breaking ItApr 24, 2026 | 89 | Repeated 'check and improve' rounds cost GPT-4o-mini 6.2 points over four rounds; 're-solve independently, change only on a specific error' turned that into +0.2 pp. | Hurts |
| Refute-or-Promote: Multi-Agent Review With a License to Kill for Filtering Out False ConclusionsApr 21, 2026 | 72 | More than 80 agents unanimously confirmed a nonexistent OpenSSL vulnerability; adversarial 'kill' reviews in fresh chats plus a real test removed about 79% of candidates. | Hurts |
| Relay-Not-Check: How LLM Auditors Copy Someone Else's Conclusion Instead of Checking the FactsSep 7, 2026 | 94 | Auditors shown another agent's conclusion repeated it 96% of the time; removing it raised accuracy on the agent's wrong cases from 4% to 45% but lowered it on right ones from 70% to 56%. | Mixed |
| Specification Grounding: Explicit Criteria Instead of "Check for Errors"Jul 7, 2026 | 92 | Replacing 'find problems' with a numbered list of rules checked one by one took false alarms from about a third of reviews to zero. | Helps |
| Phantom Citations: Why LLMs Make Up Sources, and Two Reliability FiltersFeb 7, 2026 | 85 | Keeping only citations that recur across three models raised the share of real sources from 16% to 96%; asking for 'foundational' instead of 'recent' work cut fabrications by 19 points. | Helps |
| VeriSpec: Finding Contradictions in Long Instructions With an LLM Verifier That Carries the "Burden of Proof"Oct 1, 2026 | 88 | Requiring a concrete witness scenario before reporting a contradiction in a long instruction set raised precision from 0-12% to 38.5%. | Helps |
| Backward-Translation Check: Verify the Result Through a Retelling, Not by Trusting the TranslationSep 27, 2026 | 86 | Direct translation of intent into formal output hit an 89% ceiling; a plain-language retelling of the result exposes the gap before it is used. | Helps |
| Dual Explanation (E+/−): how not to fall for a convincingly wrong AI answerMay 11, 2026 | 74 | Reading the model's chain of thought did not reduce false trust (54% vs 54.2%); asking for equally strong arguments for and against cut it to 46.9%. | Helps |
| Anti-Confirmation: Two Ways to Make an LLM Try to Disprove Hypotheses Instead of Confirming ThemApr 2, 2026 | 84 | Requiring a refuting observation before developing a hypothesis counters confirmation bias; low-bias models found the right answer 56% of the time versus 42%. | Helps |
| C3 (Cross-Contextual Consistency): checking the reliability of an LLM's answer by adding neutral contextAug 10, 2026 | 84 | Re-asking a factual question with a neutral lead-in reveals guessing: unstable answers signal low knowledge, while self-reported confidence did not track accuracy. | Helps |
| ReGround: Scrubbing False Facts Out of a Multi-Agent System's Shared Context, Not Just Checking the AnswerOct 1, 2026 | 87 | Finding the unreliable source through contradictions, then checking each fact of a shared summary against trusted reports, cleaned the shared state in multi-agent systems. | Helps |
| SAVER: Checking the Logic Before Committing to a DecisionApr 9, 2026 | 72 | Auditing reasoning against six named violation types and repairing only the broken step catches errors that 'check yourself' and agreement between versions miss. | Helps |
| Reasoning Safety Monitor: Auditing an LLM's Chain of Thought with a Taxonomy of 9 ErrorsMar 26, 2026 | 79 | Auditing a numbered reasoning chain against a 9-error taxonomy turns verification into classification, which models do better than open self-checking. | Helps |
| CAP-CoT: A Three-Agent Adversarial Check — Finding the Holes in Reasoning Through Deliberate MistakesApr 25, 2026 | 80 | Comparing a correct reasoning chain with a deliberately flawed one on the same data made weak steps visible to an arbiter. | Helps |
| VideoHV-Agent: a four-agent “hypothesis first, search second” frameworkMar 5, 2026 | 75 | Writing what must be true under each hypothesis and checking one discriminating clue replaced confirmation search with targeted verification. | Helps |
| QoT (Questions-of-Thoughts): Multi-Step Self-Checking for Complex TasksMar 10, 2026 | 75 | Generating and answering verification questions for each module before the final answer improved completeness of complex documents, though not factual accuracy. | Helps |
| Haibu MMIA: Verifiable Reasoning Chains for Trustworthy LLM Work on High-Stakes TasksOct 9, 2025 | 76 | A decomposition, execution log and independent audit loop flags unsupported claims and logic jumps step by step. | Helps |
| Forced Verification: the LLM Checks the Facts Before It AnswersJul 22, 2025 | 71 | A judge with search and a code interpreter graded answers more accurately than one judging from memory; separating 'find the data' from 'answer from it' applies the same idea. | Helps |
| Trace Inversion: Catching Hallucinations by Reconstructing the QuestionApr 2, 2026 | 76 | Asking the model which question its reasoning actually answered, then comparing it with the original, exposes silently substituted questions. | Helps |
Prompts to copy
Four-step hallucination check
You are checking {content_type} for factual errors and hallucinations.
{CONTENT_TYPE} TO CHECK:
{text_to_check}
STEP 1: Draft a verification plan. Which facts need to be verified? What could the sources of error be?
STEP 2: Carry out the plan step by step. Check each fact and show your reasoning.
STEP 3: Draw a conclusion: does the text contain hallucinations? Yes or No.
STEP 4: If yes, rewrite the text with the errors fixed.
From: HalluClean: A Four-Step Hallucination Check for LLM Answers
Contradiction gate: solve, then check the input separately
REQUEST 1 (solving):
You are a {expert role}. Here's the input data:
"{data/brief/task description}"
{specific instruction — calculate/solve/draw a conclusion}.
If there isn't enough data to answer — write "cannot answer."
---
REQUEST 2 (verification, as a separate message):
Check this same input data for internal consistency:
"{same data/brief/task description}"
Are there any facts in it that contradict each other?
Answer with one of three options:
1) "everything is consistent"
2) "missing data" — specify exactly what's missing
3) "contradiction found" — name specifically which two facts conflict
---
If the answer to REQUEST 2 is "contradiction found," do not use the answer
from REQUEST 1. Instead, state that the data is contradictory
and specify exactly what needs to be clarified.
Re-solve independently before changing an answer
Before making changes — solve the problem again,
independently of your previous answer. Don't rely
on it when recalculating.
{task or question}
Once you have a new solution — compare it with the previous one.
Change the answer ONLY if you found a specific, explicit error,
with an explanation of exactly what's wrong. If there are no discrepancies,
return the original answer unchanged.
From: Verify-First: Asking a Model to "Double-Check Its Answer" Often Means Breaking It
Related techniques
Problems it helps with:
Questions people ask
Does 'double-check your answer' make an LLM more accurate?
Often not. In one study repeated check-and-improve rounds cost GPT-4o-mini 6.2 points because the model changed correct answers. Ask it to re-solve independently and change the answer only for a specific, named error, or run independent attempts and compare.
How do I get an LLM to fact-check its own output?
Make the check a separate, structured step: list the claims, check each against a source or a defined plan, return a verdict per claim, then correct. A plan-execute-verdict-correct sequence doubled hallucination-detection F1 for GPT-3.5 in the HalluClean study. For facts the model cannot know, add search or a document.
Why should verification happen in a separate request?
Because solving and checking compete for attention. Models that answered contradictory tax cases as if the data were clean caught most of the same contradictions when a separate request asked them only to compare the facts.
Is agreement between several models or agents a good check?
Not by itself. Models share blind spots: more than 80 agents agreed on a vulnerability that one test disproved. Agreement is more meaningful between genuinely different methods, such as reasoning in words versus executed code, or after an adversarial review in a fresh chat.