Skip to content
InfoResearchPreprintLLM-specific

LeakBench: Auditing Reward Hacking through Prediction-Time Leakage in Clinical Modeling Agents

Published
Record updated
View JSON

Summary

Autonomous clinical-modeling agents can raise predictive performance while breaking conditions needed for usable models, such as using prediction-time-invalid inputs. The authors introduce LeakBench, an executable audit suite that tests agent decisions for leakage, calibration, site-level evaluation, support awareness and decision-curve net benefit. In logged runs, DeepSeek Flash and GPT-6-astra leaked a fatal feature in 10/10 unconstrained runs and 0/10 runs with an explicit admission-time constraint, and a deterministic provenance verifier in the loop removed the leak.

Mitigation

A deterministic provenance verifier-in-loop removes the leak, and the LLM repair loop serves as defense-in-depth. Specific verifier feedback clears fatal leakage in a hosted agent, and principle-only feedback clears decision-level defects, though the authors say these mitigation results are limited.