Confidently wrong answers from LLMs show up in coding agents and internal chat alike. In many cases this is less “the model is scheming” and more accuracy-only evaluation making guessing rational compared with saying “I don’t know.” A single honesty prompt helps, but durable control needs verification passes and scoring incentives—not prompt text alone.
📑Table of Contents
This article cross-checks OpenAI’s official explanation, peer-reviewed Nature-family work, ACL Chain-of-Verification, clinical mitigation measurements, and independent secondary explainers. Popular discovery posts are treated as discovery context only; factual claims rest on independent public sources.
Learning outcomes
Why LLMs Struggle to Say “I Don’t Know”
Evaluation makes guessing rational
Pretraining optimizes for plausible next tokens, not explicit fact checking. When leaderboards grade accuracy only, abstention scores zero while a lucky guess can score full marks—so guessing becomes the dominant strategy.
Evidence from OpenAI and Nature
OpenAI’s post Why language models hallucinate frames accuracy-only scoreboards as rewarding guessing over humility. The Nature paper by Kalai, Nachum, Vempala et al. (2026-04-22) similarly argues that next-word prediction plus accuracy-based metrics systematically reward unwarranted guessing and penalize uncertainty.

Useful team language
Useful team language:
- Not “the model is a liar,” but “abstention is scored as failure”
- Not only knowledge gaps—score design shapes behavior
- Side-car hallucination tests help, but dominant accuracy scoreboards still need uncertainty credit
Sparse facts (classic birthday-style examples) make blind guessing beat “unknown” on expected score—an intuition repeated in practitioner write-ups such as Qiita (tsubasa_k0814). Share that expected-value skew internally and mitigation priorities align faster.
What Prompts Can Fix—and What They Cannot
Limits of honesty instructions
Honesty and anti-hallucination instructions work, but they are incomplete controls. Setting temperature to 0 is not a substitute.
Clinical evidence on mitigation prompts
In a clinical adversarial study published in Communications Medicine (Omar et al., 2025-08-02), models elaborated planted false details in 50–82% of cases. An explicit mitigation prompt cut the mean rate from roughly 66% to 44%, with the best reported model (GPT-4o) moving 53%→23%. Temperature=0 showed no significant reduction, so sampling temperature does not replace honesty instructions.
Practical prompt patterns
Practical prompt patterns:
- If evidence is missing, abstain or mark “needs verification”—do not invent
- Ban unsupported definitive claims without citations or tool results
- Require confidence / verification state labels (unverified vs verified)
- Force human review for legal, medical, and customer-facing commitments
⚠️ Residual risk remains. Treating a prompt change as “hallucinations solved” leaves long-form confident errors in agent trajectories. Prompts are the on-ramp; verification and scoring are the structural fix.
Second-Pass Verification (Chain-of-Verification)
Separating draft from verification beats a single polished answer. ACL Findings 2024 Chain-of-Verification (CoVe, Dhuliawala et al.) uses four stages:
- draft a first answer
- plan verification questions per claim
- answer those questions without looking back at draft claims
- produce a final verified response grounded only in verification results
Agent / RAG mapping
Agent / RAG mapping:
| CoVe stage | Implementation sketch |
|---|---|
| draft | Normal generation node |
| verification questions | Claim extraction → search / code-exec queries |
| independent answers | Tool calls and citations with draft text out of context |
| final | Regenerate or gate using verification logs only |
Staged adoption when cost matters
If API cost is a concern, do not dual-pass every turn. Stage it for citation-required, customer-commitment, or high-diff answers. Knowledge-ops design still matters alongside self-checks; see Agent Search beyond classic RAG for retrieval workflow patterns.
Redesigning Evaluation Incentives
Why scoreboards still favor guessers
If production scoreboards still reward raw correctness only, selection and regression will keep favoring guessers even after prompt edits. As OpenAI and independent summaries such as Ledge.ai note, embed uncertainty credit into existing accuracy boards—not only add side hallucination suites.
Scoring approaches
| Approach | Rough scoring | Intent |
|---|---|---|
| Behavioral calibration (Arize / Vempala explainers) | correct=1, IDK=0, wrong=−t/(1−t) | Scale the penalty on confident errors to target accuracy t |
| Lightweight ops rubric (practitioner examples) | +1 correct / −3 confident wrong / 0 unknown | Make abstention beat blind guessing |
| Open-rubric / partial credit (Nature-family direction) | Partial credit for calibrated uncertainty; heavy penalties for confident errors | Fix headline metrics, not only side evals |
Next action for eval teams
Arize AI’s write-up of Vempala’s talk is a practical entry point for MLOps teams that already run observability and eval harnesses.
Shortest reader next action: add one offline eval track that allows “unknown” and penalizes confident errors more than abstention. Continuous training and agent-eval loops pair naturally with this change—see continuous training and agent evals in MLOps.
Comparison Table and Adoption Checklist
Control layers compared
Prompt and verification layers
| Control | Main effect | Residual risk | Adoption cost | Best fit |
|---|---|---|---|---|
| Honesty / anti-hallucination prompts | Suppress confident fabrication (order-of-magnitude clinical reductions reported) | Remaining hallucinations | Low (wording) | Chat UI, quick wins |
| Second-pass verification (CoVe-style) | Claim-level self-check and tool corroboration | Skipped steps; weak verification questions | Medium (latency) | Agents, long-form answers |
Scoring and combined layers
| Control | Main effect | Residual risk | Adoption cost | Best fit |
|---|---|---|---|---|
| Scoring redesign | Breaks “guessing is optimal” structurally | Benchmark compatibility; labeling cost | Medium–high | Model selection, internal evals |
| Combined layers | Defense in depth | Operational complexity | Phased rollout | Production RAG / coding agents |
Sources
Sources for methods and measured effects:
- OpenAI
- Nature 2026-04-22
- Communications Medicine 2025-08-02
- ACL CoVe
- Arize AI (public materials as of 2025–2026)
Checklist for this week
Checklist for this week
- System prompt explicitly allows abstention / “needs verification”
- High-stakes claims require citations, tools, or a second pass
- Offline evals punish confident errors more than unknowns
- You are not relying on temperature=0 alone
- Legal / medical / customer commitments stay behind human review
- You can measure confident-error rate and abstention rate for one workflow
For prompt surface design (what belongs in the system prompt vs tool boundaries), pair this with the GPT-5.6 prompting practice guide.
FAQ
Is “say you don’t know” enough?
Helpful but incomplete. Clinical adversarial work still shows residual fabrication after mitigation prompts—combine with verification and scoring.
Does temperature=0 remove hallucinations?
No. The same clinical study found no significant gain from temperature=0; it is not a substitute for honesty instructions.
Why do high-benchmark models still invent facts?
Accuracy-only grading can score abstention as zero and lucky guesses as full credit, so training and selection tilt toward guessing (OpenAI / Nature).
What should a team do first?
(1) abstention-oriented prompt, (2) verification on high-stakes answers, (3) one internal eval that allows unknown and penalizes confident errors.
Isn’t CoVe too expensive?
Stage it: dual-pass only citation-required, high-risk, or commitment-bearing turns.
Summary and Next Actions
Confident LLM fabrications are driven less by “model personality” than by evaluation and learning incentives. Prompts are the fast entry point; verification paths and scoring redesign change the structure.
Apply the checklist to one production workflow and measure confident-error vs abstention rates for a week. Once those numbers exist, debates about where to place dual-pass gates and human review become concrete rather than abstract.
Related articles:
Author
krona23
Over 20 years in the IT industry, serving as Division Head and CTO at multiple companies running large-scale web services in Japan. Experienced across Windows, iOS, Android, and web development. Currently focused on AI-native transformation. At DevGENT, sharing practical guides on AI code editors, automation tools, and LLMs in three languages.
🔥 Most Popular
- Claude Desktop Won't Install? Windows & Mac Fixes That Worked (2026)
- Obsidian Visualization Tools: Graph, Canvas, Excalidraw (2026)
- What Is VS Code? Features, Extensions & Copilot — Complete Guide (2026)
- LM Studio Bionic Preview: Local Open-Model Agent for Docs and Code
- Claude Code CLI vs Web vs Desktop: A Daily User's Guide (2026)














Leave a Reply