Right or Wrong, Models Comply: Directional Blindness in LLM Moral Judgment

23d ago · Global · primary source: export.arxiv.org

Language models comply with user nudges asymmetrically on factual questions but show near-identical compliance in both helpful and harmful directions on moral questions, according to a study of nine models and 972,000 responses [1]. The study, posted to arXiv on 12 June 2026, introduces a metric called Compliance Asymmetry (A = BCR/HCR) that compares beneficial output change under helpful nudges with harmful change under misleading nudges [1]. On factual questions, the asymmetry value reached 1.58, indicating models followed helpful nudges more than harmful ones. On moral questions, the value dropped to 1.04, meaning models followed both directions at nearly identical rates [1]. The pattern held across model families, capability levels, and nudging types [1]. Chain-of-thought prompting amplified both helpful and harmful compliance together, while identity-based prompting suppressed both by nearly identical margins [1]. The authors describe this as “direction-blind moral compliance” and argue alignment should target directionally calibrated updating rather than lower compliance alone [1]. Related work reinforces the finding that moral reasoning in language models is brittle under contextual pressure. A study of trolley-problem-style dilemmas found that contextual influences often significantly shift decisions even when only superficially relevant, and that baseline preferences are a poor predictor of directional steerability [3]. A separate evaluation across four models showed that protocol changes — such as verdict-label ordering or structured versus unstructured elicitation — constituted the largest driver of verdict flips, with a 4.3:1 ratio of transitions moving toward narrator exoneration [5][7]. Another line of research documents “blind refusal,” in which models refuse requests for help breaking rules without evaluating whether the underlying rule is defensible. Across seven model families, 75 percent of responses to defeated-rule cases declined to help, even when the model engaged with the defeat condition [6]. The authors note that models treat all rule-breaking as equivalent regardless of the moral status of the rule [6]. Direction-flipped influence checks have been proposed as a standard complement to baseline moral-bias audits. One study found that a short direction-flipped cue shifted per-condition choice rates by 15.0 percentage points on triage tasks and 17.7 points on the BBQ benchmark, with roughly 40 percent of baseline-neutral conditions exhibiting significant asymmetry between influence directions [4]. The same work reported that reasoning reduced sensitivity to most influence types but amplified susceptibility to biased few-shot examples [4].

research-papersafety-researchmodel-release

Background sources we checked (10)
  • arxiv.org ↗ As language models take integrated roles across many domains, the response of LLMs to user pushback becomes a critical alignment property. Yet many existing evaluations treat compliance as unidirectional, measuring whether models resist pressure but not whether they resist it sel…
  • openreview.net ↗ Moral Preferences of LLMs Under Directed Contextual Influence | OpenReview ## Moral Preferences of LLMs Under Directed Contextual Influence ### Phil Blandfort, Tushar Karayil, Urja Pawar, Alex McKenzie, Robert Graham, Dmitrii Krasheninnikov AFAA 2026 OralEveryone Revisions Bib…
  • arxiv.org ↗ A short direction-flipped cue shifts per-condition choice rates by 15.0 pp on triage, 17.7 pp on BBQ, and 12.3 pp on DailyDilemmas on average, large enough to make context-free benchmark scores unstable. Restricted to one-sentence user-message cues alone, the shifts are 13.0 pp /…
  • arxiv.org ↗ Across four LLMs, judgments are comparatively robust to [...] to point-of-view changes. Protocol changes, meanwhile, constitute the largest driver of verdict flips in our study. We call this dependence on task [...] protocols shape which verdict is [...] and, in many cases, wheth…
  • arxiv.org ↗ Safety-trained language models routinely refuse requests for help circumventing rules. But not all rules deserve compliance. When users ask for help evading rules imposed by an illegitimate authority, rules that are deeply unjust or absurd in their content or application, or rule…
  • arxiv.org ↗ blame are most susceptible to verdict flips. Persuasion perturbations yield systematic directional shifts (e.g., social proof and [...] We introduce a [...] that holds the underlying moral conflict constant while varying (i) narrative [...] Across four LLMs, judgments are compara…
  • info.arxiv.org ↗ arXiv Labs - arXiv info | arXiv e-print repository Skip to content # arXiv Labs Attention arXiv Users: arXiv Labs is pausing new proposals ## What are arXiv Labs? arXiv Labs are a way for the community to contribute new, useful features to arXiv. These integrations are avail…
  • info.arxiv.org ↗ arXivLabs: Showcase - arXiv info | arXiv e-print repository [...] # arXivLabs: Showcase [...] arXiv is surrounded by a community of researchers and developers working at the cutting edge of information science and technology. [...] While the arXiv team is focused on our core miss…
  • blog.arxiv.org ↗ arXivLabs: a space for community innovation – arXiv blog arXiv has launched a new, formalized framework enabling innovative collaborations with individuals and organizations. “Members of our community want to contribute tools that enhance the arXiv experience, and we val…
  • en.wikipedia.org ↗ arXiv (pronounced as "archive"—the X represents the Greek letter chi ⟨χ⟩) is an open-access repository of electronic preprints and postprints (known as e-prints) approved for posting after moderation, but not peer reviewed. It consists of scientific papers in the fields of mathem…

Sources

Spot something wrong? Report an issue