Same Facts, Different Updates: Inference Setup Shapes LLM Behavior in Medical Allocation
Asking an AI the same medical question twice gives different answers depending on how you ask
Researchers tested four language models (GPT-5.2, GPT-5-mini, DeepSeek V4 Flash, Kimi K2.5) on a task where the model assigns probabilities for prioritizing one of two patients for a medical resource, then adds one extra sentence with information like income or caregiver status and asks again. Comparing cases where the model could still see its own first answer in the conversation versus cases where it was asked completely fresh, nearly half of the tested combinations showed different, often opposite, shifts in probability. Attributes like caregiver status, low income, and parenthood pushed probability toward the clinically weaker patient, and this effect grew stronger when the wording was made more emotionally charged.
METAL MEDIA explanatory visual
Asking an AI the same medical question twice gives different answers depending on how you ask
- 01Four models were given two patients' treatment success rates and expected QALYs (quality-adjusted life years), asked to assign priority probabilities, then given one added sentence about income, race, caregiver status, or similar attributes and asked again
- 02The study compared re-asking the same question within the same conversation (model sees its prior answer) versus asking independently with no memory of the first answer, isolating the effect of the interaction setup itself
- 0316 of 32 model-attribute combinations showed statistically significant differences between the two setups, with 11 showing a larger shift when the prior answer stayed in context
- 04Caregiver status, low-income background, and parenthood consistently pushed probability toward the clinically weaker patient across most models, while sex produced no effect in any model and age produced a reversed effect
- 05Rewording information in a more morally charged way (e.g., 'disadvantaged' instead of 'lower-income') pushed flip rates close to 1.0 for GPT-5-mini, and smaller clinical differences between patients made models more susceptible to this non-clinical information
What they did
- Four models were given two patients' treatment success rates and expected QALYs (quality-adjusted life years), asked to assign priority probabilities, then given one added sentence about income, race, caregiver status, or similar attributes and asked again
- The study compared re-asking the same question within the same conversation (model sees its prior answer) versus asking independently with no memory of the first answer, isolating the effect of the interaction setup itself
- 16 of 32 model-attribute combinations showed statistically significant differences between the two setups, with 11 showing a larger shift when the prior answer stayed in context
- Caregiver status, low-income background, and parenthood consistently pushed probability toward the clinically weaker patient across most models, while sex produced no effect in any model and age produced a reversed effect
- Rewording information in a more morally charged way (e.g., 'disadvantaged' instead of 'lower-income') pushed flip rates close to 1.0 for GPT-5-mini, and smaller clinical differences between patients made models more susceptible to this non-clinical information



| τ(S,G,I,D,X) | =𝔼[PB∣S,G,Z=1,I,D,X] | |||
|---|---|---|---|---|
| −𝔼[PB∣S,G,Z=0,X]. | (1) |



Why it matters
As AI systems get folded into sensitive decisions like medical, hiring, or loan allocation, this shows that outcomes can flip based purely on how a question is framed or whether conversation history is kept, not just on the model's underlying judgment. This matters for anyone deploying LLM-based systems, since prompt design and context management turn out to be fairness issues, not just implementation details.



Terms in this paper
- paired-inference · Re-asking the same question while the model can still see its own previous answer in the conversation
- independent-inference · Asking the same question again with no memory of the prior answer, as a fresh conversation
- QALY (quality-adjusted life year) · A measure combining survival time and health quality, used to compare treatment benefits
- flip rate · The rate at which a patient's priority probability crosses from below 0.5 to above 0.5 after new information is added
- moralized framing · Rewording the same fact using more emotionally or normatively loaded language, e.g. 'disadvantaged' instead of 'low-income'



Original abstract (English)
Large language models are being incorporated into sensitive and important decision-making processes across nearly all fields. While prior work studies model bias around inputs and scenario framing, models can also behave in unexpected and undesirable ways due to context accumulated over their deployment. In this work, we study a medical example in which a model is asked to assign resource-allocation probabilities to two people given brief clinical context, and then sees the same scenario with a single extra sentence containing contrasting patient information, either with or without its previous response in context. Across three of four tested models, the paired-context and independent-inference experiments have different probability shifts, often in opposite directions (in favor of Person B vs. in favor of Person A) when new information is provided. We include additional paired-context experiments to show the effect of varying attributes across scenario axes. Our findings show the context-dependent effect of patient information in a sensitive medical use case. More broadly, our work shows the importance of carefully incorporating LLM-based systems into decision-making processes, context engineering, and further model behavioral studies.
Read on arXivLatest papers
- SWE-bench Science: Can Coding Agents Resolve Engineering Tasks in Science?AI coding agents were tested on fixing real scientific software, and even the best one failed more than half the time
- FlashPrefill V2: Block-Sparse Prefill Attention for Long-Context LLM ServingMaking sparse attention fast enough and accurate enough for real LLM serving, not just papers
- PolicyGuide: From Guarding One Action to Guiding the Whole Workflow for Policy-Compliant LLM AgentsMaking customer-service AI agents follow the whole procedure, not just avoid one bad action
- EXIMO: VLM Guided Exploration of VLA PoliciesTeaching a robot new chores without human teleoperation, by letting a chatty AI supervise it
- EnvHarness: Awakening Static Worlds for Agent LearningInstead of building new training worlds from scratch, this work adds a plug-in layer that reshapes existing ones around each agent's actual weaknesses
- Bounded Sovereignty and the Control Tax: Pricing AI Oversight When the Deployer Does Not Own the ModelCompanies that rent AI instead of owning it can only do half of AI safety oversight
- Beyond Imitation: Filtering On-Policy Distillation by Reasoning ProgressA fix for AI models that get penalized by their teacher even when they're reasoning correctly
- PersonalBench: Measuring the Authorship Gap in LLM PersonalizationAI can be prompted to write 'like someone,' but its own voice never fully disappears
Latest from METAL MEDIA
Figures: Spencer Gibson et al., arXiv:2608.18108, CC BY 4.0