Inferensys

Prompt

Deliberate Deception Pattern Recognition Prompt

A practical prompt playbook for classifying input claims by known deception patterns to harden verification pipelines against adversarial disinformation.
Developer doing prompt engineering on laptop, prompt variations visible on screen, casual coding session.
PROMPT PLAYBOOK

When to Use This Prompt

A diagnostic tool for red-team testers to classify adversarial claims by deception pattern before a verification pipeline goes live.

This prompt is a pre-deployment diagnostic, not a production fact-checker. Its job is to take a single claim that has been deliberately crafted to exploit a known disinformation technique—paltering, false implication, category error, motte-and-bailey, and others—and output a structured classification. The primary user is a verification QA engineer or red-team tester who needs to answer a specific question: 'Does my downstream verification pipeline recognize this class of deception, or does it slip through?' Use it during the adversarial testing phase to build a heat map of your system's weaknesses before you ship.

Do not use this prompt inside a live verification product. It is not designed to verify truth; it is designed to classify the structure of the deception. A production fact-checker must match claims against evidence and return a supported/refuted/unverified determination. This prompt, by contrast, returns a pattern label, a confidence score, and a concise rationale for why the input fits a particular deception technique. The output is a diagnostic signal for you, the engineer, indicating where to harden your extraction rules, evidence-matching logic, or refusal boundaries. For example, if this prompt consistently flags 'motte-and-bailey' patterns but your production verifier treats them as straightforward factual claims, you have identified a hardening target.

Integrate this prompt into a red-team test harness, not a user-facing application. Feed it a labeled dataset of adversarial claims, compare its classifications against your expected labels, and then cross-reference the results with your production verifier's behavior on the same inputs. The goal is to find misalignment: cases where the deception pattern is correctly identified here but mishandled downstream. After analysis, discard the prompt from any production path. Its value is in the gap analysis it enables, not in ongoing use.

PRACTICAL GUARDRAILS

Use Case Fit

Where this prompt works and where it does not. Use these cards to decide if the Deliberate Deception Pattern Recognition Prompt fits your verification pipeline.

01

Good Fit: Red-Team Probing

Use when: you are stress-testing a verification pipeline against known disinformation techniques before deployment. Guardrail: Run this prompt against a labeled adversarial dataset, not live user traffic, to calibrate detection rates without disrupting production.

02

Bad Fit: Real-Time Content Moderation

Avoid when: you need sub-second classification of user-generated content at scale. Guardrail: This prompt performs multi-step reasoning for nuanced pattern labeling. For real-time moderation, use a distilled classifier fine-tuned on the patterns this prompt identifies.

03

Required Inputs

What you need: a single claim or short claim set with enough linguistic context to detect paltering, false implication, or motte-and-bailey moves. Guardrail: Claims stripped of surrounding rhetorical structure will produce low-confidence or incorrect labels. Always include the full sentence or paragraph.

04

Operational Risk: Over-Classification

What to watch: the model may label ambiguous but honest statements as deceptive patterns, especially when primed to find deception. Guardrail: Always pair this prompt with a confidence threshold and a human-review step for borderline cases before feeding labels into pipeline hardening rules.

05

Operational Risk: Pattern Blindness

What to watch: the model may miss novel or hybrid deception patterns not represented in its training data or the taxonomy you provide. Guardrail: Periodically update the pattern taxonomy and run this prompt against emerging disinformation techniques documented by threat intelligence sources.

06

Pipeline Integration

Use when: you need labeled deception-pattern data to improve downstream claim extraction, evidence matching, or triage routing. Guardrail: Store pattern labels and detection rationale as structured metadata. Use them to adjust extraction boundaries, not to auto-reject claims without evidence review.

PROMPT PLAYBOOK

Copy-Ready Prompt Template

Classify the input claim by deception pattern using a copy-ready template with replaceable placeholders for inputs, output schema, and constraints.

The following template is designed to classify a single input claim into one or more deliberate deception patterns: paltering, false implication, category error, or motte-and-bailey. It instructs the model to output structured JSON with the detected pattern label, a concise rationale, and a confidence score. Replace each square-bracket placeholder with your own test data, output schema requirements, and operational constraints before running the prompt in your verification pipeline.

text
You are a deception pattern classifier for a fact-checking verification pipeline. Your job is to analyze a single input claim and determine whether it exhibits one or more deliberate deception patterns. Do not fact-check the claim. Do not assess whether it is true or false. Only classify the rhetorical or logical structure.

Deception patterns to detect:
- **Paltering**: Using technically true statements to create a misleading impression.
- **False Implication**: Stating something true while implying something false without directly asserting it.
- **Category Error**: Assigning a property to something that cannot meaningfully possess that property, or conflating distinct categories.
- **Motte-and-Bailey**: Asserting a controversial, hard-to-defend claim (bailey) while retreating to a trivial, easy-to-defend claim (motte) when challenged.

Input claim:
[INPUT_CLAIM]

Additional context (optional):
[CONTEXT]

Output a single JSON object with this exact schema:
{
  "patterns": [
    {
      "label": "paltering | false_implication | category_error | motte_and_bailey | none",
      "rationale": "One-sentence explanation of why this pattern applies, referencing the specific language in the claim.",
      "confidence": 0.0-1.0
    }
  ],
  "primary_pattern": "The highest-confidence pattern label, or 'none' if no pattern detected.",
  "requires_human_review": true/false
}

Constraints:
[CONSTRAINTS]

Examples for calibration:
[EXAMPLES]

To adapt this template, start by replacing [INPUT_CLAIM] with a single assertion you want to test. The [CONTEXT] placeholder accepts optional surrounding text that may clarify the claim's intended meaning. Use [CONSTRAINTS] to add domain-specific rules, such as 'Do not flag standard legal hedging as paltering' or 'Treat all claims about future events as outside scope.' The [EXAMPLES] placeholder should contain 2-4 few-shot demonstrations showing correct classification decisions for your domain. If you are integrating this into a red-teaming harness, wire the requires_human_review field to your triage router so that ambiguous or multi-pattern claims receive manual inspection before entering production verification logic.

IMPLEMENTATION TABLE

Prompt Variables

Required inputs for the Deliberate Deception Pattern Recognition Prompt. Each placeholder must be populated before the prompt is sent to the model. Validation notes describe how to verify the input is well-formed before execution.

PlaceholderPurposeExampleValidation Notes

[CLAIM_TEXT]

The raw claim or statement to classify for deception patterns. Must be a single, self-contained assertion.

The vaccine trial was successful, with 95% efficacy reported in the press release.

Non-empty string; max 2000 characters. Reject if input contains multiple unrelated claims or is a question rather than an assertion.

[DECEPTION_PATTERNS]

The taxonomy of deception patterns the model should detect. Defines the classification schema and constrains output labels.

paltering, false_implication, category_error, motte_and_bailey, cherry_picking, false_dichotomy, causal_overreach

Must be a comma-separated list matching known pattern labels. Validate against allowed pattern enum. Reject if empty or contains undefined patterns.

[CONTEXT_EVIDENCE]

Optional surrounding context or source material that may reveal the deception pattern. Used to detect context-stripping or selective quoting.

Full press release text and study abstract showing the 95% figure was for a subgroup of 200 patients, not the full trial population.

Null allowed. If provided, must be a string under 5000 characters. Warn if context appears to be truncated or redacted.

[OUTPUT_SCHEMA]

The exact JSON schema the model must follow in its response. Defines required fields, types, and enum constraints for pipeline ingestion.

{ pattern_label: string, confidence: float, rationale: string, indicators: string[], requires_context_restoration: boolean }

Must be valid JSON schema. Validate parse before prompt assembly. Reject if schema lacks required fields or allows undefined pattern labels.

[CONFIDENCE_THRESHOLD]

Minimum confidence score required to emit a pattern label. Claims below this threshold should be classified as 'no_pattern_detected'.

0.65

Must be a float between 0.0 and 1.0. Reject if non-numeric or outside range. Default to 0.65 if not specified.

[MAX_PATTERNS_PER_CLAIM]

Upper bound on how many deception patterns the model can assign to a single claim. Prevents over-labeling and forces prioritization.

2

Must be a positive integer. Reject if 0 or greater than 5. Default to 2 if not specified.

[REQUIRE_EVIDENCE_CITATION]

Controls whether the model must cite specific text spans from [CONTEXT_EVIDENCE] that support its pattern classification.

Must be boolean. If true and [CONTEXT_EVIDENCE] is null, emit a pre-flight warning but allow execution with reduced confidence expectations.

PROMPT PLAYBOOK

Implementation Harness Notes

How to wire the Deliberate Deception Pattern Recognition Prompt into a red-team testing workflow.

This prompt is designed as a batch classification tool within a broader adversarial testing pipeline, not as a standalone chat interface. The primary integration pattern is to run it against a curated dataset of known deception examples, capture structured outputs, and compare them against expected labels to measure the verification system's detection accuracy. The harness should treat the prompt as a stateless function: input claims go in, structured JSON classifications come out, and each call is independent to avoid session-drift effects that could corrupt test results.

For implementation, wrap the prompt in a scripted evaluation loop that reads from a test dataset (e.g., a CSV or JSONL file with claim and expected_pattern columns), sends each claim to the model with a low temperature setting (0.0–0.2) for deterministic outputs, and parses the JSON response. Validate the output schema immediately: check that pattern_label is one of the expected enum values (paltering, false_implication, category_error, motte_and_bailey, other), that detection_rationale is a non-empty string, and that confidence_score is a float between 0.0 and 1.0. Failed validations should trigger a single retry with the error message appended to the prompt as additional context. Log every raw response, validation failure, and retry attempt for post-run analysis. For high-stakes verification pipelines, route claims classified with confidence_score below 0.7 or pattern_label of other to a human review queue rather than auto-failing the test.

Model choice matters here. Use a model with strong instruction-following and structured output capabilities—GPT-4o, Claude 3.5 Sonnet, or equivalent. Avoid smaller models that may collapse multiple deception patterns into a single catch-all label or hallucinate pattern names outside the defined taxonomy. After each test run, compute per-pattern precision and recall against your ground-truth labels, and pay special attention to motte_and_bailey false negatives, which are the most common failure mode when the model confuses a defensible narrow claim with the broader implied claim. Store these metrics per model version and prompt version to detect regressions when either changes.

IMPLEMENTATION TABLE

Expected Output Contract

Defines the JSON schema, field types, and validation rules for the Deliberate Deception Pattern Recognition Prompt. Use this contract to parse, validate, and route the model's output in your verification pipeline.

Field or ElementType or FormatRequiredValidation Rule

deception_patterns

array of objects

Schema check: root must be an array. Length check: 1 <= len <= 5. If no patterns detected, return a single object with pattern 'none'.

deception_patterns[].pattern

enum string

Enum check: must be one of ['paltering', 'false_implication', 'category_error', 'motte_and_bailey', 'false_dichotomy', 'cherry_picking', 'correlation_as_causation', 'none']. No other values allowed.

deception_patterns[].detection_rationale

string

Content check: must be a non-empty string (>= 20 chars) explaining the specific linguistic or logical evidence. Must reference the input text directly. If pattern is 'none', rationale must explain why no deception was found.

deception_patterns[].confidence_score

number

Range check: must be a float between 0.0 and 1.0 inclusive. Threshold check: if score < 0.5, the pattern should be considered speculative and flagged for human review.

deception_patterns[].input_excerpt

string

Citation check: must be a verbatim substring from [INPUT_CLAIM]. If the excerpt is paraphrased or modified, validation must fail. Null not allowed.

deception_patterns[].suggested_hardening

string

Null check: null allowed if no hardening suggestion is applicable. If present, must be a non-empty string describing a concrete pipeline or prompt rule change to catch this pattern.

deception_patterns[].requires_human_review

boolean

Boolean check: must be true if confidence_score < [HUMAN_REVIEW_THRESHOLD] or if pattern is 'none' but input is flagged as suspicious. Otherwise, can be false.

deception_patterns[].alternative_interpretation

string

Null check: null allowed. If present, must describe a plausible non-deceptive reading of the input_excerpt to reduce false positives. Required if confidence_score < 0.7.

PRACTICAL GUARDRAILS

Common Failure Modes

When red-teaming verification systems against deliberate deception, these failure modes surface first. Each card identifies a specific breakdown pattern and the guardrail that catches it before it reaches production.

01

Pattern Classification Collapse Under Combined Tactics

What to watch: The prompt assigns a single deception label when the input layers multiple tactics—paltering wrapped in a motte-and-bailey frame with false-implication garnish. The model picks the most salient pattern and ignores the rest, producing incomplete detection rationale. Guardrail: Require multi-label output with a secondary_patterns array and a composite_deception_score. Add few-shot examples showing two-pattern and three-pattern combinations with explicit rationale for each layer.

02

False-Negative Drift on High-Trust Domains

What to watch: Claims framed with scientific citations, official-sounding titles, or quantitative precision cause the prompt to suppress deception flags. The model defers to perceived authority rather than analyzing the claim structure. Guardrail: Add a domain_authority_blind instruction that explicitly separates source prestige from pattern analysis. Include counterexamples where authoritative-sounding claims are flagged for paltering or false implication, with rationale that ignores the source's reputation.

03

Over-Classification of Honest Uncertainty as Paltering

What to watch: Statements with genuine hedging, confidence intervals, or acknowledged limitations get misclassified as paltering—treating honest uncertainty as deliberate truth-dodging. This inflates false-positive rates and erodes trust in the detection pipeline. Guardrail: Add a hedging_vs_paltering discriminator step that checks whether the statement explicitly acknowledges what it doesn't know. Require the output to include a genuine_uncertainty_indicators field before assigning a paltering label.

04

Motte-and-Bailey Detection Misses on Normative Claims

What to watch: The prompt reliably catches motte-and-bailey shifts between factual and normative versions of a claim, but misses shifts between two normative positions—one defensible, one extreme. The model looks for fact-opinion boundaries and ignores opinion-opinion retreat patterns. Guardrail: Extend the pattern definition to include normative_motte_and_bailey as a distinct sub-pattern. Add examples where both the motte and the bailey are value claims, with detection rationale based on defensibility gradient rather than factuality.

05

Category Error Blindness in Domain-Specific Jargon

What to watch: Category errors disguised in domain terminology slip past detection because the model doesn't recognize that terms from different conceptual frameworks are being mixed. A legal term used in a medical claim, or a statistical concept misapplied to a sociological statement, reads as coherent to the model. Guardrail: Add a cross_domain_category_check instruction that flags when terms from distinct taxonomies, professional vocabularies, or measurement frameworks appear together without bridging definitions. Include domain-mismatch examples in few-shot prompts.

06

Rationale Hallucination Under Pattern Ambiguity

What to watch: When no single deception pattern clearly fits, the model invents plausible-sounding but unfounded rationale to justify its best-guess label. The output looks structured and confident but the reasoning fabricates pattern indicators not present in the input. Guardrail: Add an uncertainty_abstention rule: when no pattern exceeds a confidence threshold, output pattern: "no_deception_pattern_detected" with a detection_confidence score below 0.5. Require the rationale to quote specific claim text for each pattern indicator cited.

IMPLEMENTATION TABLE

Evaluation Rubric

Use this rubric to evaluate the Deliberate Deception Pattern Recognition Prompt before red-team deployment. Each criterion targets a specific failure mode common to deception classification prompts. Run these tests against a curated adversarial dataset and log pass/fail results.

CriterionPass StandardFailure SignalTest Method

Pattern Classification Accuracy

Correctly labels paltering, false implication, category error, and motte-and-bailey patterns on a held-out labeled set with >= 90% accuracy

Pattern label does not match ground truth; confusion between paltering and false implication is a critical failure

Run prompt against 50 labeled adversarial examples; compute per-pattern precision/recall; flag any pattern below 85% recall

Rationale Grounding

Detection rationale references specific linguistic markers or logical structures from the input claim, not generic descriptions

Rationale contains only pattern definitions without citing input text; rationale is identical across different claims

Spot-check 20 outputs; require at least one direct quote or paraphrase from [INPUT_CLAIM] in each rationale field

Null Input Handling

Returns empty array or explicit 'no deception detected' marker when input contains no deceptive patterns

Hallucinates a pattern label for truthful statements; assigns high confidence to fabricated detection

Feed 10 truthful, non-deceptive claims; require output to be empty array or confidence below 0.2 for all patterns

Multi-Pattern Detection

Correctly identifies and labels multiple co-occurring deception patterns in a single claim when present

Reports only one pattern when two or more are present; truncates detection to highest-confidence pattern only

Feed 5 claims each containing 2 verified deception patterns; require all patterns present in output array

Confidence Calibration

Confidence scores correlate with pattern clarity: unambiguous deception > 0.8, ambiguous cases 0.4-0.7, truthful claims < 0.2

High confidence (>0.8) assigned to ambiguous or borderline cases; low confidence assigned to textbook deception examples

Bin 30 outputs by human-judged difficulty; compute expected confidence bands; flag inversion where easy cases score low or hard cases score high

Adversarial Paraphrase Robustness

Detects same deception pattern in semantically equivalent paraphrases designed to evade keyword-based detection

Pattern detection flips or drops when claim is reworded with synonyms, passive voice, or changed sentence structure

Generate 10 paraphrase pairs from known deception claims; require consistent pattern label across each pair

Output Schema Compliance

Every output strictly matches [OUTPUT_SCHEMA] with all required fields present and correctly typed

Missing fields, extra fields, wrong types, or malformed JSON that fails schema validation

Validate all test outputs against [OUTPUT_SCHEMA] using programmatic schema check; 100% compliance required

Boundary Refusal Consistency

Correctly refuses to classify when input is not a claim (question, greeting, instruction) without hallucinating deception

Classifies non-claim inputs as deceptive; or refuses to classify legitimate claims

Feed 5 non-claim inputs and 5 legitimate claims; require refusal on non-claims and classification on claims

ADAPTATION OPTIONS

Adapt This Prompt

How to adapt

Use the base prompt with a single deception taxonomy and minimal output schema. Start with 3-4 pattern labels (paltering, false implication, motte-and-bailey, category error) and ask for a short rationale per claim. Run against a small hand-labeled dataset of 20-30 claims to establish baseline detection rates before adding complexity.

Prompt snippet

code
Classify the following claim by deception pattern. Return JSON with "pattern" and "rationale".

Claim: [CLAIM]

Watch for

  • Over-classification: labeling straightforward statements as deceptive
  • Pattern confusion between paltering and false implication
  • Missing null class for non-deceptive claims
  • Rationale that restates the pattern name without evidence from the claim text
Prasad Kumkar

About the author

Prasad Kumkar

CEO & MD, Inference Systems

Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.

His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.