This prompt is for engineering teams building AI systems in regulated or high-stakes domains where a wrong answer carries significant risk. Its job is to act as a policy-enforcement gate: it produces a binary decision (ANSWER or REFUSE) based on whether retrieved evidence meets a configurable sufficiency threshold. The ideal user is a production AI architect or backend engineer integrating this prompt into a RAG pipeline, a customer-support copilot, or a clinical decision-support tool. Required context includes the user's query, the full set of retrieved evidence passages, and a domain-specific sufficiency policy that defines what 'enough evidence' means for your use case. You should not use this prompt for open-ended creative tasks, general chatbot interactions, or low-stakes Q&A where a speculative answer is acceptable. It is also not a replacement for a full output-validation layer; it decides whether to proceed, not whether the final answer is faithful.
Prompt
Evidence Threshold Decision Prompt for Safety-Critical Answers

When to Use This Prompt
Defines the job-to-be-done, ideal user, required context, and clear boundaries for when the Evidence Threshold Decision Prompt should and should not be deployed.
In practice, you wire this prompt as a synchronous gate immediately after retrieval and before answer generation. The model receives the query, the evidence set, and a structured policy definition—such as 'minimum 2 corroborating sources from authoritative journals published within 5 years' for a medical application, or 'at least one directly on-point regulatory filing' for a legal use case. The output is a strict JSON object with an action field set to ANSWER or REFUSE, a rationale string that cites specific evidence gaps or sufficiency, and an escalation_path field that recommends human review when the threshold is not met. This structured output is then parsed by your application to either proceed to answer generation or return a refusal response to the user. For high-risk domains, you must log the full prompt, evidence, and decision payload for audit trails. A human-review queue should be triggered automatically when the action is REFUSE and the escalation_path indicates a critical gap.
The primary failure mode to avoid is deploying this prompt without a well-defined, domain-validated sufficiency policy. A vague instruction like 'refuse if evidence is insufficient' will produce inconsistent and brittle results. Instead, invest time with domain experts to define concrete, measurable criteria for sufficiency. Also, do not use this prompt as a standalone safety guard; it should be one component in a defense-in-depth strategy that includes output faithfulness verification, hallucination detection, and human-in-the-loop review for high-severity use cases. If your application can tolerate a partially correct answer with caveats, consider using a 'Partial Answer with Caveats' prompt instead of a binary gate. Next, proceed to the prompt template section to copy and adapt the exact instructions for your domain.
Use Case Fit
Where the Evidence Threshold Decision Prompt delivers value and where it introduces risk. Use these cards to decide if this prompt fits your operational context before integrating it into a safety-critical pipeline.
Good Fit: Regulated Answer Gates
Use when: You must produce an audit-ready binary decision (answer/refuse) before a response reaches a user in healthcare, legal, or finance workflows. Guardrail: Pair the prompt output with a human-review escalation queue for any decision that falls within a configurable gray zone.
Bad Fit: Open-Ended Creative Tasks
Avoid when: The user expects brainstorming, summarization of fictional content, or subjective analysis where evidence sufficiency is not a meaningful concept. Guardrail: Route these requests to a standard generation prompt instead of forcing a binary evidence gate that will produce false refusals.
Required Inputs
What you must provide: A user query, a set of retrieved evidence passages, and a domain-specific sufficiency threshold definition. Guardrail: Validate that the evidence set is non-empty and that the threshold definition includes concrete criteria (e.g., 'requires 2+ peer-reviewed sources less than 5 years old') rather than vague instructions.
Operational Risk: Threshold Drift
What to watch: The model's internal threshold interpretation can drift across model versions or even across repeated calls, causing inconsistent answer/refuse decisions for similar evidence quality. Guardrail: Implement a calibration eval set with 50+ examples spanning clear-answer, clear-refuse, and borderline cases, and run it before every model upgrade.
Operational Risk: Audit Trail Gaps
What to watch: The prompt produces a decision but the rationale may be too vague for compliance reviewers who need to reconstruct why a specific answer was allowed or blocked. Guardrail: Require the output schema to include specific evidence citations and a structured sufficiency justification, not just a binary label. Log the full prompt, evidence, and output together.
Operational Risk: Over-Refusal in Gray Zones
What to watch: When evidence is partial but usable, the model may default to refusal, blocking valuable answers and frustrating users. Guardrail: Implement a three-tier output (answer, refuse, escalate-for-human-review) and tune the threshold so that borderline cases route to humans instead of silently refusing.
Copy-Ready Prompt Template
A reusable prompt template with square-bracket placeholders for making evidence sufficiency decisions in safety-critical domains.
This template is the core instruction set for an Evidence Threshold Decision Prompt. It forces the model to act as a binary gate—either the evidence is sufficient to answer, or it is not—and to produce a structured rationale that can be logged, audited, and escalated. The prompt is designed to be dropped into a production pipeline where the model's output is parsed by application code before any answer reaches a user. Every placeholder must be populated with domain-specific values before deployment; leaving a placeholder unresolved will cause the model to hallucinate policy.
textYou are an evidence sufficiency gate for a [DOMAIN] application. Your only job is to decide whether the provided evidence is sufficient to answer the user's question at the required threshold for this domain. ## INPUT User Question: [USER_QUESTION] Retrieved Evidence Passages: [EVIDENCE_PASSAGES] ## THRESHOLD DEFINITION A sufficient answer must meet ALL of the following criteria: - [CRITERION_1] - [CRITERION_2] - [CRITERION_3] ## CONSTRAINTS - Do not answer the user's question. Only decide sufficiency. - If any criterion is not met, the evidence is INSUFFICIENT. - Do not infer, extrapolate, or fill gaps. Only use the provided passages. - If passages contradict each other, treat the evidence as INSUFFICIENT unless [CONTRADICTION_POLICY]. ## OUTPUT SCHEMA Respond with a single JSON object matching this schema: { "decision": "SUFFICIENT" | "INSUFFICIENT", "confidence": 0.0-1.0, "criteria_assessment": { "[CRITERION_1_LABEL]": {"met": true | false, "rationale": "string"}, "[CRITERION_2_LABEL]": {"met": true | false, "rationale": "string"}, "[CRITERION_3_LABEL]": {"met": true | false, "rationale": "string"} }, "missing_evidence_summary": "string, empty if SUFFICIENT", "escalation_recommended": true | false, "escalation_reason": "string, empty if no escalation" } ## ESCALATION RULES Recommend escalation to human review when: - [ESCALATION_CONDITION_1] - [ESCALATION_CONDITION_2] ## EXAMPLES [FEW_SHOT_EXAMPLES]
Adaptation guidance: Replace [DOMAIN] with a specific label like "clinical decision support" or "financial compliance." Populate [CRITERION_1] through [CRITERION_3] with measurable, domain-specific conditions—for example, "Evidence is from a source published within the last 12 months" or "At least two independent passages corroborate the finding." The [CONTRADICTION_POLICY] placeholder should resolve to a clear rule such as "one passage is from a higher-authority source and explicitly refutes the other." [FEW_SHOT_EXAMPLES] must include at least one SUFFICIENT and one INSUFFICIENT example with realistic evidence passages. [ESCALATION_CONDITION_1] and [ESCALATION_CONDITION_2] should capture high-risk scenarios like "decision would affect patient safety" or "regulatory reporting obligation exists."
Before wiring this prompt into a production pipeline, validate that the output JSON parses correctly across at least 50 test cases covering boundary conditions: borderline sufficiency, empty evidence sets, contradictory passages, and queries that require domain knowledge the evidence does not contain. If the model fails to produce valid JSON or misclassifies sufficiency in more than 2% of test cases, tighten the criteria definitions or add more few-shot examples before proceeding. Never deploy this gate without a human-review queue for all escalated decisions and a logging path that captures the full prompt, model response, and final routing action for audit.
Prompt Variables
Required inputs for the Evidence Threshold Decision Prompt. Each placeholder must be populated before the prompt is assembled and sent to the model. Validation notes describe how to check that the input is well-formed and safe before execution.
| Placeholder | Purpose | Example | Validation Notes |
|---|---|---|---|
[QUERY] | The user's question or request that must be evaluated for answerability | What is the maximum safe dosage of rivaroxaban for a patient with stage 3 CKD? | Must be non-empty string. Check for prompt injection patterns. Truncate if exceeds model context window minus other inputs. |
[RETRIEVED_EVIDENCE] | The set of passages, documents, or data sources retrieved to answer the query | Passage 1: Rivaroxaban dosing guidelines... Passage 2: CKD stage 3 renal impairment... | Must be a non-null list of evidence objects with text and source fields. Validate that each passage has a unique source identifier. Empty list triggers immediate refusal path. |
[DOMAIN] | The regulated or high-stakes domain that determines evidence sufficiency thresholds | clinical_pharmacology | Must match an allowed domain enum value. Reject unknown domains. Domain determines threshold strictness and required evidence types. |
[EVIDENCE_THRESHOLD] | The minimum evidence quality and quantity required before answering | high | Must be one of: low, medium, high, critical. Critical threshold requires multiple authoritative sources and zero conflicts. High threshold requires at least one authoritative source with no conflicts. |
[AUTHORITY_SOURCES] | The list of approved authoritative sources for the domain | FDA labels, UpToDate, Micromedex, institutional formulary | Must be a non-empty list of source names or identifiers. Each retrieved passage's source is checked against this list for authority scoring. |
[OUTPUT_SCHEMA] | The expected structure for the decision output | {"decision": "answer|refuse", "rationale": "string", "evidence_sufficiency_score": 0.0-1.0, "cited_passages": ["id1"], "missing_evidence": ["string"], "escalation_required": true|false} | Must be a valid JSON Schema object. Validate that required fields include decision, rationale, and evidence_sufficiency_score. Reject schemas missing audit trail fields. |
[ESCALATION_POLICY] | Rules for when human review is required regardless of evidence assessment | Escalate if: evidence_sufficiency_score < 0.7, conflicting sources detected, domain is clinical and threshold is critical | Must be a non-empty string or structured policy object. Validate that escalation conditions are parseable and non-contradictory. Test against known edge cases. |
[AUDIT_REQUIREMENTS] | Required fields and metadata for the audit trail | Include: timestamp, model_version, evidence_retrieval_query, threshold_applied, authority_sources_checked, escalation_decision | Must be a list of required audit fields. Validate that each field name is a valid identifier. Reject if audit requirements are empty when domain is regulated. |
Implementation Harness Notes
How to wire the Evidence Threshold Decision Prompt into a production application with validation, retries, logging, and human review.
This prompt is not a conversational nicety; it is a binary gate in a safety-critical pipeline. The implementation harness must treat the model's output as a structured decision that controls whether an answer is released to a user, held for review, or refused entirely. The harness is responsible for enforcing the schema, validating the rationale against the provided evidence, and ensuring that every REFUSE or ESCALATE decision is auditable. In regulated domains, the harness should never silently override a refusal.
Wire the prompt as a synchronous step after evidence retrieval and before answer generation. The input to this step is the user's query, the retrieved evidence set, and the domain-specific threshold configuration. The model must return a strict JSON object with decision (ANSWER, REFUSE, ESCALATE), confidence_score, evidence_sufficiency_rationale, and missing_evidence fields. Implement a post-processing validator that checks: (1) the JSON schema is valid, (2) the decision field matches one of the allowed enum values, (3) the confidence_score is a float between 0 and 1, and (4) if the decision is ANSWER, the evidence_sufficiency_rationale explicitly references at least one piece of provided evidence. If validation fails, retry once with the validation error injected into the prompt as a correction instruction. If the retry also fails, force an ESCALATE decision and log the failure for immediate review.
Log every decision with the full prompt, the raw model output, the validation result, and the final routed action. For ESCALATE decisions, push a structured payload to a human review queue containing the original query, the evidence set, the model's rationale, and a direct link to the audit log. Do not cache or reuse threshold decisions across queries, as evidence sufficiency is query-specific. Set a strict latency budget for this gate—typically under 2 seconds—and monitor the rate of forced escalations due to validation failures as a key reliability metric. If the forced escalation rate exceeds 1%, investigate prompt drift or model behavior changes immediately.
Common Failure Modes
When deploying an Evidence Threshold Decision Prompt in safety-critical systems, these are the most common failure patterns and how to prevent them before they reach production.
Threshold Gaming
What to watch: The model learns to produce just enough evidence justification to cross the threshold, even when the underlying evidence is weak or misrepresented. This creates a false sense of security where the binary decision says 'answer' but the grounding is actually insufficient. Guardrail: Implement a two-stage check—first the threshold decision, then a separate faithfulness verification pass that confirms each cited piece of evidence genuinely supports the claims. Use a higher threshold for the verification pass than the initial decision.
Over-Refusal on Edge Cases
What to watch: The model refuses to answer when evidence is technically sufficient but contains minor gaps, ambiguities, or domain-typical uncertainty. This erodes user trust and pushes unnecessary work to human reviewers. Common in early deployments where thresholds are set too conservatively. Guardrail: Calibrate thresholds against a golden dataset of borderline cases with human-annotated answer/refuse decisions. Monitor refusal rates by query category and adjust thresholds when refusal exceeds expected rates for answerable questions.
Audit Trail Drift
What to watch: The structured audit trail fields degrade over time—rationales become generic, evidence citations get truncated, and decision metadata goes missing. This happens when prompt instructions for audit output compete with the primary decision task for model attention. Guardrail: Separate the decision prompt from the audit trail generation. Run the threshold decision first, then feed the decision and evidence into a dedicated audit documentation prompt with strict schema validation. Reject any audit output that fails schema checks.
Escalation Path Bypass
What to watch: The model makes a binary answer/refuse decision but fails to trigger human review escalation when required—either because escalation criteria are ambiguous or because the model optimizes for a clean decision over a messy handoff. Guardrail: Define escalation as a third explicit output state, not a sub-field of refusal. Use clear, non-negotiable escalation triggers (e.g., 'evidence conflict detected,' 'domain risk category X,' 'confidence below Y') and test these triggers with adversarial examples designed to probe the boundary.
Evidence Recency Blindness
What to watch: The model treats all retrieved evidence as equally valid regardless of publication date, producing confident answers from outdated sources. This is especially dangerous in fast-moving regulated domains where stale evidence can lead to compliance violations. Guardrail: Include explicit recency weighting in the evidence sufficiency assessment. Add a temporal relevance check that flags evidence older than domain-specific freshness windows. When the best evidence is stale, escalate rather than answer from outdated material.
Confidence Calibration Decay
What to watch: The model's internal confidence estimates drift away from actual correctness rates over time, especially as the retrieval corpus changes or new query patterns emerge. A threshold that worked at launch may become too permissive or too restrictive. Guardrail: Continuously log decision outcomes against eventual ground truth (human review results, user reports, downstream error detection). Recalibrate thresholds monthly using recent production data. Implement automated alerts when the gap between stated confidence and observed accuracy exceeds a predefined tolerance.
Evaluation Rubric
Use this rubric to test the Evidence Threshold Decision Prompt before production deployment. Each criterion targets a specific failure mode in safety-critical answer/refuse decisions.
| Criterion | Pass Standard | Failure Signal | Test Method |
|---|---|---|---|
Binary Decision Accuracy | Correctly answers when evidence meets threshold; correctly refuses when evidence is insufficient | Answering when evidence is below threshold (false positive) or refusing when evidence is sufficient (false negative) | Run 50 labeled test cases with known evidence sufficiency ground truth; measure precision and recall of the answer/refuse decision |
Threshold Boundary Adherence | Decision matches the domain-specific threshold defined in [EVIDENCE_THRESHOLD]; no drift toward default behavior | Model applies its own implicit threshold instead of the configured [EVIDENCE_THRESHOLD] value | Test with evidence at exactly the threshold boundary (e.g., 3 of 5 required sources); verify decision matches threshold rule |
Evidence Sufficiency Rationale Quality | Rationale cites specific evidence items, gaps, and threshold comparison; no vague justifications | Rationale uses generic language like 'evidence seems sufficient' without naming specific sources or gaps | Parse rationale for required fields: cited sources, identified gaps, threshold comparison statement; flag missing elements |
Audit Trail Completeness | Output includes all required audit fields: decision, threshold applied, evidence count, gap list, timestamp, escalation flag | Missing audit fields or null values in required audit trail elements | Validate output against [AUDIT_SCHEMA]; reject if any required field is null or absent |
Escalation Trigger Correctness | Escalation flag is true when evidence is borderline or domain risk is high per [ESCALATION_RULES]; false otherwise | Escalation flag always false (never escalates) or always true (over-escalates) | Test with borderline evidence cases defined in [ESCALATION_RULES]; verify flag matches expected escalation behavior |
Human-Review Handoff Quality | When escalation is triggered, output includes structured handoff with context summary, evidence summary, and reason for escalation | Escalation output is empty, unstructured, or missing context needed for human reviewer to proceed | Check escalated outputs for required handoff fields: context summary, evidence summary, escalation reason; measure completeness |
Domain Constraint Compliance | Decision respects domain-specific rules in [DOMAIN_CONSTRAINTS] (e.g., 'never answer dosage questions without two peer-reviewed sources') | Model ignores domain constraints and applies generic sufficiency logic | Create test cases that violate specific [DOMAIN_CONSTRAINTS] rules; verify refusal even when general evidence seems sufficient |
Refusal Tone and Safety | Refusal is clear, honest about limitations, and avoids speculative language; no implied partial answer when refusing | Refusal hedges with 'might be' or 'possibly' language that could be misinterpreted as an answer | Human review of refusal outputs for speculative language; automated check for presence of definitive refusal statement |
Enabling Efficiency, Speed & Accuracy
Intelligent Analysis, Decision & Execution
We build AI systems for teams that need search across company data, workflow automation across tools, or AI features inside products and internal software.
Talk to Us
Search across company data
Give teams answers from docs, tickets, runbooks, and product data with sources and permissions.
Useful when people spend too long searching or get different answers from different systems.

Automate internal workflows
Use AI to route work, draft outputs, trigger actions, and keep approvals and logs in place.
Useful when repetitive work moves across multiple tools and teams.

Add AI to products and internal tools
Build assistants, guided actions, or decision support into the software your team or customers already use.
Useful when AI needs to be part of the product, not a separate tool.
Adapt This Prompt
How to adapt
Start with the base prompt and a single evidence threshold. Use a simple binary output schema (answer/refuse) without audit trail fields. Test with 10-20 examples covering clear-answer and clear-refusal cases.
code[SYSTEM] You are an evidence threshold evaluator. Given [QUERY] and [EVIDENCE_PASSAGES], decide: - ANSWER if evidence directly supports a complete response - REFUSE if evidence is insufficient, contradictory, or missing key facts Return JSON: {"decision": "ANSWER"|"REFUSE", "rationale": "string"}
Watch for
- Overly permissive thresholds that greenlight weak answers
- Missing edge cases: partial evidence, outdated sources, implicit claims
- No calibration against human judgments yet

About the author
Prasad Kumkar
CEO & MD, Inference Systems
Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.
His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.
Partnered with leading AI, data, and software stack.
How We Work
Custom AI workflows for your Business
One-fit-all AI don't work for modern businesses. At Inferensys, we aim to understand your business & custom requirements; which we use to define most efficient agentic workflows, the data, and the tools for your business.
01
Review the use case
We understand the task, the users, and where AI can actually help.
Read more02
Pick the right approach
We define what needs search, automation, or product integration.
Read more03
Build the first useful version
We implement the part that proves the value first.
Read more04
Improve from there
We add the checks and visibility needed to keep it useful.
Read moreThe first call is a practical review of your use case and the right next step.
Talk to Us