This prompt is designed for evaluation infrastructure teams who need to monitor a fleet of LLM judges for anomalous scoring behavior. The core job-to-be-done is automated surveillance: you have multiple judges scoring the same or similar outputs, and you need to identify which judges are deviating from the fleet consensus in a statistically meaningful way. The ideal user is an MLOps engineer, evaluation platform lead, or AI reliability engineer who already has a pipeline producing judge scores and wants to add automated outlier detection before those scores feed into model training, regression gates, or production quality dashboards.
Prompt
Outlier Judge Detection Prompt Template

When to Use This Prompt
Defines the job, ideal user, required inputs, and constraints for the Outlier Judge Detection prompt.
Use this prompt when you have a score matrix—multiple judges rating multiple items—and you need a structured report flagging outlier judges with deviation metrics, severity classifications, and root-cause hypotheses. The prompt expects inputs like judge IDs, item IDs, raw scores, and optional judge metadata (model type, prompt version, deployment date). It is not appropriate for single-judge evaluation setups, real-time scoring with no historical baseline, or cases where you lack at least three judges per item. Do not use this prompt when the scoring scale is purely categorical with no ordinal relationship, as deviation metrics like mean absolute error lose interpretability. For high-stakes decisions—such as removing a judge from a production pipeline or flagging a model for retraining—always pair this prompt's output with human review of the flagged judge's raw scores and rationales before taking action.
Before running this prompt, ensure you have a clean score matrix with consistent item-judge pairings, a defined agreement baseline (e.g., historical inter-rater reliability), and configurable severity thresholds. The prompt works best when embedded in a batch monitoring job that runs daily or weekly, comparing current judge behavior against a rolling window of recent performance. After receiving the output, validate flagged judges by spot-checking their score distributions against the fleet, reviewing their rationales for drift, and confirming that the detected deviation is not caused by a legitimate shift in item difficulty. If the prompt flags too many judges, recalibrate your deviation thresholds; if it flags none when you suspect drift, widen the detection window or lower the sensitivity.
Use Case Fit
Where the Outlier Judge Detection prompt works, where it fails, and what you must provide before running it in production.
Good Fit: Multi-Judge Evaluation Fleets
Use when: you run 3+ LLM judges scoring the same items and need automated detection of judges whose scoring patterns deviate from the fleet. Guardrail: require a minimum of 3 judges per item before triggering outlier detection; single-judge or pair-only setups lack the statistical signal for reliable deviation measurement.
Bad Fit: Single-Item or Ad-Hoc Judging
Avoid when: you are evaluating a single output with one judge and no historical baseline. Outlier detection requires distributional comparison across multiple items. Guardrail: gate invocation behind a minimum sample size check (≥10 scored items per judge in the detection window) to prevent false flags from sparse data.
Required Inputs: Score Matrix and Judge Metadata
What you need: a matrix of judge-item scores with judge IDs, item IDs, timestamps, and optional rubric criteria breakdowns. Guardrail: validate input schema before calling the prompt—missing timestamps prevent drift analysis, missing judge IDs make attribution impossible, and unnormalized score scales produce garbage deviation metrics.
Operational Risk: False-Positive Judge Flags
What to watch: legitimate score variation from difficult items or ambiguous rubrics can trigger outlier flags, eroding trust in the detection system. Guardrail: pair automated detection with severity classification (minor/moderate/severe) and require human review for moderate+ flags before removing a judge from the fleet or triggering alerts.
Operational Risk: Threshold Drift Over Time
What to watch: outlier detection thresholds calibrated on historical data become stale as judge behavior, rubric interpretations, or item difficulty distributions shift. Guardrail: recalibrate deviation thresholds weekly using a rolling window of recent judge performance data; log threshold changes with rationale for audit trails.
Not a Replacement for Root-Cause Analysis
What to watch: this prompt flags which judges are outliers, not why. Teams that treat detection as diagnosis skip the investigation step and risk removing judges for correct but unusual scoring. Guardrail: always route flagged judges to the Disagreement Root Cause Analysis prompt before taking action; never auto-remove judges based solely on outlier scores.
Copy-Ready Prompt Template
A reusable prompt template for detecting outlier judges in an evaluation fleet, producing deviation metrics, severity classifications, and root-cause hypotheses.
This prompt template is designed to be dropped into an automated evaluation monitoring pipeline. It accepts a matrix of scores from multiple judges across multiple items, identifies which judges are producing anomalous scoring patterns, and returns a structured report. The template uses square-bracket placeholders for all dynamic inputs, making it straightforward to parameterize in code before sending to the model. Adapt the [JUDGE_SCORE_MATRIX] format to match your internal data structures, and adjust the [DEVIATION_THRESHOLDS] based on your fleet's historical agreement baselines.
textYou are an evaluation auditor analyzing scoring patterns from a fleet of LLM judges. Your task is to detect outlier judges whose scoring behavior deviates significantly from the fleet consensus. ## INPUT DATA ### Judge Score Matrix [JUDGE_SCORE_MATRIX] Format: A table or JSON structure where rows are items, columns are judges, and cells contain numeric scores. Include judge identifiers and item identifiers. ### Historical Baseline (Optional) [HISTORICAL_BASELINE] If provided, use this to establish expected agreement ranges and per-judge reliability scores. If not provided, derive baselines from the current matrix. ## DETECTION PARAMETERS - Deviation Thresholds: [DEVIATION_THRESHOLDS] - Specify thresholds for flagging (e.g., z-score > 2.0, mean absolute deviation > 1.5, agreement rate < 0.7) - Minimum Items for Analysis: [MIN_ITEMS] - Judge Grouping (Optional): [JUDGE_GROUPS] - If judges belong to groups (e.g., model family, prompt version), analyze within-group and cross-group patterns ## OUTPUT SCHEMA Return a JSON object with this structure: { "fleet_summary": { "total_judges": number, "total_items": number, "overall_agreement_rate": number, "mean_pairwise_correlation": number, "analysis_timestamp": string }, "outlier_judges": [ { "judge_id": string, "severity": "low" | "medium" | "high" | "critical", "deviation_metrics": { "mean_absolute_deviation_from_fleet_mean": number, "z_score_of_mean": number, "agreement_rate_with_fleet": number, "score_variance_ratio": number }, "pattern_type": "leniency_skew" | "severity_skew" | "inconsistent" | "scale_compression" | "bimodal" | "item_specific", "affected_items": [string], "root_cause_hypotheses": [ { "hypothesis": string, "confidence": "low" | "medium" | "high", "supporting_evidence": string } ], "recommended_action": string } ], "fleet_health_assessment": { "status": "healthy" | "warning" | "degraded" | "critical", "summary": string, "requires_human_review": boolean } } ## CONSTRAINTS [CONSTRAINTS] Default constraints: - Flag judges only when deviation is statistically meaningful given the number of items - Distinguish between systematic bias (consistent skew) and random inconsistency - For severity "critical" or "high", require at least two distinct deviation signals - If fewer than [MIN_ITEMS] items are available, note low-confidence in the fleet_summary - Do not flag judges for deviation that falls within expected noise ranges - Include specific item IDs and score comparisons in supporting evidence ## ANALYSIS STEPS 1. Compute fleet-level agreement statistics (pairwise correlations, mean scores per item) 2. For each judge, compute deviation from fleet mean, agreement rate, and score distribution characteristics 3. Identify judges exceeding [DEVIATION_THRESHOLDS] 4. Classify pattern type by analyzing whether deviation is directional, item-specific, or random 5. Generate root-cause hypotheses by examining judge behavior patterns against known failure modes 6. Assign severity based on deviation magnitude, pattern consistency, and impact on downstream decisions 7. Produce fleet health assessment ## KNOWN FAILURE MODES TO CHECK - Rubric misinterpretation (judge applies different standard) - Context truncation (judge received incomplete item context) - Scale misuse (judge compresses range or avoids extremes) - Position bias (judge scores differently based on item order) - Few-shot example contamination (judge overfits to examples) - Model-specific behavior (underlying model produces different scoring distributions) Return only the JSON object. Do not include explanatory text outside the JSON.
To adapt this template for your pipeline, replace the [JUDGE_SCORE_MATRIX] with your actual score data structure—this could be a JSON array of objects, a CSV-formatted string, or a markdown table depending on your model's context window and parsing preferences. Set [DEVIATION_THRESHOLDS] based on your fleet's historical performance; start with z-score > 2.0 and agreement rate < 0.7 as initial values, then calibrate against known-good and known-bad judge behavior from your own evaluation logs. If you maintain per-judge reliability scores from prior calibration runs, pass those in [HISTORICAL_BASELINE] to improve detection accuracy and reduce false positives on judges with naturally wider scoring distributions.
Before deploying this prompt into an automated pipeline, implement a validation layer that checks the output JSON against the expected schema. Pay particular attention to the severity field—a misclassification here can trigger unnecessary human review or, worse, silently ignore a degrading judge. For high-risk evaluation pipelines where judge scores gate model releases or content decisions, route all critical and high severity detections to a human reviewer before taking automated action such as removing a judge from the fleet. Log every outlier detection event with the full prompt input, model response, and validation result so you can audit false-positive rates and tune [DEVIATION_THRESHOLDS] over time.
Prompt Variables
Required inputs for the Outlier Judge Detection prompt. Each placeholder must be populated before the prompt is assembled. Validation notes describe how to verify the input is well-formed before execution.
| Placeholder | Purpose | Example | Validation Notes |
|---|---|---|---|
[JUDGE_FLEET_SCORES] | Matrix of scores from all judges across all evaluated items | {"judge_1": [4, 3, 5, 2], "judge_2": [4, 3, 4, 2], "judge_3": [1, 5, 1, 5]} | Must be a valid JSON object with judge IDs as keys and numeric score arrays as values. All score arrays must have identical length. Null or missing scores must be explicitly marked as null, not omitted. |
[JUDGE_METADATA] | Per-judge context including model version, prompt version, and calibration status | {"judge_1": {"model": "gpt-4o", "prompt_version": "v2.3", "calibrated": true}} | Must be a valid JSON object with judge IDs matching [JUDGE_FLEET_SCORES] keys. Each entry must include model and prompt_version fields. calibrated must be true or false. |
[EVALUATION_RUBRIC] | The scoring rubric each judge was instructed to follow | Scoring scale 1-5 where 1 is factually incorrect and 5 is fully accurate with citations | Must be a non-empty string describing the scale, criteria, and scoring rules. Include the exact text shown to judges, not a summary. Truncation risk if rubric exceeds 2000 tokens. |
[HISTORICAL_BASELINE] | Prior agreement statistics and expected score distributions for each judge | {"judge_1": {"mean_agreement": 0.87, "std_dev": 0.05}, "judge_2": {"mean_agreement": 0.82, "std_dev": 0.08}} | Must be a valid JSON object with judge IDs matching [JUDGE_FLEET_SCORES] keys. mean_agreement must be a float between 0.0 and 1.0. std_dev must be a positive float. Null allowed if judge has no baseline yet. |
[DEVIATION_THRESHOLD] | Configurable threshold for flagging a judge as an outlier | {"z_score": 2.0, "agreement_drop": 0.15, "min_samples": 10} | Must be a valid JSON object. z_score must be a positive float. agreement_drop must be a float between 0.0 and 1.0. min_samples must be a positive integer. If null, use default thresholds of z_score=2.0, agreement_drop=0.15, min_samples=10. |
[OUTPUT_SCHEMA] | Expected structure for the detection output | {"flagged_judges": [], "severity": "", "metrics": {}, "hypotheses": []} | Must be a valid JSON schema or example structure. Include field names, types, and whether each field is required. The prompt will use this to constrain output format. Schema mismatch between this and the prompt's expected output is a common failure mode. |
[CONTEXT_WINDOW_LIMIT] | Maximum token budget available for this prompt execution | 120000 | Must be a positive integer. Used to decide whether to truncate score history, compress rubric, or split the fleet into batches. If null, assume 128000 tokens. Exceeding this limit will cause silent truncation in most model APIs. |
[FALSE_POSITIVE_TOLERANCE] | Acceptable false-positive rate for outlier flagging | 0.05 | Must be a float between 0.0 and 1.0. Controls severity classification and whether borderline judges are flagged. Lower values increase sensitivity but may generate noisy alerts. If null, default to 0.05. |
Implementation Harness Notes
How to wire the Outlier Judge Detection prompt into an evaluation pipeline with validation, retries, and human review.
The Outlier Judge Detection prompt is designed to operate as a scheduled or event-driven job within an evaluation infrastructure, not as a one-off manual query. It expects a structured payload of recent judge scores, historical performance baselines, and fleet-wide agreement statistics. The harness should assemble this context from a centralized evaluation store—such as a database of scored items with judge IDs, timestamps, and optional rationale traces—before invoking the model. Because the prompt produces a severity classification and root-cause hypotheses, the calling application must treat the output as a diagnostic signal, not a final verdict. The recommended model tier is a capable reasoning model (e.g., GPT-4, Claude 3.5 Sonnet) due to the multi-step analytical reasoning required; smaller models may conflate correlation with causation or miss subtle deviation patterns.
The implementation should enforce a strict input schema before the prompt is assembled. Required fields include: a judge identifier, a time-bounded score vector, a fleet-wide agreement matrix for the same period, and the judge's historical mean and variance. The harness should validate that the score vector length meets a minimum sample size (e.g., at least 20 scored items) to avoid spurious outlier flags from small samples. After the model returns its analysis, a post-processing validator must parse the structured output—ideally JSON with fields for outlier_flag, severity, deviation_metrics, and root_cause_hypotheses—and confirm that the reported deviation metrics are internally consistent with the input data. If the output fails schema validation or contains contradictory claims, the harness should retry once with a simplified prompt variant that omits root-cause analysis and focuses only on flagging and metrics. Log every invocation, including the input summary statistics, the raw model response, and the validation result, to an observability system for later audit and threshold calibration.
For high-stakes evaluation pipelines where judge scores gate model releases or regulatory evidence, this prompt's output must route through a human review queue before any automated action is taken. The harness should enrich the model's output with direct links to the specific scored items that contributed most to the deviation signal, enabling a human reviewer to spot-check the judge's behavior. Avoid using this prompt to automatically remove or down-weight judges without human confirmation; false-positive outlier flags can silently erode evaluation diversity. After initial deployment, run this prompt against a historical period with known judge behavior to calibrate the severity thresholds and measure the false-positive rate against ground-truth judge reliability data. This calibration step is essential before enabling any automated alerting or judge quarantine logic.
Expected Output Contract
Fields, types, required flags, and validation rules for the Outlier Judge Detection output. Use this contract to parse, validate, and store detection results before surfacing alerts or triggering remediation workflows.
| Field or Element | Type or Format | Required | Validation Rule |
|---|---|---|---|
flagged_judges | Array of objects | Must be a JSON array. Empty array allowed if no outliers detected. Each element must conform to the judge_entry schema. | |
flagged_judges[].judge_id | String | Non-empty string matching the judge identifier from the input score matrix. Parse check: must exist in input. | |
flagged_judges[].deviation_score | Number (float) | Must be a positive float. Represents z-score or MAD-based deviation. Range check: typically 0.0 to 6.0. Values above 10.0 should trigger a schema warning. | |
flagged_judges[].severity | Enum string | Must be one of: LOW, MEDIUM, HIGH, CRITICAL. Case-sensitive. Enum check required before downstream routing. | |
flagged_judges[].affected_criteria | Array of strings | Non-empty array of criterion names where deviation was detected. Each string must match a criterion from the input rubric. Null not allowed. | |
flagged_judges[].root_cause_hypothesis | String | Non-empty string. Must contain a concise hypothesis. Length check: 10-500 characters. Null or empty string triggers a retry for that entry. | |
flagged_judges[].evidence_excerpts | Array of strings | Optional array of short quoted excerpts from judge rationales supporting the deviation finding. If present, each string must be under 300 characters. Null allowed. | |
detection_metadata | Object | Must contain timestamp, method, and threshold fields. Schema check: all three keys required. timestamp must be ISO 8601. method must be a non-empty string. threshold must be a positive float. |
Common Failure Modes
Outlier judge detection fails silently when thresholds are poorly calibrated, context is truncated, or normal variance is mistaken for anomalous behavior. These cards cover the most frequent failure patterns and how to build guardrails that catch them before they corrupt your evaluation pipeline.
False Positives from Normal Variance
What to watch: Judges flagged as outliers due to legitimate scoring variance on ambiguous items rather than genuine anomalous behavior. Tight thresholds on small sample windows produce alert storms that erode trust in the detection system. Guardrail: Calibrate deviation thresholds against historical judge performance distributions, require minimum sample sizes before flagging, and use rolling windows with confidence intervals rather than point-in-time comparisons.
Context Truncation Masks Divergence
What to watch: Judges appear to agree because both received truncated context that omitted the evidence needed for proper scoring. Agreement on incomplete inputs produces false confidence in judge reliability. Guardrail: Log and compare context lengths across judges before computing agreement metrics. Flag judge pairs where both received truncated inputs and exclude those items from reliability calculations until full context is restored.
Threshold Drift Across Evaluation Windows
What to watch: Detection thresholds calibrated on one time period become misaligned as judge behavior, rubric interpretations, or input distributions shift. Static thresholds produce increasing false-positive or false-negative rates over time. Guardrail: Implement adaptive thresholding that recalibrates against recent judge performance baselines. Schedule periodic threshold reviews and trigger recalibration when fleet-wide agreement metrics shift beyond configured bounds.
Root-Cause Misattribution to Individual Judges
What to watch: Detection flags individual judges when the true cause is rubric ambiguity, contradictory few-shot examples, or systemic prompt drift affecting multiple judges simultaneously. Misattribution wastes debugging effort on judge replacement when the fix is prompt-level. Guardrail: Before escalating individual judge flags, run the divergence diagnostic prompt across the flagged judge's items to check for rubric-section-level ambiguity. Correlate outlier timing with prompt change logs and fleet-wide score distribution shifts.
Silent Failures from Missing Judge Rationales
What to watch: Outlier detection relies on score deviation alone without examining judge rationales. Judges can produce identical scores for entirely wrong reasons, or divergent scores with defensible reasoning that the metric misses. Guardrail: Require judge rationales as a mandatory output field. Run rationale consistency checks alongside score-based outlier detection. Flag judges whose scores match the fleet but whose rationales contradict the evidence or contain hallucinated justifications.
Severity Classification Collapse
What to watch: All flagged judges receive the same severity label regardless of deviation magnitude, persistence, or impact on downstream decisions. Teams either overreact to minor drift or ignore critical failures because the signal is undifferentiated. Guardrail: Implement multi-level severity classification using deviation magnitude, duration, affected item count, and downstream decision impact. Route low-severity flags to automated monitoring dashboards and high-severity flags to on-call escalation with sample divergence items attached.
Evaluation Rubric
Criteria for testing the Outlier Judge Detection prompt before deploying it into a production judge fleet monitoring pipeline. Each row defines a pass standard, a failure signal, and a concrete test method.
| Criterion | Pass Standard | Failure Signal | Test Method |
|---|---|---|---|
Deviation Metric Accuracy | Reported deviation scores (z-score, MAD) match ground-truth calculations within a 0.05 tolerance for a known score matrix. | Deviation scores differ from ground truth by more than 0.05 or a judge with a known extreme score is not flagged. | Run prompt on a synthetic score matrix with pre-calculated deviation metrics. Parse the output and compare numeric fields to expected values using a scripted assertion. |
Severity Classification Precision | Judges with injected extreme scores (z > 3.0) are classified as 'critical' or 'high'. Judges with normal scores (z < 1.5) are classified as 'normal' or 'low'. | A 'critical' judge is misclassified as 'normal', or a 'normal' judge is flagged as 'critical', indicating threshold misapplication. | Use a golden dataset of 20 judge score vectors with known severity labels. Assert that the prompt's classification matches the expected label for each vector. |
Root-Cause Hypothesis Plausibility | For a judge with a known bias (e.g., injected leniency), the generated hypothesis mentions 'leniency', 'scale shift', or a related concept. | The hypothesis is generic ('scoring anomaly'), hallucinates a non-existent cause, or contradicts the provided score evidence. | Inject a systematic +1.5 score shift into one judge's data. Review the output hypothesis for specific, plausible language. Fail if the hypothesis is empty or irrelevant. |
False-Positive Rate Control | On a clean dataset with no injected anomalies, the prompt flags no more than 1 judge out of 20 as 'high' or 'critical'. | The prompt flags 2 or more judges as 'high' or 'critical' in a clean dataset, indicating an unacceptably noisy detector. | Run the prompt 10 times on a clean, 20-judge score matrix. Calculate the mean false-positive rate. Fail if the rate exceeds 5%. |
Output Schema Compliance | The output is valid JSON and contains all required fields: 'flagged_judges', 'deviation_metrics', 'severity', 'root_cause_hypothesis'. | The output is not parseable JSON, is missing a required field, or contains extra fields that violate the expected schema. | Validate the raw output string with a JSON parser. Check for the presence and correct type of each required field using a schema validator. |
Threshold Calibration Adherence | The prompt uses the provided [THRESHOLD_CONFIG] values (e.g., z-score threshold of 2.5) to classify severity, not hardcoded defaults. | The prompt classifies a judge with a z-score of 2.6 as 'normal' when the [THRESHOLD_CONFIG] specifies a critical threshold of 2.5. | Run the prompt twice: once with a threshold of 2.0 and once with 3.0, using the same borderline score data. Assert that the classification changes according to the provided config. |
Historical Baseline Comparison | The report includes a comparison of the current window's deviation metrics against the provided [HISTORICAL_BASELINE] data. | The report only analyzes the current window and makes no reference to the historical baseline, missing a key diagnostic signal. | Provide a [HISTORICAL_BASELINE] with a known shift. Check the output text for a direct comparison statement (e.g., 'Judge A's MAD increased from 0.2 to 0.9'). |
Instruction Grounding in Evidence | Every flagged judge entry includes a specific, quoted score or statistic from the [SCORE_MATRIX] as evidence for the flag. | A judge is flagged with a severity classification but the rationale contains no specific data points from the input, relying only on general statements. | For each object in the 'flagged_judges' array, assert that the 'evidence' field contains a numeric value or direct quote that can be traced back to the provided [SCORE_MATRIX]. |
Enabling Efficiency, Speed & Accuracy
Intelligent Analysis, Decision & Execution
We build AI systems for teams that need search across company data, workflow automation across tools, or AI features inside products and internal software.
Talk to Us
Search across company data
Give teams answers from docs, tickets, runbooks, and product data with sources and permissions.
Useful when people spend too long searching or get different answers from different systems.

Automate internal workflows
Use AI to route work, draft outputs, trigger actions, and keep approvals and logs in place.
Useful when repetitive work moves across multiple tools and teams.

Add AI to products and internal tools
Build assistants, guided actions, or decision support into the software your team or customers already use.
Useful when AI needs to be part of the product, not a separate tool.
Adapt This Prompt
How to adapt
Start with the base outlier detection prompt but relax the statistical rigor. Use simple deviation thresholds (e.g., flag judges whose mean score differs from fleet mean by >1.5 standard deviations). Skip root-cause analysis in the initial pass—just return flagged judge IDs and deviation metrics. Use a flat list of recent scores per judge rather than time-series data.
code[FLEET_SCORES]: [{judge_id, item_id, score, timestamp}] [THRESHOLD]: 1.5 [OUTPUT]: [{judge_id, mean_deviation, flag}]
Watch for
- Small sample sizes producing false positives when a judge has rated few items
- No distinction between systematic bias and legitimate disagreement on ambiguous items
- Missing rationale makes it hard to act on flags without manual investigation

About the author
Prasad Kumkar
CEO & MD, Inference Systems
Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.
His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.
Partnered with leading AI, data, and software stack.
How We Work
Custom AI workflows for your Business
One-fit-all AI don't work for modern businesses. At Inferensys, we aim to understand your business & custom requirements; which we use to define most efficient agentic workflows, the data, and the tools for your business.
01
Review the use case
We understand the task, the users, and where AI can actually help.
Read more02
Pick the right approach
We define what needs search, automation, or product integration.
Read more03
Build the first useful version
We implement the part that proves the value first.
Read more04
Improve from there
We add the checks and visibility needed to keep it useful.
Read moreThe first call is a practical review of your use case and the right next step.
Talk to Us