2026-08-19
A JHU framework holds knowledge constant and varies task type to probe context-memory conflict: extraction is nearly unharmed, knowledge-intensive tasks degrade across the board, and GPT-5.2 drops 55 points on parametric tasks with plausible distractors.
Context–memory conflict is what happens when the prompt contradicts what the model has stored in its weights. Almost all prior work measured it in one setting: contextual question answering, where the model is explicitly told to answer from the given passage. The literature split into two camps, one finding that models stubbornly trust their parametric knowledge, another finding they follow convincing external evidence.
This paper's diagnosis is that the setting itself caused the split. Contextual QA sits at one end of a spectrum; real workloads range from verbatim extraction to literature review, and they demand very different mixes of context and memory. Testing every conflict in a single task shape was never going to produce a coherent story.
The framework holds knowledge constant and varies only the task. Four stages:
All tasks are multiple choice with four options, explanation first, which keeps judging free of fuzzy text matching.
| Setting | Metric | Value | Reference |
| GPT-5.2, Parametric task | Accuracy | NC 89.2 / HPC 33.7 / LPC 71.8 | 55.5-point drop under HPC, partial recovery under LPC |
| GPT-5.2, Contextual task | Accuracy | 31-point NC–LPC gap | Largest absolute gap of the six models |
| RAG task, six-model average | F1 | HPC 51.7 vs LPC 60.2 | LPC wins by 8.5, no exceptions |
| Mistral-7B, Parametric + explained HPC | Accuracy | 8.78 (strong instruction) | NC in the same setting: 46.98 |
| GPT-4o judge vs humans | Cohen's κ | 0.79 | Human–human agreement 0.90 |
Four takeaways:
For RAG builders, the damage from a retrieved document that contradicts the model's stale knowledge depends on what your task actually needs: trust the document, trust the model, or surface both. Strong instructions do not suppress plausible distractors. Reiterating key evidence is a zero-cost mitigation that needs no inference changes, though it structurally favors longer context sides.
For anyone running evaluations, wherever an LLM judges outputs that may defy its own beliefs (safety tests, adversarial responses, factuality checks), the judge's parametric knowledge is a systematic bias source. Stronger models do not fix this; GPT-5.2 took the hardest fall among all models tested.
Methodologically, the framework (code released) is reusable: fix the knowledge, vary the task, and you get a model-specific diagnostic set.
The authors list three: diagnostic data is partly LLM-edited and may carry distributional artifacts; shared linguistic priors between editor and subject model can inflate scores; coverage is five open-weight models plus GPT-5.2, with other proprietary frontier models left to future work.
A few more caveats from reading it closely. The open-weight side stops at 14B, so the reiteration-versus-rationale finding is unverified on larger open models. Human verification is 30 instances per model, and the judge-bias figure rests on 50 annotated examples, a small base for κ = 0.79. Plausibility levels are themselves LLM-judged, which is subjective. There is no per-domain breakdown, so extrapolating from commonsense domains like toothache advice or Mars geology to specialized professional domains deserves care.