Date
Publisher
arXiv
Role-playing Large language models (LLMs) are increasingly deployed in
high-stakes domains such as healthcare, education, and governance, where
failures can directly impact user trust and well-being. A cost effective
paradigm for LLM role-playing is few-shot learning, but existing approaches
often cause models to break character in unexpected and potentially harmful
ways, especially when interacting with hostile users. Inspired by
Retrieval-Augmented Generation (RAG), we reformulate LLM role-playing into a
text retrieval problem and propose a new prompting framework called
RAGs-to-Riches, which leverages curated reference demonstrations to condition
LLM responses. We evaluate our framework with LLM-as-a-judge preference voting
and introduce two novel token-level ROUGE metrics: Intersection over Output
(IOO) to quantity how much an LLM improvises and Intersection over References
(IOR) to measure few-shot demonstrations utilization rate during the evaluation
tasks. When simulating interactions with a hostile user, our prompting strategy
incorporates in its responses during inference an average of 35% more tokens
from the reference demonstrations. As a result, across 453 role-playing
interactions, our models are consistently judged as being more authentic, and
remain in-character more often than zero-shot and in-context Learning (ICL)
methods. Our method presents a scalable strategy for building robust,
human-aligned LLM role-playing frameworks.
Study at a glance
- Question: How can artificial intelligence models stay in character during role-play, even when interacting with difficult users?
- Setting and data: 453 simulated role-playing interactions involving a hostile user.
- Method: Automated evaluation using AI judges (LLM-as-a-judge preference voting) and newly developed text-overlap metrics.
Why it matters
Role-playing models are increasingly used in high-stakes domains like education, where failures directly impact user trust and well-being. However, existing approaches often cause models to break character in unexpected, potentially harmful ways, especially when interacting with hostile users.
Key findings
- Across 453 role-playing interactions, the new prompting strategy remained in character more often and was consistently rated as more authentic than conventional techniques.
- When interacting with simulated hostile users, the new approach used an average of 35% more content from reference examples in its responses.
- Conventional role-playing AI models often break character in unexpected and potentially harmful ways, especially when challenged by hostile users.
Summary drafted with AI from the paper’s abstract and may contain errors. See the full paper for details.
Study design
