A multi-judge adversarial audit harness for LLM hallucinations. Seven judge models score the same 125 prompts, then a consensus column collapses the verdicts.
On identical inputs, the judges' pass rates spanned roughly 54.6%, from the strictest judge calling almost nothing accurate to the most permissive passing more than half. Read it as raw output, not a settled result: the "No verdict" counts below are mostly judges getting cut off by untuned token limits, so these pass/fail rates sit on incomplete data.
| Judge | Type | Pass | Fail | No verdict | Pass rate |
|---|---|---|---|---|---|
| GPT-OSS 20B | Local (Ollama) | 59 | 49 | 17 | 54.6% |
| Claude Sonnet 4.6 | API (Anthropic) | 66 | 59 | 0 | 52.8% |
| Gemini 3 Flash | API (Google) | 43 | 81 | 1 | 34.7% |
| GPT-4o | API (OpenAI) | 34 | 83 | 8 | 29.1% |
| Llama 3.1 8B | Local (Ollama) | 11 | 91 | 23 | 10.8% |
| Ministral 3 8B | Local (Ollama) | 1 | 124 | 0 | 0.8% |
| GPT-4o-mini | API (OpenAI) | 0 | 111 | 14 | 0.0% |
| Outcome | Rows | Share |
|---|---|---|
| Consensus FAIL | 96 | 76.8% |
| Consensus PASS | 16 | 12.8% |
| Split (no majority) | 13 | 10.4% |
Each judge sees the same adversarial scoring rubric and returns PASS or FAIL with a short justification. The rubric uses a simulated financial incentive structure (bonus for catching subtle errors, penalty for false-pass) and explicitly scopes judges to grade only the model output, not the prompt. Consensus is computed by simple majority across the judges that returned a verdict for a given row.