Counterfactual Auditing of Bias in Open-Source Large Language Models for Clinical Triage

cs.AI cs.CL cs.LG Manar Aljohani, Brandon Ho, Kenneth McKinley, Dennis Ren, Xuan Wang · Oct 1, 2026
Local to this browser
What it does
Emergency Department triage assigns acuity scores that can be skewed by non-clinical patient descriptors. This paper asks whether open-source LLMs change their pediatric Emergency Severity Index predictions when only demographic,...
Why it matters
5-7B is the most counterfactually stable, challenging the assumption that larger or medically pretrained models are necessarily fairer. The study matters because locally deployable open-source LLMs are increasingly considered for...
Main concern
The paper offers a carefully designed, clinically motivated counterfactual audit. Its single-variable injection protocol, direction-aware metrics, and positive-control clinical checks give the fairness assessment credibility.
Community signal
0
0 up · 0 down
Sign in to vote with arrows
AI Review AI reviewed
Plain-language introduction

Emergency Department triage assigns acuity scores that can be skewed by non-clinical patient descriptors. This paper asks whether open-source LLMs change their pediatric Emergency Severity Index predictions when only demographic, socioeconomic, or contextual variables are injected into otherwise identical clinical vignettes. The authors audit ten models and find that a small fine-tuned Qwen2.5-7B is the most counterfactually stable, challenging the assumption that larger or medically pretrained models are necessarily fairer. The study matters because locally deployable open-source LLMs are increasingly considered for privacy-preserving clinical decision support, yet their fairness profiles across model families were poorly understood.

Critical review
Verdict
Bottom line

The paper offers a carefully designed, clinically motivated counterfactual audit. Its single-variable injection protocol, direction-aware metrics, and positive-control clinical checks give the fairness assessment credibility. However, comparative claims that the fine-tuned model is 'lowest' in sensitivity are presented as point estimates without confidence intervals or statistical testing, and the reliance on nurse-assigned ESI labels as both training targets and evaluation anchors leaves room for institutional bias to propagate.

“Across models, counterfactual sensitivity varied substantially and did not consistently decrease with larger model size or medical-domain pretraining.”
paper · Abstract
“The fine-tuned Qwen2.5-7B model showed the lowest sensitivity in the clearest non-clinical bias domains, while several base, larger, and medical-domain open-source models were more sensitive.”
paper · Section V
What holds up

The experimental design effectively isolates non-clinical influence by holding the clinical vignette fixed and injecting exactly one templated phrase at a time. The repeated-run stability analysis and deterministic decoding ($do\_sample=False$) ensure that observed shifts are attributable to the injected context rather than sampling variation. The positive-control experiment is compelling: Fine-tuned Qwen2.5-7B appropriately uptriaged nearly all cases after injections indicating active seizure or cyanosis requiring bag-mask ventilation (100.00% shift, all toward higher acuity), confirming that reduced counterfactual sensitivity is not mere model inertia. Additionally, the shared biased-outcome correlation analysis shows that Fine-tuned Qwen2.5-7B had a smaller average absolute off-diagonal correlation score than Qwen2.5-7B (0.0366 vs. 0.0849), indicating fewer clustered failure patterns across injected variables.

“Fine-tuned Qwen2.5-7B appropriately uptriaged nearly all cases after injections indicating active seizure or cyanosis requiring bag-mask ventilation (100.00% shift, all toward higher acuity).”
paper · Section IV-H
“Fine-tuned Qwen2.5-7B had a smaller average absolute off-diagonal correlation score than Qwen2.5-7B (0.0366 vs. 0.0849), indicating fewer clustered failure patterns across injected variables.”
paper · Section IV-G
Main concerns

A primary weakness is the lack of statistical rigor when ranking models by shift rates. The authors report aggregate percentages—e.g., Fine-tuned Qwen2.5-7B at 5.27% any-shift versus Qwen2.5-7B at 16.02%—but provide no confidence intervals or hypothesis tests, so it is unclear whether the gaps exceed sampling variability.

Second, the evaluation relies on nurse-assigned ESI labels that are themselves imperfect and potentially biased; as the authors note, 'nurse-assigned ESI labels are operational reference standards rather than perfect ground truth, and the fine-tuned model may inherit label bias.' Third, the institutional evaluation set was filtered to 352 encounters with substantive documentation and excludes behavioral-health-dominant presentations and most ESI-1 cases, limiting generalizability to sparse, ambiguous, or highest-acuity notes. Finally, the single-variable design cannot capture intersectional effects, which the authors acknowledge but which leaves a significant real-world bias gap unaddressed.

“the institutional evaluation set was filtered for substantive documentation and may not represent sparse or ambiguous real-world triage notes.”
paper · Section V
“nurse-assigned ESI labels are operational reference standards rather than perfect ground truth, and the fine-tuned model may inherit label bias.”
paper · Section V
Evidence and comparison

The empirical evidence supports the descriptive ranking of models: Fine-tuned Qwen2.5-7B had the lowest any-shift rate among all evaluated models at 5.27% and the lowest mean absolute shift at 0.0534, while MedGemma-27B-IT shifted in 41.18% of cases with mean absolute shift of 0.84. The authors fairly situate their work against recent triage-bias literature, correctly noting that Lee et al. examined intersectional sex-by-race preferences in general triage models, whereas this study targets open-source pediatric ESI with a broader set of injected variables and explicit undertriage/overtriage directionality. That said, the absence of effect-size bounds or uncertainty quantification weakens the strength of comparative claims, and the external validation on 245 handbook vignettes, while useful, does not substitute for multi-site real-world deployment testing.

“Fine-tuned Qwen2.5-7B had the lowest any-shift rate among all evaluated models at 5.27% and the lowest mean absolute shift at 0.0534.”
paper · Table V
“Our work differs by focusing on locally deployable open-source LLMs for pediatric ESI prediction, testing a broader set of demographic, socioeconomic, access, history, behavioral, social, and system-context variables, and evaluating directionality as undertriage versus overtriage rather than only overall preference shifts.”
paper · Section II-C
“We propose a novel counterfactual analysis framework to systematically investigate potential biases in LLM predictions, with particular attention to intersections of sex and race.”
Reproducibility

The methodological description is reasonably detailed: the authors specify the prompt template with explicit invalid-determinant instructions, deterministic decoding, and a QLoRA adaptation with prompt masking and label-scoring inference over ESI-1 to ESI-5. However, critical training hyperparameters—rank, learning rate, batch size, number of epochs, and exact optimizer settings—are omitted, and no code, model weights, or evaluation vignettes are released. Reproducing the reported shift rates therefore requires substantial guesswork, especially for the fine-tuned model. Providing the injection pipeline scripts and the filtered 352-case evaluation set would materially improve reproducibility.

“QLoRA configuration used low-rank adapters on attention and feed-forward projection modules.”
paper · Section III-C
“Training used a fixed random seed, prompt masking so that loss was applied only to the assistant ESI label, and label-scoring inference over the five candidate labels ESI-1 through ESI-5.”
paper · Section III-C
Abstract

Emergency department (ED) triage is a high-stakes prioritization task in which demographic, socioeconomic, and system-context information may improperly influence acuity assignment. Although open-source large language models (LLMs) are increasingly considered for local and privacy-preserving clinical decision support, it remains unclear how counterfactual bias varies across model families, sizes, medical-domain models, and domain-adapted models. We present a comparative counterfactual audit of ten open-source LLMs for pediatric Emergency Severity Index (ESI) prediction. Starting from real and handbook-style clinical vignettes, we construct paired counterfactual variants that change only one injected demographic, socioeconomic, healthcare-access, behavioral, social, or system-context variable while holding the clinical presentation fixed. Models include Qwen2.5-7B, Qwen2.5-14B-Instruct, a QLoRA fine-tuned Qwen2.5-7B, MedGemma variants, MedLLaMA2-7B, GPT-OSS-20B, and GPT-OSS-120B. We measure any counterfactual shift, undertriage, overtriage, shifts greater than one ESI level, mean shift, and mean absolute shift. Counterfactual sensitivity varied substantially and did not consistently decrease with larger model size or medical-domain pretraining. The fine-tuned Qwen2.5-7B showed the lowest overall sensitivity, with a 5.27% any-shift rate and mean absolute shift of 0.0534, versus 16.02% and 0.1706 for the base model. Several larger or medical-domain models showed more significant shifts. Stratified and correlation analyses further revealed clinically important directionality and shared failure patterns hidden by aggregate rates. These findings support counterfactual auditing as a lightweight, clinically interpretable framework for comparing fairness risks in open-source LLMs before clinical deployment.

Challenge the Review

Pick a starting point or write your own. Challenges run in the background, so you can keep reading while the AI investigates.

No challenges yet. Disagree with the review? Ask the AI to revisit a specific claim.