Write Judge Prompt

Write LLM-as-Judge Prompt

Design a binary Pass/Fail LLM-as-Judge evaluator for one specific failure mode. Each judge checks exactly one thing.

Respond in the user's language. The judge prompt itself is normally written in English, or in the language of the traces it will evaluate.

Prerequisites

• Error analysis is complete. The failure mode is identified.
• The user has human-labeled traces for this failure mode (at least 20 Pass and 20 Fail examples).
• A code-based evaluator cannot check this failure mode. Exhaust code-based options before reaching for a judge — many failure modes that seem subjective reduce to keyword checks, regex, or API calls when you understand the domain. Example: detecting whether an AI interviewing coach suggests "general" questions (asking about typical behavior instead of a specific past event) seems to require semantic understanding, but in practice a keyword check for words like "usually," "typical," and "normally" could work quite well.

Cold start: no labeled traces yet

If no human-labeled examples are supplied, stop building a finished judge and help the user collect and label 10–20 real traces first. This starts the dataset; it does not meet the full calibration target or establish accuracy. Never invent traces or fill human labels yourself.

For a pre-launch prototype, existing synthetic traces supplied by the user may be used only after a human labels them and their synthetic provenance is recorded. This is the explicit provisional exception described below, not permission to generate examples and call them human evidence. With no examples, provide the criterion and a labeling plan, leaving the judge unfinished.

The Four Components

Every judge prompt requires exactly four components:

1. Task and Evaluation Criterion

State what the judge evaluates. One failure mode per judge.

You are an evaluator assessing whether a real estate assistant's email
uses the appropriate tone for the client's persona.

Not: "Evaluate whether the email is good" or "Rate the email quality from 1-5."

2. Pass/Fail Definitions

Outcomes are strictly binary: Pass or Fail. No Likert scales, no letter grades, no partial credit. Define exactly what constitutes Pass and Fail. These definitions come from your error analysis failure mode descriptions.

## Definitions

PASS: The email matches the expected communication style for the client persona:
- Luxury Buyers: formal language, emphasis on exclusive features, premium
  market positioning, no casual slang
- First-Time Homebuyers: warm and encouraging tone, educational explanations,
  avoids jargon, patient and supportive
- Investors: data-driven language, ROI-focused, market analytics, concise
  and professional

FAIL: The email uses a tone mismatched to the client persona. Examples:
- Using casual slang ("hey, check out this pad!") for a luxury buyer
- Using heavy financial jargon for a first-time homebuyer
- Using overly emotional language for an investor

3. Few-Shot Examples

Include labeled Pass and Fail examples from the user's human-labeled data. The real-estate examples below illustrate the format only; they are not the user's traces and must not be copied as evidence into their finished judge.

## Examples

### Example 1: PASS
Client Persona: Luxury Buyer
Email: "Dear Mr. Harrington, I am pleased to present an exclusive listing
at 1200 Pacific Heights Drive. This distinguished property features..."
Critique: The email opens with a formal salutation and uses language
consistent with luxury positioning — "exclusive listing," "distinguished
property." No casual slang or informal phrasing. The tone matches the
luxury buyer persona throughout.
Result: Pass

### Example 2: FAIL
Client Persona: Luxury Buyer
Email: "Hey! Just found this awesome place you might like. It's got a
pool and stuff, super cool neighborhood..."
Critique: The greeting "Hey!" is informal. Phrases like "awesome place,"
"got a pool and stuff," and "super cool" are casual slang inappropriate
for a luxury buyer. The email reads like a text message, not a
professional communication for a high-end client.
Result: Fail

### Example 3: PASS (borderline)
Client Persona: First-Time Homebuyer
Email: "Hi Sarah, I found a property that might be a great fit for your
first home. The neighborhood has good schools nearby, and the monthly
payment would be similar to what you're currently paying in rent..."
Critique: The greeting is warm but not overly casual. The email explains
the property in relatable terms — comparing mortgage to rent, mentioning
schools — which is educational without being condescending. It avoids
jargon like "amortization" or "LTV ratio." While not deeply technical,
this matches the supportive tone expected for a first-time buyer.
Result: Pass

Rules for selecting examples:

• Include at least one clear Pass, one clear Fail, and one borderline case. Borderline examples are the most valuable — they teach nuance.
• Draw examples from the training split (10-20% of labeled data set aside for this purpose).
• Any example used in the judge prompt must be excluded from dev and test sets. Using dev/test examples is data leakage.
• 2-4 examples is typical. Performance plateaus after 4-8.

Rules for synthetic examples:

• Default to real, human-labeled traces. Do not invent examples or labels. The sole pre-launch exception is supplied synthetic traces with human labels.
• For the provisional exception, record source/generator/run identifiers and keep prompt examples separate from dev data, including generation provenance. Synthetic data cannot establish a final production test result. The companion validator reserves the held-out test set for real human-labeled traces.
• Treat a synthetic-fed judge as provisional. Replace the examples with real traces as soon as they exist, then re-validate.

4. Structured Output Format

Enforce structured output using your LLM provider's schema enforcement (e.g., response_format / structured outputs in the OpenAI API, tool definitions in the Anthropic API) or a library like Instructor or Outlines. If the provider doesn't support schema enforcement, specify the JSON schema in the prompt.

The output must include a critique before the verdict. Placing the critique first forces the judge to articulate its assessment before committing to a decision.

{
  "critique": "string — detailed assessment of the output against the criterion",
  "result": "Pass or Fail"
}

Critiques must be detailed, not terse. A good critique explains what specifically was correct or incorrect and references concrete evidence from the output. The critiques in your few-shot examples set the bar for the level of detail the judge will produce.

Choosing What to Pass to the Judge

Feed only what the judge needs for an accurate decision:

For long documents, feed only the relevant snippet, not the entire document.

Model Selection

Start with the most capable model available. The same model used for the main task works as judge (the judge performs a different, narrower task). Pin an exact dated model version — calibration is only valid for the model it was measured on. Optimize for cost later, once alignment is confirmed.

Offline Evaluator vs. Online Guardrail

This skill designs offline evaluators: judges that run over batches of traces after the fact, for error analysis, regression testing, and success-rate measurement. Deploying the same judge as an online guardrail (scoring or blocking responses at runtime) is a different engineering problem:

• Latency and cost are now per-request and user-facing. A judge model that is fine for nightly batch runs may be too slow or expensive inline; consider a smaller model distilled or re-validated for the guardrail role.
• Fail-open vs. fail-closed must be an explicit decision: if the judge call errors or times out, does the response go through (fail-open — availability over safety) or get blocked (fail-closed — safety over availability)? Choose per failure mode's blast radius, and log every fallback.
• Threshold linkage: a guardrail's block threshold should be set from measured TPR/TNR (see validate-evaluator), not intuition. A judge with a mediocre TNR deployed fail-closed will block good responses at a predictable, calculable rate — calculate it before shipping.
• The prompt-design method in this skill transfers unchanged; only the deployment constraints differ.

Where the Judge Prompt Lives

Save the finished judge prompt in the user's project, e.g. evals/judges/<failure-mode>.md — never inside this skill's own directory (skill packages must stay read-only and shareable). If no file can be written in this environment, output the complete judge prompt as a single copyable block instead.

Anti-Patterns

• Vague criteria like "is this helpful?" Target a specific, observable failure mode from error analysis.
• Holistic judge for the entire trace. A single judge covering multiple dimensions produces unactionable verdicts.
• No few-shot examples. Without examples, the model won't know what counts as a failure in your application.
• Fabricated few-shot examples or labels. Follow the cold-start rule and its explicit supplied-synthetic exception. A provisional prototype is not calibrated.
• Dev/test examples used as few-shot. This is data leakage. Use only the training split.
• Likert scales (1-5, letter grades, etc.). Binary pass/fail only. Likert scales produce scores that sound precise but can't be calibrated: annotators disagree on the difference between a 3 and a 4, and the judge inherits that noise. Binary forces you to define a clear decision boundary upfront, which makes inter-annotator agreement measurable and the judge's errors actionable. If you need to capture severity, use multiple binary judges (e.g., "factually wrong" and "dangerously wrong") rather than one ordinal scale.
• Skipping validation. Measure alignment with human labels before trusting the judge — its companion skill validate-evaluator, if installed, covers the full procedure (splits, TPR/TNR, bias correction).
• Judges for specification failures without fixing the prompt first. If the prompt never asked for the behavior, add the instruction before building an evaluator. For critical requirements, a judge can still serve as a regression guard.