PERSONAJUDGE asks whether an LLM judge can reproduce one particular evaluator's criteria from that evaluator's prior decisions. The study uses two tasks derived from Anthropic's Helpful and Harmless dataset: 700 unique conversations for helpfulness and 700 for harmlessness, each labeled by three people. Thirty-two professional in-house annotators participate; 21 work on each task and 10 overlap. Each annotator completes 100 three-way comparisons, Prefer A, Neutral, or Prefer B, yielding 4,200 human judgments. In a second stage, annotators replay their interaction and retrospectively verbalize how they understood the conversation, assessed the responses, and selected a label. The system stores the label, interface telemetry, clicks, scrolling, selection, waiting, and typing, and this post-hoc explanation. This is neither a population preference sample nor a whole-person simulation: the empirical target is a professional annotator's labels on two closely related evaluation tasks.
For each evaluator and task, 40 items form a demonstration pool and 60 form the validation set. PERSONAJUDGE decomposes prediction into two rounds: whether the evaluator would express a preference or neutrality, followed, when needed, by preference direction. It crosses four models, Claude 3.5 Sonnet V2, Claude 3.7 Sonnet V1, DeepSeek-R1, and Amazon Nova Premier, with four demonstration contents, judgment only; judgment plus interface telemetry; judgment plus retrospective reasoning; or all three, and 1, 2, 4, or 8 examples. This creates 64 conditions, 80,640 simulations per task, and 161,280 total. Validation items never enter the demonstration pool, but each condition uses only one random demonstration draw, so sensitivity to example composition is not estimated. Immutable model snapshots, inference parameters, model outputs, and an executable environment are also absent.
Averaged across all 64 conditions, the unpersonalized Base Judge scores 0.452 accuracy on harmlessness and 0.496 on helpfulness; PERSONAJUDGE reaches 0.480 and 0.510. On the matched subset, target-evaluator demonstrations beat demonstrations from other evaluators by 0.028 on harmlessness, 0.477 versus 0.450, p=0.019, and 0.044 on helpfulness, 0.515 versus 0.471, p<0.001. Retrospective reasoning is the useful auxiliary signal: judgment plus reasoning averages 0.505 and 0.537, whereas judgment plus telemetry falls to 0.457 and 0.492, below labels alone. The highlighted Claude 3.5 eight-shot judgment-plus-reasoning setting reaches 0.581 versus a 0.482 base on harmlessness and 0.558 versus 0.500 on helpfulness. Its planned contrasts give p=0.046 and p=0.008, but the appendix reports that after FDR correction of per-configuration comparisons only 3 of 64 gains survive on harmlessness and none on helpfulness. The headline “up to 9.9 points” is a selected best case, not the average effect.
The individualized signal is genuine but modest. Against a predictor that always chooses each evaluator's most frequent label, PERSONAJUDGE's mean does not improve significantly: -0.019 with p=0.95 on harmlessness and +0.042 with p=0.14 on helpfulness. On items where an evaluator departs from the group majority, 20.2% and 23.3% of cases, it recovers the exact personal label at 0.367 and 0.360. When the model also departs from consensus, it selects the evaluator's direction at 0.617 and 0.632, above the binary 0.5 chance level. Neutral remains hardest, with recall 0.356 and 0.242. Per-evaluator accuracy ranges from 0.375 to 0.565 and from 0.386 to 0.655. Across the ten overlapping annotators, simulatability itself does not transfer between tasks, r=0.181, p=0.616, while neutral-use rate does, r=0.728, p<0.05, an externally unreplicated inference based on n=10.
The design has meaningful strengths: disjoint demonstration and validation sets, an explicit Neutral class, response-order controls, a non-target-evaluator control, and reporting by evaluator, class, and configuration. However, explanations are collected after replay and can rationalize rather than reveal the original decision process. No delayed human test-retest is measured, so the ceiling for reproducing a person's label is unknown; other domains, languages, modalities, and populations remain untested. The paper states that consent was obtained and audio stored confidentially, but provides no ethics-review identifier, compensation, country, demographics, or employment conditions. The arXiv source contains the prompt, tables, and figures but not the 4,200 labels, telemetry, transcripts, 161,280 predictions, scripts, seeds, or cited workbook. The defensible contribution is therefore a large experiment showing an incremental, task-dependent signal in evaluators' historical examples. It does not establish a stable personality, a reliable copy of a person, out-of-domain generalization, or a substitute for human evaluators.