text: As opposed to our calibrated routers, NotDiamond aggressively routes to the stronger model even for unmodified queries 
  in most settings. We tried several strong/weak model pairs including GPT-4o/Mistral-7B-Instruct-v0.2, GPT-4o/GPT-4o- 
  mini, and Claude-3-Opus/Claude-3-Sonnet, and observed a similar 20%–80% split between strong and weak. 
  
  When we changed the strong model to OpenAI’s o1-mini and kept Mixtral-8x7b as the weak model, 54% of the original 
  queries were routed to the strong model, 46% to the weak model. In this setting, confounder gadgets yield 13–16% 
  upgrade rates and, on average, 3–6% downgrade rates. We conclude that while the attack is still effective, NotDiamond is 
  more robust than Unify. 
  
  OpenRouter. This framework offers a unified interface for LLMs, and additionally offers a system that routes users’ 
  queries between three specific models: Llama-3-70b, Claude-3.5-Sonnet, and GPT-4o. Queries are routed “depending on 
  their size, subject, and complexity,” as described in the documentation.2 
  
  With OpenRouter, 96% of the original queries are routed to Llama, 4% to GPT, and none to Claude. Based on the pricing 
  and number of input-output tokens, the queries’ total cost is $0.03 for processing all evaluated queries. After adding 