The Readability Tax

Every prompt an LLM sees, and every message one agent sends another mid-loop, is still written in the same English a human would read. That means full words, grammar, punctuation a model never needed. A June 2026 paper (arXiv:2606.19857) tested what happens when that constraint is dropped. BabelTele, a class of compact, non-human-readable textual representations the authors probe rather than standardize, held 99.5% semantic fidelity while text volume dropped to 27.9% of the original, a 72-point cut, evaluated across cross-model transfer, agent memory, and multi-agent communication. TOON strips punctuation and LLMLingua trims low-information tokens, but both still hand the model readable text. This is a different bet: that human readability, natural-language typicality, and machine-side recoverability are three separate properties, and a message no human ever reads doesn't need to keep paying for the first two. Here's what the paper found, where it stops being safe, and where the idea is actually usable today.

Published 2026-07-31 by Dor Amir on the Nadir blog.

Filed under Context & Compression.

Abstract.

Every optimization this blog has covered so far, routing, LLMLingua's extractive compression, TOON's leaner serialization, shares one constraint nobody states out loud: whatever gets sent to the model still has to be readable English, or at least readable JSON. A June 2026 paper asks why. "Large Language Models Do Not Always Need Readable Language" (arXiv:2606.19857) tests whether an LLM can generate and interpret text that a human could not comfortably parse, as long as another LLM can still recover the meaning. The authors call this class of representation BabelTele, not a protocol, a probe. The headline number: 99.5% semantic fidelity retained while text volume dropped to 27.9% of the original, a 72-point reduction, evaluated across cross-model transfer, agent memory, and multi-agent communication. This post walks through what the paper actually measured, where it sits relative to compression techniques already in production, and where the idea is safe to test without betting anything a human needs to read on it.

Research question.

If human readability is dropped as a design constraint, how much can a textual representation shrink while an LLM reader still recovers its meaning, and does that hold up when the model reading the message is not the same model that wrote it?

English was never optimized for a model reading it.

Every prompt-engineering convention in production today, full sentences, consistent grammar, JSON with quoted keys, exists because a human either wrote it, will read it, or was the original audience the format was designed for. That convention got inherited wholesale into machine-to-machine text. A tool result gets serialized as pretty-printed JSON nobody will look at. An agent's scratchpad reasoning gets written in complete English sentences, even though the next reader is the same agent's next turn, a process with no eyes. TOON already found one seam in this constraint: dropping repeated punctuation in structured data cuts tokens 42.6% in its own benchmark without touching readability at all, the format is still plainly legible, just less redundant. The BabelTele paper asks a more direct question: what if the constraint itself, not just its redundancy, is negotiable for text no human will ever read.

What the paper actually tested.

The authors do not propose BabelTele as a fixed encoding scheme with a spec sheet. They frame it as an empirical probe into instruction-tuned models' capacity to generate and interpret representations that depart from natural-language typicality, then measure how far that departure can go before meaning breaks. Four evaluation angles: readability diagnostics and human questionnaires, to confirm the output really is less human-legible and not just terser English; model likelihood measures; downstream task evaluations, to check the reader model still performs correctly on what the compact text described; and three specific stress tests, cross-model transfer (does a representation one model wrote survive being read by a different model), agent memory (does compressed context still serve its purpose across turns), and multi-agent communication (does the saving hold when the message is the entire channel between two agents, not a compressed prompt to a human-facing model).

Bar chart comparing text length and semantic fidelity between readable natural-language text and BabelTele's compact non-readable form: length drops to 27.9% of the original while fidelity holds at 99.5%.
Bar chart comparing text length and semantic fidelity between readable natural-language text and BabelTele's compact non-readable form: length drops to 27.9% of the original while fidelity holds at 99.5%.
MetricReadable text (baseline)BabelTele
Text length100%27.9%
Semantic fidelity100%99.5%

Source: arXiv:2606.19857, "Large Language Models Do Not Always Need Readable Language," submitted June 2026

Read literally: the same information that took 1,000 tokens in ordinary English took roughly 279 in the compact form, and a downstream reader model recovered 99.5% of the meaning either way. The paper's own qualifier matters as much as the number: results "suggest that BabelTele can reduce context overhead while generally maintaining reliable downstream performance, although its effectiveness depends on the compressor-reader pair and task setting." That is not a universal ratio, it is a ceiling the authors observed under specific conditions, with an explicit warning that the pairing of which model compresses and which model reads changes the outcome.

Three layers of token reduction, and where this one sits.

This blog has now covered three distinct answers to "the model doesn't need every token you're sending it," and they are not the same lever wearing different clothes.

LLMLingua / Selective ContextTOONBabelTele
What it operates onNatural-language proseStructured data (arrays, objects)Any text, structure or prose
Stays human-readableYes, shorter EnglishYes, still legible, less punctuationNo, that is the point
MechanismDrops low-information tokens, scored by a small modelDeclares a shared field header once instead of per rowDeparts from natural-language typicality while staying model-recoverable
Reported reduction3 to 5x on benchmarks, 40 to 62% in Microsoft's production workloads42.6% fewer tokens than JSON in its own benchmarkText volume cut to 27.9% of original at 99.5% fidelity in one evaluation
Where it belongs todayRAG context, retrieved documents, conversation historyTool results, API responses, any uniform arrayAgent-to-agent messages, agent memory, nothing a human reads
MaturityShipped, MIT-licensed, production use at MicrosoftShipped format, five language portsA June 2026 research probe, not released software

Source: Microsoft Research, "LLMLingua-2," 2024; TOON benchmark cited in The Punctuation Tax; arXiv:2606.19857

The three do not compete for the same tokens. LLMLingua shortens prose a human might still glance at during debugging. TOON changes how structured data is punctuated without touching legibility. BabelTele is the only one of the three that treats readability itself as a cost, applicable only where nobody is paying for that cost to begin with.

The catch: readability is also your audit trail.

The paper is honest about the boundary, and it is worth restating plainly rather than glossing over. "Human readability, natural-language typicality, and model-side semantic recoverability can be partially decoupled" is the finding, and "partially" is doing real work in that sentence. Decoupling readability from recoverability means exactly what it sounds like: a message optimized this way is, by design, harder for a person to check. That is a fine trade for a scratchpad no one audits. It is a bad trade for anything a support engineer needs to read during an incident, anything compliance needs to inspect, or any tool-call payload a human reviews before it executes an action with real consequences. The paper's own qualifier, that fidelity depends on the specific compressor-reader pair and task, means a representation that held up in the published evaluation is not guaranteed to hold up on your model pair and your task without measuring it yourself first.

Where this is actually safe to try today.

Not as a library, there isn't one. As an experiment, on the narrow slice of text that already has no human reader: an agent's internal scratchpad between reasoning steps, memory carried across turns of the same agent, or a status message one agent sends another mid-loop that a user interface never renders. The shape of a small, honest test, not a reproduction of the paper's method, looks like this:

def round_trip_fidelity(writer_model, reader_model, original_text, compact_text):
    """Ask a reader model to reconstruct meaning from a compact message,
    then score it against the original with a separate judge call."""
    reconstruction = reader_model.complete(
        f"Reconstruct the full meaning of this message: {compact_text}"
    )
    judge_score = judge_model.complete(
        f"On a 0-100 scale, how much of this original meaning survived?\n"
        f"Original: {original_text}\nReconstruction: {reconstruction}"
    )
    return float(judge_score)

# Run on your own agent-to-agent messages, not the paper's dataset.
# A single compressor-reader pair holding 95%+ fidelity on your task
# is a result specific to that pair. Re-measure if either model changes.

That is the whole discipline the paper points at: measure fidelity for your specific writer and reader models before trusting a compact representation with anything that matters, and never let the technique anywhere near text a human is the intended reader of. Nadir's context optimization already strips redundant tool schemas and repeated boilerplate before a request goes out, on the same premise this paper pushes one layer further: not every token in a message is there because the reader needs it, some are there because a human designed the format for a human. On the machine-only side of that line, where multi-agent workflows already multiply token spend well beyond a single chat call, that is exactly where a denser representation has the most room to matter.

Conclusion.

TOON found that structured data doesn't need to repeat its own punctuation. LLMLingua found that prose carries tokens a downstream task doesn't need. This paper asks the more uncomfortable version of the same question: does the text even need to be readable at all, for a reader that was never going to be a person. The answer, on one evaluation, was that 27.9% of the original length carried 99.5% of the meaning, measured across cross-model transfer, agent memory, and multi-agent communication, with an explicit caveat that the result is pair- and task-dependent, not a fixed guarantee. That is not a library to install this afternoon. It is a boundary worth knowing exists the next time a token bill is dominated by messages no human was ever going to read.

More on context & compression

What Nadir is

Nadir is an LLM router. Nadir sends each prompt to the cheapest model that can handle it. A small decision model reads each prompt against your model menu and picks the lowest-cost model it expects to handle it. When the decision model is uncertain or unavailable, the request goes to the strongest model on the menu. The routing step makes no call to your model provider.

Nadir runs two ways. The decision API returns a model, reasoning-effort, cache, context, and policy recommendation without calling a model provider, beside the gateway you already run. That is how a shadow-mode evaluation works, and its projected savings stay advisory. The OpenAI compatible managed proxy executes the route, and migration is a two-line change: point the base URL at api.getnadir.com and set model to auto. On that path an optional verifier can score a complete non-streaming answer and escalate to a stronger model when it misses the configured bar. Streaming bypasses post-generation verification. BYOK is supported on every tier.

For coding agents, Nadir Auto is a terminal launcher for Claude Code or Codex that asks Nadir for the main-session model before each turn, with your configured model as the fallback and cost ceiling. Delegation integrations for Claude Code, Codex, or Cursor instead recommend a model tier for subagent work, and the agent decides; the Claude plugin can also move a main-thread turn to Haiku when Nadir's cache check prices it cheaper, unless its switch_main_model option is off. Either way inference runs on your own provider account, so Nadir holds no provider keys on that path.

What the numbers are, and what they are not

Nadir publishes each evaluation with its scope. On checkable code, run-check-escalate solved 392 of 395 common HumanEval and MBPP problems (99.2%), graded by running the canonical tests; that applies only to tasks with runnable deterministic tests. Nadir-Tumbler posts an arena_score of 72.3 on RouterArena's public scorer, 5th of 23 routers, which measures the routing decision on RouterArena's own model pool. A reference-assisted RouterBench evaluation over 11,420 held-out triples produced a 60% lower projected cost than always-Opus with about 98% retained quality and a 1.7% catastrophic-route rate. That experiment gave the verifier the expensive-model reference answer, which production does not have, so it is a research ceiling and not the deployed path.

None of these is a production guarantee, a universal savings rate, or a forecast for any particular workload. Customer savings are reported from measured execution against a declared baseline, and customer quality only from outcome-labelled traffic. Projected savings and realized savings are separate artifacts and are never blended.

Design-partner program

Three rungs, picked by risk appetite. Rung 0 Shadow runs advisory decision calls alongside live traffic and returns a projected receipt, with nothing in the request path changed. Rung 1 Hosted is the two-line swap on a production slice and returns a realized receipt. Rung 2 On-prem is a supervised six-week proof of concept inside the partner's VPC, where no prompt, response, or usage reaches Nadir. The commitments are the same at every rung. Apply for a rung directly: Rung 0 Shadow, Rung 1 Hosted, or Rung 2 On-prem. Not sure which fits? Start at getnadir.com/contact/?reason=design-partner.

Licensing

NadirClaw is the self-hosted core, source-available under the PolyForm Noncommercial License. Source-available is the correct label; NadirClaw is not open source. Nadir Route's hosted plan has no base fee and charges a variable fee only on measured savings from requests Nadir executed.

Pages on this site

Machine-readable summaries of this site: llms.txt and llms-full.txt.