I'm a co-creator of SWE-bench:<p>1. SWE-bench Verified is now saturated at 93.9% (congrats Anthropic), but anyone who hasn't reached that number yet still has more room for growth.<p>2. SWE-bench Multilingual and SWE-bench Multimodal (which we'll open source in the next month) are still unsatured.<p>3. All benchmarks and benchmark paradigms eventually become saturated. That's why the SWE-bench team has worked hard on building the next stage of benchmarks, and we have a few that are already out, for example <a href="https://codeclash.ai/" rel="nofollow">https://codeclash.ai/</a> or <a href="https://algotune.io/" rel="nofollow">https://algotune.io/</a> . And we'll have more to say soon :)
> 93.6% (congrats Anthropic)<p>But the article says "We audited a 27.6% subset of the dataset that models often failed to solve [which is 19.1% of the problems at time of publication] and found that at least <i>59.4% of the audited problems have flawed test cases</i> that reject functionally correct submission"<p>0.191 * 0.594 > 1 - 0.936<p>Does this mean that the audited subset wasn't representative? Or that Anthropic is getting high answers through some shady means?
there's more details under the Too narrow and too wide tests heading.<p>It would be interesting to see a deeper investigation, into how the models are dealing with this and whether the successful ones seemed to be trained on the benchmark.
I suggest reading the Mythos report's discussion on SWE-bench and contamination. I think it's fairly convincing that you can account for contamination and still trust SWE-bench numbers on models that aren't over-optimized for it.
You can trust that a model that scores 40% vs a model that scores 90% is indeed worse.<p>You can’t trust it that a model that scores 93% is better at software engineering than a model that scores 90%, because at that point it’s impossible to distinguish between recall and reasoning.
> models that aren't over-optimized for it.<p>But how do you know the model was over-optimized for it or just really good?
i disagree: <a href="https://www.philosophicalhacker.com/post/anthropic-error/" rel="nofollow">https://www.philosophicalhacker.com/post/anthropic-error/</a>
This article says anthropic models can write out the entire benchmark solution set word for word from memory
Those who fail to study history (or live through it) are doomed to repeat it.<p>SPECint and SPECfp went through this exact movie: benchmark, saturate, retire, replace, repeat. The treadmill is the product.<p>I don't have the solution just noticing the pattern.
That's a slightly different problem. There's no thing as saturation for a performance benchmark like SPEC; we can always conceive of a faster processor (even if we don't know how to build one). Saturation is the problem that once you are at (or near) 100% pass rate on a test of pass/fail questions, there's no room for the score to keep going up and the test has lost any power to discriminate between competing options.<p>However, both kinds of tests are susceptible to over-fitting: an LLM can be trained on the exact test questions, and a CPU can be designed with eg. branch predictors and cache sizes tuned specifically to handle a particular benchmark or workload.
Maybe OP was thinking about compilers "cracking" certain SPEC benchmarks: implementing exactly the optimization needed to boost a benchmark quite a lot, but that opt. probably won't apply to any other code out there (usually it's so targeted and risky with general C/C++ code that intentionally it doesn't work on anything else). That happened a couple of times over the years, I know about the Intel compiler cases for ex. I can certainly see LLM providers adding tricks that help a certain class of benchmarks, but doesn't help much for anything else.
Intel's done it again recently, this time targeting Geekbench: <a href="https://www.intel.com/content/www/us/en/support/articles/000102604/processors.html" rel="nofollow">https://www.intel.com/content/www/us/en/support/articles/000...</a><p>Both that and the SPEC compiler shenanigans are cheating by <i>changing the test</i>, not just over-specializing the product being benchmarked.
Also, in meantime, there's <a href="https://SWE-rebench.com" rel="nofollow">https://SWE-rebench.com</a> as a nice riff on SWE-bench, as far as I understand.
SWE-bench is fantastic! IMO, the scrutiny is a byproduct of the adoption and success of the benchmark.
Both of them look pretty old?
> 1. SWE-bench Verified is now saturated at 93.9% (congrats Anthropic), but anyone who hasn't reached that number yet still has more room for growth.<p>But if some or all players are bench-maxing it, then it becomes a much less useful metric for comparison.<p>Also, this doesn't address what OpenAI says about the test suite disallowing valid solutions.
how hard is it create one of these for my company that models most of the work we do at my company.
[dead]
[dead]
Its pretty clear that any benchmark that comes out will be outdated and exist within the training data with short measure. There will always be an incentive to optimize specifically for these benchmarks even if just for marketing material. Sure there is a training cutoff, but its usually only 3-6 months off of the public release dates.<p>The problem with coding benchmarks then becomes creating novel benchmarks that are guaranteed to not already be in the training data, and not borrow anything from previous benchmarks.<p>In this regard I don't think any benchmark that was created before a given model is released should ever be considered valid or representative of model performance. The potential financial gain for including the data just to be able to market a minor improvement is too swaying. With that in mind they should honestly just stop including benchmarks altogether in marketing material<p>Let the model speak for itself and let the community decide, but of course that will never slide with corporate types with so much money on the line.
This is why I made Zork bench. Zork, the text adventure game, is in the training data for LLMs. It’s also deterministic. Therefore it should be easy for an LLM to play and complete. Yet they don’t. Understanding why is the goal of Zork bench.<p><a href="https://github.com/mnky9800n/zork-bench" rel="nofollow">https://github.com/mnky9800n/zork-bench</a>
I have worked on similar problems. See e.g. [1].<p>The LLMs I have tested have terrible world models and intuitions for how actions change the environment. They're also not great at discerning and pursuing the right goals. They're like an infinitely patient five-year old with amazing vocabulary.<p>[1]: <a href="https://entropicthoughts.com/updated-llm-benchmark" rel="nofollow">https://entropicthoughts.com/updated-llm-benchmark</a><p>(more descriptions available in earlier evaluations referenced from there)
I'm going to ignore all that and tell my developers working in complicated codebases that they have to use AI. I'm sure comprehending side effects in a world building text adventure is completely different that understanding spaghetti code
You can code your prompts to read and write an external world model on the side. This is what most people do who are seriously doing games with LLMs.
we should talk. i sent you an email.
The open models only give the SOTA models a run for their money on gameable benchmarks. On the semi-private ARC-AGI 2 sets they do absolutely awfully (<10% while SOTA is at ~80%)<p>It might be too expensive, but I would be interested in the benchmarks for the current crop of SOTA models.
Have the open models been tried? When I look at the leaderboard [0] the only qwen model I see is 235B-A22B. I wouldn't expect an MoE model to do particularly well, from what I've seen (thinking mainly of a leaderboard trying to measure EQ [1]) MoE models are at a distinct disadvantage to regular models when it comes to complex tasks that aren't software benchmark targets.<p>[0] <a href="https://arcprize.org/leaderboard">https://arcprize.org/leaderboard</a><p>[1] <a href="https://eqbench.com/index.html" rel="nofollow">https://eqbench.com/index.html</a>
Actually the Zorks weren't deterministic, especially Zork II. The Wizard could F you over pretty badly if he appeared at an inopportune time.
[dead]
> let the community decide<p>Which community are we talking about? The professionals with 10+ years experience using LLMs, the vibe coders that have no experience writing code and everyone in between? If you read some of the online communities the experiences with the models all over the place, some compare GPT 5.5 to the second coming of JC while others think it's stupider than 5.4.<p>I personally don't have time to build a set of private benchmarks to compare the models that are coming out so I'm mostly relying on private and semi-private benchmarks to get a feel for how models are improving before I subscribe to a service and start using it myself. At least it's something a bit more reliable than the vibes of random people and bots on reddit.
yea lol i think the community on this one is woefully unqualified to call any shots here. the goalposts are basically teleporting and everyone's aligning success with their own incredibly vague, personally created agentic non-deterministic workflows success. there's like no real answers coming from "the community" in this space at the moment, it's vividly similar to cryptocurrency cycles. most importantly, like you say, vibe coders are going to be the largest subset of the community and probably the most unqualified to assess performance because they're mostly clueless to how things work under the hood.
An easy way to make coding benchmarks viable again is to initialize the models with 200k of distracting or unrelated tokens in their context. Or even just run the tests sequentially in the same context and see how far the model gets before it unwinds.<p>These benchmarks are always greenfield, but people want a model that can deal with a rotted context.
"The community" is astroturfed as hell though. Anthropic pays influencers to promote Claude Code and likely bots a ton as well, so it's hard to come to any kind of consensus online. Even if everyone was acting in good faith, some people will have a much better experience than others because of the domain they're working in (e.g. AI being much better at frontend and commonly used libraries).<p>The only real way to evaluate a model is to test it yourself but that's exhausting for each new model and not comprehensive anyway.
Yeah, it's crazy that there is no trustworthy source for model reviews. I'd love to know how well the new Deepseek 4 actually performs, for example, but I don't want to spend the next week testing it out. Reddit used to be a somewhat useful gauge, but now there are posts on how 4 is useless right next to posts on how amazing it is. And I have no idea if this is astroturfing, or somebody using a quantized version, or different workloads, or what.<p>I also find it increasingly difficult to evaluate the models I actually do use. Sometimes each new release seems identical or only marginally better than the previous version, but when I then go back two or three version, I suddenly find that oder model to be dramatically worse. But was that older model always that quality, or am I now being served a different model under the same version name?<p>It's all just so opaque.
One challenge is that model evaluation is typically domain/application specific. Model performance can also depend on the system prompt and the input/context.<p>Regarding evaluation, I've found using tools like promptfoo (and in some cases custom tools built on top of that) are useful. These help when evaluating new models/versions and when modifying the system prompt to guide the model. Especially if you can define visualizations and assertions to accurately test what you are trying to achieve.<p>This can be difficult for tasks like summarization, code generation, or creative writing that don't have clear answers. Though having some basic evaluation metrics and test cases can still be useful, and being able to easily do side-by-side comparisons by hand.
I'd add another thing here as well. Many take this sort of conspiratorial view like companies training on benchmarks would be some sort of underhanded intent at cheating. In reality, benchmarks also provide a way for companies to easily compare themselves to competitors and work to iteratively improve their own models, so there's a completely non-nefarious motivation to maximize scores on benchmarks.<p>In the end all it does is affirm what you're saying though. Benchmarks are essentially obsolete the moment they become recognized. I suppose it's just another iteration of Goodhart's Law.
I think the solution is a bunch of private trusted benchmarks, and averaging their announced results.
I agree with the sentiment but I wonder if a sufficiently large amount of sufficiently sophisticated benchmarks existed then I would be surprised if a model would only memorize those benchmarks while showing terrible real world performance. We are not there yet but maybe one day we will
be.
In contrary: In an Interview someone from OpenAI said they are trying to avoid it because it makes it harder for them to determine if a model gets better or not.
Perturbation of dataset used for training can introduce adversarial behavior even without adding any other data, and idea is quite simple: you take two batches from the dataset for training and select model with more probable adversarial behavior. The more batches with posterior selection get processed, the more probable adversarial behavior become.<p>By determining if model gets better or not on a given benchmark, OpenAI selects models against benchmarks, implicitly using them in the training.
They mention this in the article. This is why private (non public) benchmark tasks that have been made from scratch are necessary.
a good benchmark would probably porting a selected repo to another language. then clear context notes, and have it port it back.<p>as long as theres a test framework, you could gauge success deterministically.
Benchmarks/evals are really hard and they become harder when there’s huge incentive to game them at an industry scale.<p>ELT-Bench is another recent example. It was the first serious attempt at a benchmark for data engineering workloads, published about a year ago.<p>A few days ago, a follow-up paper from a group that includes one of the original authors audited the benchmark itself. The team gfound that the benchmark has structural issues that biased results.<p>Here’s the paper: <a href="https://arxiv.org/abs/2603.29399" rel="nofollow">https://arxiv.org/abs/2603.29399</a><p>None of these are new though, the industry has gone through all that before just in a smaller scale and there’s a lot to learn from that. Here’s a post I wrote on the parallels we see today to what happened with the benchmarketing wars of the database systems.<p><a href="https://www.typedef.ai/blog/from-benchmarketing-to-benchmaxxing-what-40-years-of-database-evals-can-teach-data-leaders-about" rel="nofollow">https://www.typedef.ai/blog/from-benchmarketing-to-benchmaxx...</a>
It’s just hard to make them not part of the training data. We see this a bit with BrowseComp plus and other deep research datasets. Not because frontier labs are trying to cheat, but just from training on the full web.<p>You need new datasets perpetually.
That’s true. it also depends heavily on the type of task, not everything is equally represented on the web today and it remains to be seen if this is going to change or not.
Or hidden benchmarks, though it's then harder to get people to trust the results.
Database benchmarks are another.<p>I have empirical experience though building classifiers that can have no precision measurement because the classifier performs invariably better than humans. They become the state of the art benchmark themselves and can’t be benchmarked except against themselves. These are for tasks that are non trivial and complex, but less logical than coding and less sustained reasoning. There may come a day though, when there is no calibrated benchmark that is independent of the models it’s measuring.
Would creating new benchmarks every month solve this problem?
Or create "blind" benchmarks.<p>10 groups of 3 researchers, all have their own benchmarks that they do not share (testing it without the authors knowing is a different problem, maybe they only run the benchmarks when the gen-pop has access to the models).<p>that's 10 different tests. Aggregate pass rates
For the most part I think we get the benchmarks we deserve.<p>Many SWE-bench passing PRs would not be merged: <a href="https://news.ycombinator.com/item?id=47341645">https://news.ycombinator.com/item?id=47341645</a><p>Top model SWE bench scores may be skewed by git history leaks: <a href="https://news.ycombinator.com/item?id=45214670">https://news.ycombinator.com/item?id=45214670</a>
Why don't they ask their premier model to generate a bench for them?<p>Jokes aside, a benchmark I look forward to is ARC-AGI-3. I tried out their human simulation, and it feels very reasoning heavy.<p>Leaderboard: <a href="https://arcprize.org/leaderboard">https://arcprize.org/leaderboard</a><p>(Most premier models don't even pass 5 percent.)
They focus on minimizing the number of moves and don't allow any harness whatsoever, putting the bar extremely high. The current top verified contender (Claude Opus 4.6) is at only 0.45%. But with how new it is, I expect a lot of improvement in the next generation of models.
<i>Why don't they ask their premier model to generate a bench for them?</i><p>It's not a crazy idea. Have the older model interview the newer one and then ask both (or maybe a third referee model) which one they think is smarter. Repeat 100x with different seeds. The percentage of times both sides agree the newer model won is the score.
Very (reasoning) heavy benchmarks do seem like the way to go, being the hardest to game.
Can AI write a problem so difficult that even AI cannot solve?<p>Hehe
[dead]
It was never that great, it seems. For all of 2025 there was virtually no improvement in the rate at which models produced quality code. They only got better at passing automated tests.<p><a href="https://entropicthoughts.com/no-swe-bench-improvement" rel="nofollow">https://entropicthoughts.com/no-swe-bench-improvement</a>
It's not true that there was no improvement in the rate at which models produced quality code.<p>Jan 2025 was Claude 3.5 Sonnet, Gemini 1.5 Pro and OpenAI had GPT-4o.<p>As someone who used all those models, as well as today's frontier models - today's models are a significant step up from those.
This is likely true. I think model quality has stagnated and that its likely a non-trivial task to find a new improvement vector. Scaling the width of the model (which has been the driving force behind the speed of improvement thus far) seems to have reached its limit.<p>It will be interesting to see the implications of this. Tooling can only do so much in the long term.
But, that's an enormous source of coding productivity, and it's why Anthropic is worth billions...
The reason SWE-bench has been so successful and useful for coding is that software engineering has a ton of tradition and infrastructure for making and using automated tests.
maybe this is why these companies pricing plans are getting more limited and expensive..
A better benchmark needs to be objectively scored, have multi-disciplinary, breadth, and be scalable (no single correct answer).<p>That's what we designed at <a href="https://gertlabs.com" rel="nofollow">https://gertlabs.com</a>. We put a lot of thought into it, and kept it mostly (not fully) related to problem solving through coding.
Wow. This benchmark definitely feels more accurate than the other rankings I've seen. My experience with gpt 5.4/5.5 is that they are technically flawless and if there are any technical issues that is because the input didn't provide enough clarity; that's not to say that it doesn't autonomously react to any issues during bug fixes or implementations, but it'll tend to nail its tasks without leaving behind gaps.<p>Opus otoh is overrated in terms of its technical ability. It is certainly a better designer/developer for beautiful user experiences, but I'll always lean on gpt 5.5 to check its work.<p>The biggest surprise in the benchmark is Xiao-Mi. I haven't tried it yet, but I will be after looking at this.<p>Grats on your team for putting together something meaningful to make sense of the ongoing AI speedrun! Great work!
Are we looking at the same data? On that site I see that opus 4.7's and gpt 5.5's g scores are within each others confidence intervals, and both significantly ahead of the number 3 model.<p>Your comment makes it sound like they are miles apart, which the benchmark doesn't seem to support.<p>Edit:
I looked at the data more and the two models are only basically equal when looking at the mean of all the tests. Gpt 5.5 significantly outperforms opus 4.7 in coding, while opus 4.7 significantly outperforms in "decision making." I'm not seeing details on what decision making explicitly means.
Decision making refers to the environments where the LLM is called on every tick (like games with social communication), examples here: <a href="https://gertlabs.com/spectate" rel="nofollow">https://gertlabs.com/spectate</a>.<p>Because GPT 5.5 just launched and those games take longer to accumulate data for, it just doesn't have enough samples yet. It will end up with a wider lead on Opus, I am sure. Coding evals always have large sample sizes on day 1. Good find, we should probably better adjust the weighting here for decision games with low match counts.
Much appreciated! MiMo V2.5 Pro is by far the most underrated recent release (probably because it wasn't open weights from the start).
Your benchmark suggests Deepseek V4 pro performs worse than Deepseek V4 flash? That is in an interesting result. Any comments on that outcome?
It's a surprising result, and a lot of it stems from the Pro variant struggling with our custom harness in agentic tasks (whereas Flash does fine), as well as provider instability. Failed requests are not counted against the model in its score, but it's possible there are additional silent degradations even on successful requests.<p>Either that, or Flash is truly a better architecture and the Pro variant is heavily benchmaxxed. It wouldn't be the first time we saw something like that in our benchmarking. We collect samples every week so it'll be interesting to see if it rebalances over time as new providers host the model. Flash is great though; it's so fast and cheap.
> <i>We audited a 27.6% subset of the dataset that models often failed to solve and found that at least 59.4% of the audited problems have flawed test cases that reject functionally correct submissions, despite our best efforts in improving on this in the initial creation of SWE-bench Verified.</i><p>Is this saying a quarter* of the questions and answers were wrong, this whole time?!<p>If so, how was this ever, in any way, a valid measurement?<p>And what was the process for creating this benchmark and how did it end up with such an extraordinarily poor set of data? (There is a description later of how, which seems to be a high standard and I struggle to understand how it aligns with the other results they discuss.) Kudos to them for highlighting the issues, but I am left with questions.<p>[*] Not one in four, but one in six, thanks commenters for the correction; leaving the original since, eh, my bad, and it lets replies make sense. I feel the broad point still stands!
> Is this saying a quarter of the questions and answers were wrong, this whole time?!<p>No, they're saying 59.4% of the 27.6% subset had flawed test cases I think.<p>> If so, how was this ever, in any way, a valid measurement?<p>Benchmarks essentially aren't, for practical concerns anyways. They don't represent your use case, and they don't represent any and all use cases, they're valid for measuring exactly what's included in the benchmarks, nothing more and nothing less.<p>I don't understand the ecosystems obsession with using public benchmarks, they hardly ever tell you anything of value. Ok, Qwen 3.5 is 50% better on Benchmark X than Qwen 2.5, does that mean it'll be 50% better for what you're using it for? Very unlikely.<p>I've been running my own private benchmarks, with test cases I never share anywhere, for the specific problems I'm using LLMs for. Some are based on real, actual cases where a LLM went wrong and I had to adjust the prompt, and over time I've built up a suite.<p>Most of the times when a new update comes out to a model, it moves maybe 2-3% in my own benchmarks, meanwhile they tout 30-40% increase or something ridiculous in public benchmarks, and we're supposed to believe the models' training data isn't contaminated...
I'm not sure people are really trying to interpret this kind of benchmark as being accurate in gauging the magnitude of improvement. It seems pretty obvious that doubling your score on some benchmark where 100% means "correctly answered all of <i>these specific problems</i>" doesn't translate directly to performing twice as well on <i>all</i> problems. I think what people want from these benchmarks—and what they <i>do</i> get to some extent—is answering the question of "is model A better than model B", especially the subset of "is this local model better than last year's frontier online model".<p>The marketing departments touting each model <i>do</i> want to claim superiority on the basis of slivers of percentage points, and that's probably always a stronger claim than the test results can reasonably support. And the benchmarks are obviously susceptible to cheating and overfitting. But when the scores aren't saturated and do show a big discrepancy, that kind of result usually seems to align with what people report from actually trying to use the models in the relevant problem space.
> No, they're saying 59.4% of the 27.6% subset had flawed test cases I think.<p>That being said, they didn't audit the other 72.4%, right? So it's likely that there are way more flawed problems throughout the full set?
Imagenet is one of the most popular datasets on the planet. Turns out, a significant fraction of its images are mislabeled. In the limit case the model would have to fit towards wrong answers to get higher than a certain percentage.<p>The answer is “it works because ML wants to work.” It’s surprising how far you can get with something flawed. It’s also why such huge breakthroughs are possible by noting flaws others haven’t.
> It’s also why such huge breakthroughs are possible by noting flaws others haven’t.<p>I do these sort of breakthroughs at home all the time! My wife would say the computer is doing something strange, and instead of just randomly clicking around, I read the error messages slowly and out loud, then follow what they say. Anyone can do this, yet it seems like a magical ability every time you employ it to help people.
Has it been reasonably possible to overfit to the errors in ImageNet, or are they effectively random noise?
To be useful for identifying which model is better, benchmark scores only need to correlate with true performance, for which it's enough that the majority of tasks are scored correctly. You could have a terrible benchmark where 49% of the labels are wrong and a model that always answers correctly gets a score of 51%, but as long as it's higher than the always-wrong model at 49%, it's still directionally correct.<p>Most machine-learning benchmarks have a fairly large fraction of incorrect labels, but when you just want to distinguish between different models, the time you'd need to ensure perfect scoring would usually be better spent on collecting a larger benchmark dataset, even if it ends up having more errors.
It’s saying that 16% of the problems have well, problems.
You're right - I did not apply the math. (I won't edit, in order to let the parent comment still make sense, and thankyou for the correction.)<p>So not one in four, but <i>one in six</i> problems have problems.<p>That is <i>extraordinarily</i> high and the point still stands: is this truly saying a [large proportion] of the questions and answers were wrong, this whole time, and if so how was it ever a valid measurement?
I think an Olympiad format is better. But the financial incentive is such that it might be near impossible to stop leaks.<p>I.e. A panel comes up with a series of problems.<p>Like advent of code or project Euler but more complex and constricted.<p>Benchmark outcomes could be performance points and measure of cost, time to solution (well token count really).<p>A couple times per year it's run.<p>It avoids overfitting.<p>Overtime the tasks can become more complex if needed.<p>If they benchmax it into being able to complete full products from spec and robust implementations amazing.
SWE-bench was created to replace olympiad coding benchmarks. I think past olympiad coding benchmarks were much worse representative of real-world coding than something like SWE-bench, which is derived from real units of labor.<p>Further, olympiad style benchmarks are arguably easier to contaminate / memorize unless you refresh it regularly; but that goes for SWE-bench too.
I was picturing one-shot performance only for the benchmark, on novel real world tasks. I.e. the score on the March Olympiad you got in April isn't relevant.<p>Simple enough that anyone could run it with a regular subscription.<p>Really unless we can get the providers to ditch the gameable benchmarks they won't.<p>But industries love nothing more than a benchmark they can manipulate.
>>In our analysis we found that all frontier models we tested were able to reproduce the original, human-written bug fix used as the ground-truth reference, known as the gold patch, or verbatim problem statement specifics for certain tasks, indicating that all of them have seen at least some of the problems and solutions during training<p>this statement alone seems to invalidate the SWE-bench tests
The "private benchmarks" suggestion comes up every time, but I think
there's a more interesting axis: benchmarks built on top of
already-public, already-stable test instruments. SWE-bench is
fundamentally a corpus that lives on GitHub — once it ships, it leaks
into training data automatically. Benchmarks built on contested
qualitative instruments (psych tests, opinion surveys) have a different
contamination profile because the <i>correct</i> answer doesn't exist in the
training corpus to memorize — only the question does.<p>That doesn't help for measuring coding ability specifically (you
fundamentally need a code-correctness oracle), but for capability axes
where the "answer" is a stated position rather than a verifiable fact,
public + stable can still be useful. The SWE-bench problem isn't really
"public", it's "public + has a fixed correct answer".
I wrote about this recently here:
<a href="https://fabraix.com/blog/adversarial-cost-to-exploit" rel="nofollow">https://fabraix.com/blog/adversarial-cost-to-exploit</a><p>I think the core issue is in static benchmarks and the community needs to start moving beyond measuring pass/fail (which worked when agents were incapable of doing much of the work) to dynamic evals that simulate more how we evaluate humans.
This feels very much like "we are now moving the goal posts".
It does, and it should. With each iteration getting closer to the goalposts exposes the flaws in the goalposts, and then you try to make better goalposts. The problem people seem to have with the goalposts moving is they assume the goalpost makers either made good goalposts or thought they made good goalposts, but the actual process is "do the best we can at the moment and update when we get better information".
But this is the good kind of goalpost moving
Only if you didn’t read the article…
It’s very hard to encode the properties that matter most in code in tests. [1]<p>[1] <a href="https://voratiq.com/blog/your-workflow-is-the-eval" rel="nofollow">https://voratiq.com/blog/your-workflow-is-the-eval</a>
> We have incorporated these findings into our recent evaluation efforts. In the last months we’ve chosen to report results from the public split of SWE-Bench Pro. We recommend other model developers do the same. SWE-bench Pro is not perfect, but empirically seems to suffer less from contamination issues.<p><a href="https://arxiv.org/pdf/2509.16941" rel="nofollow">https://arxiv.org/pdf/2509.16941</a>
The timing makes me wonder if this is a direct response to Deepseek V4 having performance comparable to SOTA models.
It's been fun benchmarking AI investigations at botsbench.com . Part of it is checking for these kinds of issues - we recently started seeing contamination in our first generation challenge, and less obvious, agent sandbox escapes for other kinds of cheating. Fun times!
more context in small writeup + we interviewd the team behind this when it was announced: <a href="https://www.latent.space/p/swe-bench-dead" rel="nofollow">https://www.latent.space/p/swe-bench-dead</a>
Without SWE-Bench though, how will AI models properly game their results to show ~5-10% gain each iteration?<p>Once a benchmark is known and there's billion of dollars on the line, obviously every company will game them.
Once the bench is public it’s out and probably in the training data. Better to have your own and test it on a new model.
Translation: Now that all rest sets are ingested, we need to move the bar that gave use several years of free PR.<p>See also: <a href="https://this.os.isfine.org/blog/posts/us-ai-labs-love-the-ai-race-so-much-they-d-like-the-government-to-kneecap-their-/" rel="nofollow">https://this.os.isfine.org/blog/posts/us-ai-labs-love-the-ai...</a>
Goodhart’s Law in reverse, what can’t be gamed gets rejected.
You've almost buffer overrun Goodhart's Law into the <a href="https://en.wikipedia.org/wiki/McNamara_fallacy" rel="nofollow">https://en.wikipedia.org/wiki/McNamara_fallacy</a> . :]
SWE-bench verified was created in collaboration with OpenAI. It's also an open dataset so prone to contamination, meaning it can be gamed.
This is somewhat tangential, but I want a model that can detect physical objects placed on top of a board from a picture/video, specifically warhammer 40k models.<p>I want a model that can detect the actual units/models that are placed on top of the terrain/board so I can track how the models move during the game, but trying gemini and chatgpt they were absolutely rubbish.
AI labs should compete on a bench that's adversarial, such as go or Starcraft
I don't understand these websites which force translation to my native language.<p>I mean, it's fine as it's useful for many people, but where is the button for disabling it ? Or why is it enabled by default ?<p>"codage de pointe" sounds so weird and cringe in French.
Same for apps and games. I understand English just fine, no need to switch to your shitty Google-translate localization just because my iPhone or PlayStation is set to my native language.
Does your browser request French via an Accept-Language header perhaps? What really infuriates me is when sites don’t respect that header and give you a translation based on IP location.
Regardless if it does or not, users should be able to manually override what language the website is in, at least be able to read the native one, regardless of what the original language was, what headers you send and where geodatabases think your IP is from.
Correct answer! What a bad UX
The headline leads with contamination, but buried is that 59% of audited failures had test design defects. That's a measurement system never validated against ground truth before being adopted industry-wide as a score that mattered. They reported on it for two years but the gauge was broken the entire time.
Curiously Opus 4.7 claims to have a 87.6% pass rate and Mythos claims to have a 93.9% pass rate... leading to the conclusion that it's actually possible to "solve" the problems that OpenAI claims are incorrect.
Part of the issue they mention is contamination - the tests are in the training data.<p>The other issue they mention is being overly constrained vs. what is asked for - such as requiring specific class or function names to pass that were not part of what was specified.<p>It might be possible that even to the extent they are not contaminated Claude is better at predicting what sort of function names would be used in the repository (this fits my experience in using it on a number of projects with very different styles - I've found it to be good at "when in Rome") - this is a laudable trait, but it's also not what SWEbench claims to be measuring.
If you read the mythos report, in which they discuss and account for contamination substantially, it still suggests that performance on SWE-bench verified is meaningful. Benchmarks, including SWE-bench can absolutely be gamed, but if you're not explicitly benchmaxxing, improving on SWE-bench still measures model improvements, at least up to the level of Mythos.
Or that opus and mythos are training on the data somehow such that there solutions are incorrectly right. Or that openai is lying/wrong. Or that all of these companies are cheating so much it doesn't really matter and never did.
The problem isn’t that the tasks are impossible to solve, it’s that they’re underspecified and/or impossible to solve consistently (ex. because a test is expecting the solution function to have a specific name that wasn’t specified in the task itself).<p>So maybe Anthropic runs Mythos through the benchmark 10000 times and takes the highest score, who knows?
We actually know that a "100% pass rate" is trivially possible: <a href="https://rdi.berkeley.edu/blog/trustworthy-benchmarks-cont/" rel="nofollow">https://rdi.berkeley.edu/blog/trustworthy-benchmarks-cont/</a><p>Anthropic p-hacking the benchmark strikes me as cheating, and somewhat unlikely. Mythos figuring out how to cheat at the benchmark strikes me as much more likely.<p>But if that hypothesis is the explanation the interesting part is Opus 4.7 (but not 4.6) seems to be doing the same.
>Mythos figuring out how to cheat at the benchmark strikes me as much more likely.<p>Define "cheat". If it's just hacking the test harness to return "PASSED", surely this would be easily detected with some human auditing? It sounds far more likely their solution are designed to pass the incorrect tests. That might be considered bad in a SWE context, but it's not exactly cheating either. It might even be considered a good thing, eg. in the context of backwards compatibility.<p>[1] <a href="https://learn.microsoft.com/en-us/troubleshoot/microsoft-365-apps/excel/wrongly-assumes-1900-is-leap-year" rel="nofollow">https://learn.microsoft.com/en-us/troubleshoot/microsoft-365...</a>
> We also found evidence that models that have seen the problems during training are more likely to succeed, because they have additional information needed to pass the underspecified tests.<p>No shit, Sherlock!
It's really naïve to think any of the big AI companies won't cheat
So Opus 4.7 and Mythos are solving problems that are impossible to solve?
Whether a problem is "good" or "bad" is not always objective or simple.<p>For example, you can have problems that are underspecified, with hardcoded tests for a particular solution (out of multiple possible solutions). If your solution works fine but used a different function name than the one hardcoded in the tests, you can unfairly score 0.<p>When an eval has underspecified problems like these, you can still score 100% if you remember the original solution from your training data or if you just have taste similar to the original human authors. And both of these qualities - good memory and good taste - are great, but they'll be rewarded unfairly relative to a model that still did exactly what it was asked but in a different way than the hardcoded tests expected.
To some extent yes.<p>It is not impossible to solve in absolute terms, in the sense, all necessary pieces of information are presented in the repo + problem statement.<p>But it is impossible to solve in the sense, unless you read the ground truth, you are NOT able to solve it the way the test patch demands.<p>Simply not plausible to me that model can read the problem statement so precisely that it nails exactly, like 100% what the test suite is trying to test.
So we need to generate benchmarks after the models finish training. Or we need to keep the solutions to the benchmark problems as closed source.
it never did
Issue with these benchmark also is that they measure a model you are unlikely going to be routed to. My experience with Anthropic is that despite using Opus 4.6 and 4.7, most of the time the performance is matching low B parameter Qwen. I think there should be a way to verify what model is actually being used to process prompts - that should be independently verified. At the moment it is so bad, you have to ask verification question to the model in form of a non-trivial problem. If it solves it, then there is a chance you actually get Opus and not an impostor and so you can continue the session instead of restarting it hoping you get routed correctly. But that does not help if model is replaced with cheaper one mid session. I've got so much work lost because of these shenanigans.
> My experience with Anthropic is that despite using Opus 4.6 and 4.7, most of the time the performance is matching low B parameter Qwen.<p>Is this just the next level of the "they're serving quantized models!" theory?
I'm sure some inference providers don't, but most intentionally obfuscate this data. They have the full trace logs- my impression is that they don't share them because it's their competitive advantage, and it's easier for a competitor to distil their model if they did.
[dead]
[flagged]
[dead]
[dead]
[dead]
[dead]
[dead]
[dead]
[dead]
[dead]
Terminal Bench is the future
First, you might want to say <i>why</i> you think so, otherwise this is just borderline spam. Secondly, when your praise things (without motivation or reasoning even), and you've contributed to that specific thing, please say that up front instead of just praising the thing, again it makes it look like spam otherwise.