The Attention Layer Nº 5 — Week of Aug 17 — 23
The Attention Layer
Nº 5 — Week of Aug 17 — 23
Interface as evidence

The Interface Is the Capability

This week’s strongest AI results came from the layer between model and world: what a system can see, retrieve, call, and prove. That layer can unlock real performance, while a poorly specified interface can make a score look like competence before the evidence catches up.

~7 min
— Also in this issue — ComponentBench makes the interface part of the test Financial AI Can Get the Cause Right With Incomplete Evidence WANDR finds the gap between finding facts and proving them Claude’s science demo is real—and narrower than the pitch When ASR Follows the Transcript Instead of the Audio Self-improvement needs a measured null MidTool shows a tool-use gain, not yet a mid-training effect GRIP’s RAG gains outrun its causal story SparsePR reconstructs skipped attention, with a speedup still to audit What Shipped

Give GPT-5 mini the same web task and change only its interface. In ComponentBench, accessibility-tree observations produced an 83.1%srcComponentBench makes the interface part of the test, Results Table 1 task-success rate; coordinate-only Pixel control produced 48.9%srcComponentBench makes the interface part of the test, Results Table 1, a 34.2srcComponentBench makes the interface part of the test, Results Table 1-point swing inside the shared harness. In FinRCA-Bench, Typed Provenance Graph Retrieval (TPGR) and Dense retrieval-augmented generation (Dense RAG) used the same downstream language model, yet exact accuracy was 72.44%srcFinancial AI Can Get the Cause Right With Incomplete Evidence, Sections 7.2 and 7.4; Table 6 versus 2.05%srcFinancial AI Can Get the Cause Right With Incomplete Evidence, Sections 7.2 and 7.4; Table 6; TPGR achieved strict full-contract coverage in 80 of 437 retrieval-evaluable cases. The weights did not move. The route to the answer did.

The week’s through-line is that capability is increasingly determined by the interface around a model: its retrieval grammar, observation space, tool knowledge, and evidence contract. Those surfaces are now productive levers; they can give a fixed model access to records, widgets, instruments, or tools. They can also become sources of false confidence when a route, transcript, or label is mistaken for a completed and defensible result. As model routers, Model Context Protocol (MCP) servers, agent runtimes, and endpoint controls ship, the interface deserves to be treated as part of the model’s claim.

The channel changes the score

ComponentBench makes the interface effect unusually clean. Its 2,910srcComponentBench makes the interface part of the test, Abstract and Methods short tasks span 97srcComponentBench makes the interface part of the test, Abstract and Methods canonical component types, and the shared harness compares accessibility-tree (AX-tree), Set-of-Marks (SoM), and Pixel conditions. GPT-5 mini’s 83.1% AX-tree and 48.9% Pixel results are a 34.2-point change in the measured system. The wider table resists a fixed hierarchy: GPT-5.4srcComponentBench makes the interface part of the test, Results Table 1 reached 83.8%srcComponentBench makes the interface part of the test, Results Table 1 with Pixel against 81.5%srcComponentBench makes the interface part of the test, Results Table 1 with AX-tree, while GPT-5.4 mini went from 79.1%srcComponentBench makes the interface part of the test, Results Table 1 with AX-tree to 77.1%srcComponentBench makes the interface part of the test, Results Table 1 with Pixel. Model and interface interact. FinRCA applies the same logic to records. It freezes gpt-5.6srcFinancial AI Can Get the Cause Right With Incomplete Evidence, Sections 5.6 and 7.4-sol, the prompt, taxonomy, structured output schema, output limit, and retry policy, then changes retrieval. Dense RAG recovered 0.83%srcFinancial AI Can Get the Cause Right With Incomplete Evidence, Sections 7.2 and 7.4; Table 6 macro required-record recall and reached 2.05% exact accuracy; TPGR reached 77.70%srcFinancial AI Can Get the Cause Right With Incomplete Evidence, Sections 7.2 and 7.4; Table 6 and 72.44%, respectively. Its default-deny graph follows persisted transaction relationships, limits traversal to three hops, and caps the selected context at 40srcFinancial AI Can Get the Cause Right With Incomplete Evidence, Sections 5.5 and 7.4 source records. That makes provenance-aware access a plausible dominant bottleneck relative to this baseline. The benchmark also counted 254srcFinancial AI Can Get the Cause Right With Incomplete Evidence, Tables 6 and 7; Sections 7.4–7.5 correct root-cause labels with incomplete retrieval. Record access can make a diagnosis land; semantic support is a separate layer of proof.

The weights did not move. The route to the answer did.
A finished answer has branches

Perplexity’s Wide ANd Deep Research (WANDR) pushes the interface question past finding a plausible page. Its 500srcWANDR finds the gap between finding facts and proving them, Opening and ceo_cfo_appointments example tasks require collections whose qualification-key trees terminate in evidence; a representative task asks for at least 70srcFinancial AI Can Get the Cause Right With Incomplete Evidence, Sections 7.2 and 7.4; Table 6 United States-based companies, with separate appointment and listing pages for each, or 140srcWANDR finds the gap between finding facts and proving them, Opening and ceo_cfo_appointments example records. Search as Code led the main run at 0.363srcWANDR finds the gap between finding facts and proving them, What we found soft F1 and 0.133srcWANDR finds the gap between finding facts and proving them, What we found hard F1, while the best hard precision and recall in the release were 0.150srcWANDR finds the gap between finding facts and proving them, What we found and 0.134srcWANDR finds the gap between finding facts and proving them, What we found. Terminal evidence-slot completion ranged from 0.979srcWANDR finds the gap between finding facts and proving them, What we found and Mean task-level raw structural completion figure to 0.994srcWANDR finds the gap between finding facts and proving them, What we found and Mean task-level raw structural completion figure across the six full runs; top-level discovery ranged from 0.611srcWANDR finds the gap between finding facts and proving them, What we found and Mean task-level raw structural completion figure to 0.951srcWANDR finds the gap between finding facts and proving them, What we found and Mean task-level raw structural completion figure. The missing work happens upstream, when the agent decides what belongs in the collection. The same diagnosis appears in physical form in Anthropic’s science demonstrations. Claude orchestrated publicly available structure-design, sequence-design, folding, and co-folding models, then Adaptyv Bio and Twist Bioscience produced and tested the candidates. In the chemistry demonstration, it turned raw nuclear magnetic resonance (NMR) and liquid chromatography–mass spectrometry (LC-MS) files into a reviewable report. The protein campaign counted 354srcClaude’s science demo is real—and narrower than the pitch, Claude’s performance on the targets binders from 1,320srcClaude’s science demo is real—and narrower than the pitch, Claude’s performance on the targets designs against 14srcClaude’s science demo is real—and narrower than the pitch, Claude’s performance on the targets of 15srcClaude’s science demo is real—and narrower than the pitch, Claude’s performance on the targets targets; the chemistry result used one routine quality-control sample. Lab testing remained the gate. Producing a candidate, citing a page, or returning a spectrum crosses an interface; completion is the next milestone.

The model may be the same. The interface is where the verdict moves.
The benchmark has an interface of its own

An automatic speech recognition (ASR) study compared 11srcWhen ASR Follows the Transcript Instead of the Audio, Methods and Results opening; Figure 2 open-source recognizers on English VoxPopuli and found that the six with 5.4–5.8%srcWhen ASR Follows the Transcript Instead of the Audio, Methods and Results opening; Figure 2 word error rates (WERs) also had reference-disagreement accept-ref rates of 0.18srcWhen ASR Follows the Transcript Instead of the Audio, Methods and Results opening; Figure 20.30srcWhen ASR Follows the Transcript Instead of the Audio, Methods and Results opening; Figure 2; every model at 6.5%srcWhen ASR Follows the Transcript Instead of the Audio, Methods and Results opening; Figure 2 WER or higher was at 0.10srcWhen ASR Follows the Transcript Instead of the Audio, Methods and Results opening; Figure 2 or below. The probe asks what a system does when audio leaves two renderings viable. On generic voices reading the identical transcript, accept-ref fell for many models, while clones of fresh same-domain speakers often moved closer to generic voices. A low WER can carry a corpus convention; the size of any resulting WER inflation remains unmeasured. The self-improvement audit makes the same warning in a different register. Run a frozen Qwen3-8B through the same temperature-zero evaluation twice and a single-decode ledger records six apparent new solves and nine lost ones. Serializing requests removed three-quarters of the flips, yet serial evaluation still changed about 2%srcSelf-improvement needs a measured null, Introduction temperature-zero decoding and batching discussion of greedy verdicts. At k=128srcSelf-improvement needs a measured null, Introduction expansion-statistic and exact-test discussions; Conclusion E.3, a frozen comparison labeled seven of 25srcSelf-improvement needs a measured null, Introduction expansion-statistic and exact-test discussions; Conclusion E.3 American Invitational Mathematics Examination (AIME) problems as expanded. The proposed per-problem exact test made no detections on held-out frozen replicates; that all-null result provides no power estimate or minimum detectable effect. The unchanged model is the necessary baseline for a claim that a model learned.

The interface is moving into production

Product releases made the architecture tangible. TrueFoundry’s MIT-licensed, vendor-neutral TrueForge runtime leaves model and infrastructure choices to developers while supplying the agent loop, tool and MCP orchestration, persistent sessions, context compaction, approvals, and sandbox-as-a-tool support. Salesforce’s Headless 360srcIndustry digest, Salesforce opens Headless 360 to external agents through MCP expansion exposes authorized capabilities through MCP; its Data 360 MCP Server offers approximately 200srcIndustry digest, Salesforce opens Headless 360 to external agents through MCP APIs, and more than 100srcIndustry digest, Salesforce opens Headless 360 to external agents through MCP reusable Agent Skills are generally available. Perplexity’s open-source Numbat adds system-level rules around agents with privileged endpoint access. The model is becoming one component inside a control surface that also owns state, permissions, and response. Ramp’s Router makes the same layer observable: it can route requests using up to three user-specified benchmarks and exposes token spend, cost, latency, and fallback data. OpenAI’s Private Safety Processing preview extends safety checks across activity in multiple conversations without retaining customer data. In deployment, the interface decides as much about trust as the model does.

The Tension

Here is where the clean story frays. Interface changes often arrive as bundles. FinRCA’s contracts encode one notion of evidence sufficiency, and semantic citation support remains unadjudicated; WANDR’s benchmark and winning Search as Code system come from the same organization, with task-specific judges and no reported human-agreement study. ComponentBench’s GPT-5 mini headline is an aggregate table value without a matching interval or repeated-run estimate. The ASR comparison is cross-sectional across architectures and training mixtures, while the self-training audit is roughly 270 optimizer steps on one Qwen backbone and its all-null result has no power estimate. Better access can improve the observed answer while leaving causal reasoning unsettled; a cleaner metric can still be underpowered. The value of these studies lies in the contracts they expose. Their numbers should travel no farther than the interface and control that produced them. The interface is real; attribution is the part still on trial.

Carry an interface ledger into next week. For an agent, report the observation and action space, retrieval path, tool and schema exposure, branch completion, evidence support, and resource budget. For a learning or benchmark claim, pair the result with a frozen or no-op control, fresh voices or data, and a matched budget. The practical standard is simple: report the model and the world it was allowed to inhabit.

The model may be the same. The interface is where the verdict moves.

Grounding — claim → source
ComponentBench compares the same task suite under accessibility-tree, Set-of-Marks, and Pixel conditions in a shared harness. ComponentBench makes the interface part of the test, Methods and Results
ComponentBench contains 2,910 tasks and 97 canonical component types. ComponentBench makes the interface part of the test, Abstract and Methods
GPT-5 mini succeeds on 83.1% of tasks with AX-tree observations and 48.9% with Pixel control, a 34.2-percentage-point difference. ComponentBench makes the interface part of the test, Results Table 1
GPT-5.4 reaches 83.8% with Pixel and 81.5% with AX-tree, while GPT-5.4 mini reaches 79.1% with AX-tree and 77.1% with Pixel. ComponentBench makes the interface part of the test, Results Table 1
Dense RAG and TPGR use the same downstream gpt-5.6-sol configuration, prompt, taxonomy, output schema, output limit, and retry policy. Financial AI Can Get the Cause Right With Incomplete Evidence, Sections 5.6 and 7.4
Dense RAG reaches 0.83% macro required-record recall and 2.05% exact accuracy, while TPGR reaches 77.70% macro recall and 72.44% exact accuracy. Financial AI Can Get the Cause Right With Incomplete Evidence, Sections 7.2 and 7.4; Table 6
TPGR uses a default-deny graph of persisted relationships with a three-hop limit and a 40-record selection cap. Financial AI Can Get the Cause Right With Incomplete Evidence, Sections 5.5 and 7.4
The FinRCA attribution includes 254 correct labels despite incomplete retrieval. Financial AI Can Get the Cause Right With Incomplete Evidence, Tables 6 and 7; Sections 7.4–7.5
WANDR contains 500 tasks, including a representative task requiring at least 70 United States-based companies and separate appointment and listing evidence for each, or 140 records. WANDR finds the gap between finding facts and proving them, Opening and ceo_cfo_appointments example
Perplexity Search as Code leads the WANDR main run at 0.363 soft F1 and 0.133 hard F1, while the best hard precision and recall are 0.150 and 0.134. WANDR finds the gap between finding facts and proving them, What we found
Terminal evidence-slot completion ranges from 0.979 to 0.994 across six full runs, while top-level discovery ranges from 0.611 to 0.951. WANDR finds the gap between finding facts and proving them, What we found and Mean task-level raw structural completion figure
Claude orchestrates structure-design, sequence-design, folding, and co-folding models, while Adaptyv Bio and Twist Bioscience produce and test the designs. Claude’s science demo is real—and narrower than the pitch, The campaign
Claude converts raw NMR and LC-MS files into calibrated spectra, peak tables, mass and ultraviolet spectra, and purity outputs. Claude’s science demo is real—and narrower than the pitch, Claude runs the analytical chemistry workflow
The protein campaign reports 354 binders from 1,320 designs against 14 of 15 targets. Claude’s science demo is real—and narrower than the pitch, Claude’s performance on the targets
The chemistry demonstration uses one routine quality-control sample. Claude’s science demo is real—and narrower than the pitch, Claude runs the analytical chemistry workflow
The ASR study evaluates 11 open-source models on English VoxPopuli, and its six models with 5.4%–5.8% WER have reference-disagreement accept-ref rates of 0.18–0.30, while models at 6.5% WER or higher are at 0.10 or below. When ASR Follows the Transcript Instead of the Audio, Methods and Results opening; Figure 2
Generic voices reading the identical transcript reduce accept-ref for many models, while fresh same-domain speaker clones often move closer to the generic condition. When ASR Follows the Transcript Instead of the Audio, Results voice-clone analysis; Figure 4
A frozen Qwen3-8B evaluated twice with temperature-zero decoding produces six apparent new solves and nine lost ones; serialization removes three-quarters of the flips, while serial evaluation still changes about 2% of greedy verdicts. Self-improvement needs a measured null, Introduction temperature-zero decoding and batching discussion
At k=128, a frozen comparison labels seven of 25 AIME problems as expanded, while the proposed exact test makes no detections on held-out frozen replicates. Self-improvement needs a measured null, Introduction expansion-statistic and exact-test discussions; Conclusion E.3
The all-null held-out result does not establish test power or a minimum detectable effect. Self-improvement needs a measured null, Introduction and Abstract statistical interpretation
TrueForge is an MIT-licensed, vendor-neutral runtime that supplies agent loops, tool and MCP orchestration, persistent sessions, context compaction, approvals, and sandbox-as-a-tool support while leaving model and infrastructure choices to developers. Industry digest, TrueFoundry open-sources a vendor-neutral agent runtime
Salesforce’s Data 360 MCP Server exposes approximately 200 APIs, and more than 100 reusable Agent Skills are generally available. Industry digest, Salesforce opens Headless 360 to external agents through MCP
Perplexity’s Numbat is an open-source security suite for agent harnesses on enterprise endpoints, including privileged agents. Industry digest, Perplexity open-sources Numbat for endpoint agent security
Ramp’s Router can route requests using up to three user-specified benchmarks and exposes token spend, cost, latency, and fallback data. Industry digest, Ramp launches Router, a multi-provider model-routing API
OpenAI’s Private Safety Processing preview monitors activity across multiple conversations without retaining customer data. Industry digest, OpenAI previews Private Safety Processing alongside Zero Data Retention
FinRCA’s evidence contracts encode one notion of sufficiency, lack a minimal-sufficient-evidence ablation, and leave semantic citation support unadjudicated. Financial AI Can Get the Cause Right With Incomplete Evidence, Sections 3.2, 6.3, 8.4, and 9.5
WANDR’s authors control both the benchmark and the winning Search as Code system, and the evaluation reports no human-agreement study or judge-error analysis. WANDR finds the gap between finding facts and proving them, forensic_context.red_flags and forensic_context.ledger
The GPT-5 mini ComponentBench headline is an aggregate table percentage without a corresponding interval or repeated-run estimate. ComponentBench makes the interface part of the test, Results statistical comparison discussion
The ASR comparison is cross-sectional across architectures, parameter scales, and training mixtures, while the self-training experiment uses roughly 270 optimizer steps on one Qwen backbone family. When ASR Follows the Transcript Instead of the Audio, Figure 2 and Conclusion; Self-improvement needs a measured null, Conclusion D.1
The studies recommend reporting no-op or frozen controls, fresh-speaker or fresh-data probes, evidence contracts, and matched resource budgets alongside headline scores. Self-improvement needs a measured null, Conclusion recommendations; When ASR Follows the Transcript Instead of the Audio, practical contribution; WANDR finds the gap between finding facts and proving them, What’s next
MidTool-Mix is an additional 20.3B-token stage before supervised fine-tuning and reinforcement learning. MidTool shows a tool-use gain, not yet a mid-training effect, Abstract and Baselines and Training Setup
GRIP uses a four-dimensional noisy evidence channel and bundles it with premise selection, span extraction, natural-language-inference filtering, and compression. GRIP’s RAG gains outrun its causal story, Introduction, Methods, and Results
SparsePR reports roughly 22%–26% realized executed-pair density with aggregate quality close to dense attention, while online work accounting lacks a wall-clock breakdown. SparsePR reconstructs skipped attention, with a speedup still to audit, Results Table 1 and Implementation details
In this issue
ComponentBench makes the interface part of the test
Shows that a fixed model’s task score can swing 34.2 points when the observation and action interface changes.
Deep story · arxiv:2608.18307 ↓
Financial AI Can Get the Cause Right With Incomplete Evidence
Separates a correct root-cause label from the record trail needed to audit it.
Deep story · arxiv:2608.18534 ↓
WANDR finds the gap between finding facts and proving them
Turns research-agent breadth, branch completion, and evidence support into inspectable failure modes.
Deep story · blog:scraper:perplexity_research:https://research.perplexity.ai/articles/wandr-benchmark-evaluating-research-agents-that-must-search-wide-and-deep ↓
Claude’s science demo is real—and narrower than the pitch
Shows the value of scientific handoffs while bench and chemistry validation keep the autonomy claim narrow.
Deep story · blog:scraper:anthropic_engineering:https://www.anthropic.com/research/Claude-accelerates-protein-design ↓
When ASR Follows the Transcript Instead of the Audio
Adds a reference-following probe for detecting when strong WER may depend on benchmark transcript conventions.
Deep story · arxiv:2608.19936 ↓
Self-improvement needs a measured null
Supplies the no-op controls needed before a transition is credited as learning.
Deep story · arxiv:2608.20290 ↓
MidTool shows a tool-use gain, not yet a mid-training effect
Adds a 20.3B-token tool-use training recipe whose gains remain confounded with extra data and compute.
Deep story · arxiv:2608.20314 ↓
GRIP’s RAG gains outrun its causal story
Tests a four-dimensional evidence channel that improves question answering while bundling selection, filtering, and compression.
Deep story · arxiv:2608.16776 ↓
SparsePR reconstructs skipped attention, with a speedup still to audit
Adds a call-specific sparse-attention correction that preserves aggregate quality near quarter-density while its speed accounting remains provisional.
Deep story · arxiv:2608.18484 ↓
Deep Story
Evaluation & Analysis · Reasoning & Agents

ComponentBench makes the interface part of the test

ComponentBench turns short web-widget interactions into a diagnostic benchmark, pairing programmatic end-state checks with cleaned human reference traces across modern UI components. Its clearest result is a 34.2-percentage-point swing for GPT-5 mini when the same tasks move from accessibility-tree observations to coordinate-only Pixel control.

TL;DR

ComponentBench argues that browser-agent performance is partly a property of the interface exposed to the model, using 2,910 short component tasks to diagnose failures between atomic grounding tests and full workflows. Its load-bearing result is GPT-5 mini’s 83.1% success with accessibility-tree observations versus 48.9% with coordinate-only Pixel control, within one harness. Treat the gap as a controlled model-interface finding, not a general reliability ranking: the constructed UI suite and selected headline limit production claims.

Paper· Project· Code· Data and runs ·2,910 tasks · 97 canonical component types ·~6 min
The interface changes the score

Take GPT-5 mini through the same ComponentBench tasks and change the observation and action space. With accessibility-tree (AX-tree) observations, it succeeds on 83.1%srcResults, Table 1 and the discussion of the main v1 results of tasks; with coordinate-only Pixel control, it succeeds on 48.9%srcResults, Table 1 and the discussion of the main v1 results. The 34.2srcResults, Table 1 and the discussion of the main v1 results-percentage-point swing occurs inside the shared harness, making the interface part of what the benchmark measures. An agent score is partly a property of the interface exposed to the model.

That matters because browser workflows are chains of small interactions. Under the paper’s simple independence illustration, five critical interactions at 80%srcIntroduction reliability leave only about a 33%srcIntroduction end-to-end ceiling. A long-horizon miss can come from planning, state tracking, grounding, or one brittle date picker; a component-level task gives the evaluator a way to separate those causes.

The widget is the unit of diagnosis

ComponentBench targets the layer between atomic grounding tests and full workflows. It defines a library-agnostic ontology of 97srcAbstract and Methods canonical component types grouped into 14srcAbstract and Methods families, instantiated as 2,910srcAbstract and Methods tasks from 24srcAbstract and Methods canonical templates plus one ad-hoc variant. Each task targets one primary component, while the page around it supplies neighboring instances, clutter, and disambiguation without changing the nominal target.

That number is best read as a coverage grid. Thirty specifications per type are organized through 24 canonical templates plus one ad-hoc variant, so the total says more about breadth across components and contexts than about independent behavioral mechanisms.

Figure 2’s filter task shows the point. Three visually similar mini-tables—Orders, Invoices, and Payouts—share a page. The agent must operate on Invoices, set Payment status to Late, set Currency to EUR, then click the local Apply button. Success is a committed state, so a selection that is never applied does not finish the task. That is a useful unit of diagnosis: short enough to isolate a component, with enough context to expose grounding and state errors.

The traces make short tasks measurable

The benchmark’s scale comes from a large-language-model-assisted construction pipeline. GPT-5.2srcMethods Pro generated 30srcMethods YAML specifications per canonical type. Each specification records the implementation source, action template, eight scene factors, seven intended-difficulty axes, a success trigger, and negative cases. Claude Code implemented the pages as interactive Next.js applications, and a human operator executed every task twice, cleaned the low-level action traces, and retained the shorter pass as the reference. The same traces serve as both the construction check and the efficiency reference, so the benchmark’s validity check and human baseline come from one operator.

The retained human traces average 2.7srcMethods normalized steps (median 2); 97.8%srcMethods of tasks are solvable in 10srcMethods or fewer steps, and the mean human completion time is 4.8srcMethods seconds. The paper reports that the fastest agent configuration takes 3.7srcAbstract× as long as its matched human reference. Because the reference is one operator’s shorter of two attempts, the ratio is a demanding yardstick for interaction overhead and a limited human-productivity estimate.

Replay-based difficulty audits and a trace-grounded failure taxonomy extend the design beyond pass/fail. The model table directly supports the observation/action comparison; it gives less basis for treating every explanatory label as validated. For an evaluator, that distinction matters: a score gap can be reliable before every label attached to its cause has earned the same confidence.

The effect belongs to the model, too

Model variation keeps the interface result from becoming a simple hierarchy. The results cover seven models. Six are evaluated in all four reported conditions; AX-tree, Set-of-Marks (SoM), and Pixel share the benchmark harness, while Browser-Use is a separate tool-rich regime. UI-TARS-1.5srcResults-7B is evaluated through its native pixel-only harness. Treating all those columns as a single league table would blur meaningful differences in setup.

Within the common AX-tree/SoM/Pixel harness, Gemini 3 Flash ranges from 89.6%srcResults, Table 1 with AX-tree to 85.4%srcResults, Table 1 with Pixel, while GPT-5.4srcResults, Table 1 mini ranges from 79.1%srcResults, Table 1 with AX-tree to 74.7%srcResults, Table 1 with SoM (Pixel is 77.1%srcResults, Table 1). The GPT-5.4 row reverses the ordering: Pixel reaches 83.8%srcResults, Table 1, above AX-tree at 81.5%srcResults, Table 1 and SoM at 77.0%srcResults, Table 1. Set-of-Marks gives GPT-5 mini a 29.6srcResults, Table 1 and the paragraph interpreting Table 1-percentage-point lift over Pixel and Gemini 3.1srcResults, Table 1 and the paragraph interpreting Table 1 Flash-Lite a 10.2srcResults, Table 1 and the paragraph interpreting Table 1-percentage-point lift; Pixel beats SoM for GPT-5.4 mini by 2.4srcResults, Table 1 and the paragraph interpreting Table 1 points and GPT-5.4 by 6.8srcResults, Table 1 and the paragraph interpreting Table 1.

The evidence supports a model-interface interaction, with no universal penalty attached to pixels. The 34.2-point contrast is a useful warning against hiding tooling choices inside a benchmark score. The reported paired-bootstrap 95%srcResults intervals for the Pixel-versus-SoM comparisons are [1.0srcResults, 3.9srcResults] for GPT-5.4 mini and [5.3srcResults, 8.3srcResults] for GPT-5.4; the GPT-5 mini headline is an aggregate table value without a matching interval or repeated-run estimate. It has clear diagnostic force and limited statistical reach.

A diagnostic layer with a hard boundary

Scope sets the boundary. The suite runs on constructed, interactive Next.js interfaces, primarily built with Ant Design, MUI, and Mantine; 30 markdown-editor tasks use an external implementation. Every task isolates one primary component, and the human reference is only a few steps long. The setup is well suited to comparing observation and action regimes; production reliability across long workflows and other libraries is a larger claim.

ComponentBench earns a place in an evaluation stack. When an agent fails a workflow, reproduce the suspect widget under the same observation and action space before assigning blame to the model or planner. Keep its percentages tied to that controlled question: which interface lets this model handle this component, and at what efficiency? That is the durable result—an evaluation that exposes the interface as part of the system being tested.

Grounding — claim → source
GPT-5 mini succeeds on 83.1% of tasks with AX-tree observations and 48.9% with Pixel control, a 34.2-percentage-point difference within the shared harness. Results, Table 1 and the discussion of the main v1 results
The paper uses five interactions at 80% reliability as a simple illustration of an approximately 33% end-to-end ceiling. Introduction
ComponentBench is positioned between long-horizon workflow benchmarks and atomic grounding tests. Introduction
The benchmark contains 97 canonical component types, 14 families, 2,910 tasks, and 24 canonical templates plus one ad-hoc variant. Abstract and Methods
The ontology is described as library-agnostic, each task targets one primary component, and surrounding context can introduce neighboring instances, clutter, and disambiguation. Introduction and Methods
The filter-task example uses three mini-tables labeled Orders, Invoices, and Payouts; the agent must set Payment status to Late, set Currency to EUR for Invoices, and click the local Apply button. Methods, Figure 2
The benchmark’s task specifications are generated at 30 per canonical type, with GPT-5.2 Pro used for specification generation and a YAML schema containing scene factors, difficulty axes, success triggers, and negative cases. Methods
Claude Code implements the specifications as interactive Next.js pages, while a human operator executes each task twice, cleans the traces, and retains the shorter pass. Methods
The retained human traces average 2.7 normalized steps, have a median of 2, place 97.8% of tasks within 10 or fewer steps, and have a mean completion time of 4.8 seconds. Methods
The fastest agent configuration is reported as taking 3.7 times as long as the matched human reference. Abstract
ComponentBench includes replay-based difficulty audits and a trace-grounded failure taxonomy. Abstract and Conclusion
The evaluation covers seven models, with six evaluated across all four reported conditions and UI-TARS-1.5-7B evaluated through its native pixel-only harness. Results
AX-tree, Set-of-Marks, and Pixel share the benchmark harness, while Browser-Use is described as a separate tool-rich reference regime. Results
Table 1 reports Gemini 3 Flash at 89.6% AX-tree and 85.4% Pixel, GPT-5.4 mini at 79.1% AX-tree, 74.7% SoM, and 77.1% Pixel, and GPT-5.4 at 81.5% AX-tree, 77.0% SoM, and 83.8% Pixel. Results, Table 1
Set-of-Marks exceeds Pixel by 29.6 points for GPT-5 mini and 10.2 points for Gemini 3.1 Flash-Lite; Pixel exceeds SoM by 2.4 points for GPT-5.4 mini and 6.8 points for GPT-5.4. Results, Table 1 and the paragraph interpreting Table 1
The reported paired-bootstrap 95% confidence intervals are [1.0, 3.9] for GPT-5.4 mini and [5.3, 8.3] for GPT-5.4 in the Pixel-versus-SoM comparisons. Results
The GPT-5 mini headline is presented as an aggregate table percentage without a corresponding interval or repeated-run estimate in the reported comparison. Results, Table 1 and the statistical comparison discussion
The implemented pages primarily use Ant Design, MUI, and Mantine, with 30 markdown-editor tasks using an external implementation. Abstract and Methods
The benchmark’s controlled component tasks and human reference traces support using it to compare observation and action regimes and interaction efficiency. Abstract, Methods, and Results
Evaluation & Analysis

Financial AI Can Get the Cause Right With Incomplete Evidence

FinRCA-Bench gives evaluators a private, record-level evidence contract, then holds the language model fixed while swapping retrieval. Its central result makes provenance retrieval look like the bottleneck on a narrow synthetic task, while the semantic support needed for an auditable diagnosis remains unmeasured.

TL;DR

FinRCA-Bench argues that financial root-cause systems should be evaluated on evidence access separately from diagnosis: with the language model, prompt, and schema fixed, typed provenance retrieval reached 72.44% accuracy versus 2.05% for a deliberately limited dense baseline. But 254 of 437 retrieval-evaluable cases had correct labels despite incomplete required records, and semantic support for citations was not measured. Use the result as a narrow retrieval comparison, not proof of auditability or general superiority.

Paper· Code and benchmark repository ·2,250 synthetic cases · 14 tables · 16 classes ·~7 min
A correct label can still fail the audit

The most revealing number in FinRCA-Bench is 254srcTable 6 and Table 7; Sections 7.4–7.5. In the held-out TPGR run, that many of the 437srcTable 6 and Section 7.5 retrieval-evaluable cases received a correct root-cause label even though the returned records were incomplete under the benchmark’s evidence contract. The attribution table also counts 95srcTable 6 and Table 7; Sections 7.4–7.5 structural retrieval failures against 15srcTable 6 and Table 7; Sections 7.4–7.5 reasoning failures with sufficient retrieval. The same run produced 318srcTable 6 and Table 7; Sections 7.4–7.5 correct classifications out of 439srcTable 6 and Table 7; Sections 7.4–7.5. On the retrieval side, TPGR achieved strict full-contract coverage in 80srcTable 6 and Section 7.5 of 437 cases (18.31%); the output-level evaluation reports strict returned-evidence contract accuracy of 5.72%srcTable 6 and Section 7.5. The gap separates a diagnosis that lands from an investigation another person can check.

That distinction gives the benchmark its point. It frames reconciliation as an investigation across invoices, purchase orders, approvals, allocations, payments, ledger entries, bank activity, and audit records, where relevance follows persisted transaction relationships. Its evidence ladder measures outcome correctness, evidence access, evidence sufficiency, and semantic support. The fourth level remains unadjudicated, leaving the study with record-presence and contract-compliance scores while semantic support stays outside the measured result.

The 5.72% figure needs restraint: the paper gives no numerator or formal output-level predicate for it, while the retrieval-side 80/437 statistic uses a different test. Citation-ID validity was 100%, a context-membership check that leaves support for the causal claim untested. FinRCA-Bench has made part of auditability measurable; the evidentiary link between a citation and an explanation remains outside the experiment.

The benchmark makes evidence access measurable

The benchmark’s control comes from construction. FinRCA-Bench v1.0.0 contains 2,250srcTable 2, Table 3, and Sections 4.1–4.3 deterministic synthetic cases in a selected accounts-payable-to-bank lifecycle: 1,500srcTable 2, Table 3, and Sections 4.1–4.3 injected failures, 100srcTable 2, Table 3, and Sections 4.1–4.3 in each of 15 categories, and 750srcTable 2, Table 3, and Sections 4.1–4.3 NO_FAILURE or hard-negative cases, spread across 14srcTable 2, Table 3, and Sections 4.1–4.3 operational tables. Cases are split by causal vendor group, while labels, mutation provenance, failure manifests, and ground-truth evidence packages stay outside inference-time inputs.

The construction gives the evaluator a cause known independently of the model’s answer. For each case, it defines G_c, a cause-derived set of required source records, and compares that set with the retriever’s returned records. Macro record recall and full-record coverage can then be scored without consulting the predicted label. This is the paper’s cleanest idea: evidence assembly becomes a variable the experiment can intervene on rather than a hidden explanation for a bad answer.

Yet G_c remains a benchmark contract, and the experiment leaves unique necessity untested. It is a record-presence projection derived from the injected cause, and the paper acknowledges that the contracts encode one notion of sufficiency. The 254 correct/incomplete cases could reflect redundant clues, a contract stricter than the minimum, or model shortcuts from partial patterns. Without a minimal-sufficient-evidence ablation, record recall measures alignment with the contract, and the indispensable status of every missing record remains untested.

The fixed model exposes a retrieval bottleneck

The fixed-model comparison isolates the paper’s strongest empirical result. Dense retrieval-augmented generation (Dense RAG) and Typed Provenance Graph Retrieval (TPGR) used the same downstream large language model: gpt-5.6srcSections 5.6 and 7.4-sol at medium reasoning effort, with the same prompt, taxonomy, structured output schema, output limit, and retry policy. The paper uses TPGR as a controlled instrument. Its default-deny graph traverses persisted transaction relationships, with depth capped at three hops and the selected context capped at 40srcSections 5.3 and 5.5 source records; Dense RAG serializes each operational row as a document, searches exhaustively by semantic similarity, and freezes K at 40.

With retrieval as the changed component, Dense RAG recovered 0.83%srcSections 7.2 and 7.4; Table 6 macro required-record recall and reached 2.05%srcSections 7.2 and 7.4; Table 6 exact 16-class accuracy (9/439); all nine exact predictions were NO_FAILURE cases. TPGR reached 77.70%srcSections 7.2 and 7.4; Table 6 macro recall and 72.44%srcSections 7.2 and 7.4; Table 6 accuracy (318/439), a paired difference of 70.39srcSection 7.4 and Table 6 percentage points with a 95%srcSection 7.4 and Table 6 paired-bootstrap interval of 66.06srcSection 7.4 and Table 674.72srcSection 7.4 and Table 6. TPGR’s context was also smaller: 19.56srcTable 6 records and approximately 2,370srcTable 6 source tokens per case, against 40 records and approximately 5,531srcTable 6 tokens for Dense RAG.

Those paired numbers make retrieval a plausible dominant bottleneck in this benchmark. TPGR had 309srcSection 7.4 and Table 6 cases correct that Dense RAG missed, while Dense RAG had zero cases correct that TPGR missed. The comparison still bundles graph structure with access to relevant records. Dense RAG was a deliberately bounded semantic baseline: it used no lexical retrieval, metadata filters, entity-aware expansion, reranking, or hybrid structured retrieval. The paper calls a hybrid baseline the most important missing comparison, so the safe conclusion concerns provenance-aware access relative to this baseline; a general hierarchy of retrieval methods remains outside the experiment.

Multi-hop retrieval helps; the graph case stops there

The validation control gives the graph claim its proper size. On 416srcTable 5 and Section 7.3 validation cases, TPGR raised macro record recall from 68.88%srcTable 5 and Section 7.3 for deterministic Relational Retrieval to 78.70%srcTable 5 and Section 7.3, and full-record coverage from 15.14%srcTable 5 and Section 7.3 (63 cases) to 36.30%srcTable 5 and Section 7.3 (151). TPGR was better on 156srcTable 5 and Section 7.3 cases, tied on 257srcTable 5 and Section 7.3, and worse on three. In the same analysis, 156 cases contained required evidence reachable only at depth two or three, and TPGR made 88srcTable 5 and Section 7.3 cases fully covered through multi-hop traversal.

That is evidence that typed traversal recovers records the simpler structural expansion misses. The downstream causal credit remains unresolved. Relational Retrieval never received a held-out language-model arm, its output contained 2–21srcSections 5.4, 7.3, and 9.4 records, and no depth, relation-registry, or path-selection ablation isolates the source of TPGR’s advantage. The paper establishes a retrieval gain here, while the classification gain still has no specific attribution to multi-hop graph structure.

TPGR’s blind spots are more informative than its average. The paper flags F11, vendor-master change conflict; F13, bank transaction missing from ERP; and F15, incorrect payment-to-bank match, as zero-recall classes on held-out data. It assigns 22srcSection 7.6 and Figure 4 of 23srcSection 7.6 and Figure 4 F11 cases, all 28srcSection 7.6 and Figure 4 F13 cases, and 19srcTable 6 of 20srcSection 7.6 and Figure 4 F15 cases to structural retrieval failure, with the remaining cases technical. Those patterns line up with the frozen design: conservative vendor-hub restrictions, no positive traversal for absence, and no inferred payment-to-bank edge built from amount, date, or reference similarity. The benchmark exposes the boundary of this graph grammar alongside its reach.

Classical models keep the result in proportion

For a system judged only on labels, classical machine learning wins here: it reached 95.44%srcTable 4; Sections 5.1, 5.2, and 7.1 exact accuracy (419/439), ahead of Rules/SQL at 84.97%srcTable 4; Sections 5.1, 5.2, and 7.1 (373/439), while TPGR plus the language model reached 72.44%. The structured baselines receive schema-aligned rules or engineered features and return no source-record evidence; TPGR must assemble context and produce a diagnosis with records. These scores answer different operational questions. Within this generated world, 95.44% is an upper reference for label prediction, with production transfer left open.

The transfer claim is correspondingly narrow. The corpus is synthetic, each failure category has exactly 100 injected cases, the 203srcTable 2; Sections 4.1, 4.3, 9.1, 9.6, and 9.8-case challenge split remains unevaluated, and the completed retrieval experiment uses one downstream language-model configuration and one embedding model. The comparison lacks ordinary lexical, identifier-aware, hybrid, reranked, and entity-linked alternatives. TPGR uses fewer source tokens, while graph construction, storage, latency, cost, provider reliability, concurrency, and recovery behavior were not measured; this is a context-size result rather than an efficiency benchmark.

For builders, the practical instruction is straightforward: report exact diagnosis beside required-record recall and contract-level evidence sufficiency, and keep semantic citation support separate. A root-cause label should open an evidence trail that another person can reconstruct from the underlying records. A high label score remains only a partial account of competence until that trail enters the evaluation.

Grounding — claim → source
The held-out TPGR attribution contains 254 correct labels despite incomplete retrieval, 95 structural retrieval failures, 15 reasoning failures with sufficient retrieval, and 318 exact classifications out of 439. Table 6 and Table 7; Sections 7.4–7.5
TPGR achieves strict full-contract coverage in 80 of 437 retrieval-evaluable cases, while the output-level evaluation reports 5.72% strict returned-evidence contract accuracy. Table 6 and Section 7.5
The 5.72% output-level figure is reported without a numerator or formal output predicate in the evaluation description, and it uses a different test from the 80/437 retrieval-side statistic. Sections 6.3 and 7.5
The evidence ladder contains outcome correctness, evidence access, evidence sufficiency, and semantic support, with the fourth level unadjudicated; citation-ID validity is a context-membership check rather than semantic support. Sections 3.3, 6.3, 7.5, and 9.7
FinRCA-Bench contains 2,250 deterministic synthetic cases, 1,500 injected failures across 15 categories with 100 cases per category, 750 NO_FAILURE or hard-negative cases, and 14 operational tables. Table 2, Table 3, and Sections 4.1–4.3
Cases are split by causal vendor group, while labels, mutation provenance, failure manifests, and ground-truth-derived evidence packages remain private at inference time. Sections 4.1, 4.5, and 5
The evaluator defines a cause-derived required-record set G_c and scores returned records independently of the predicted label using record recall and full-record coverage. Sections 3.2, 6.3, and 6.4
The evidence contracts are record-presence projections derived from injected causes, encode one notion of sufficiency, and were not tested with a minimal-sufficient-evidence ablation. Sections 3.2, 8.4, and 9.5
Dense RAG and TPGR use the same gpt-5.6-sol downstream configuration, prompt, taxonomy, output schema, output limit, and retry policy. Sections 5.6 and 7.4
Dense RAG uses one serialized document per operational row, exhaustive semantic search, and frozen K=40, while TPGR uses a default-deny graph of persisted relationships with a three-hop limit and a 40-record selection cap. Sections 5.3 and 5.5
Dense RAG reaches 0.83% macro required-record recall and 2.05% exact accuracy, while TPGR reaches 77.70% macro recall and 72.44% exact accuracy. Sections 7.2 and 7.4; Table 6
The TPGR–Dense RAG paired accuracy difference is 70.39 percentage points with a 95% paired-bootstrap interval of 66.06–74.72, with 309 TPGR-only correct cases and zero Dense-RAG-only correct cases. Section 7.4 and Table 6
TPGR averages 19.56 records and approximately 2,370 source tokens per context, compared with 40 records and approximately 5,531 tokens for Dense RAG. Table 6
Dense RAG is a bounded semantic baseline without lexical retrieval, metadata filters, entity-aware expansion, reranking, or hybrid structured retrieval, and the paper identifies a hybrid baseline as the most important missing comparison. Sections 5.3 and 9.2
On 416 validation cases, TPGR reaches 78.70% macro record recall and 36.30% full-record coverage, compared with 68.88% and 15.14% for Relational Retrieval; TPGR is better on 156 cases, tied on 257, and worse on three. Table 5 and Section 7.3
The validation analysis contains 156 cases with required evidence reachable only at depth two or three, and TPGR converts 88 cases into fully covered record sets through multi-hop traversal. Section 4.4 and Section 7.3
Relational Retrieval has no held-out downstream language-model arm, returns 2–21 records, and is not compared with TPGR through depth, relation-registry, or path-selection ablations. Sections 5.4, 7.3, and 9.4
F11, F13, and F15 are reported as zero-recall held-out classes, with 22 of 23 F11 cases, all 28 F13 cases, and 19 of 20 F15 cases attributed to structural retrieval failure. Section 7.6 and Figure 4
TPGR forbids unrestricted vendor or employee hub expansion, positive traversal for absent counterpart records, and inferred payment-to-bank edges based on amount, date, currency, or fuzzy identifiers. Figure 1 and Section 5.5
Rules/SQL reaches 84.97% exact accuracy and classical machine learning reaches 95.44%, while neither structured baseline returns source-record evidence. Table 4; Sections 5.1, 5.2, and 7.1
The benchmark is synthetic, every failure category has 100 injected cases, the 203-case challenge split remains unevaluated, and the completed retrieval experiment uses one downstream language-model configuration and one embedding model. Table 2; Sections 4.1, 4.3, 9.1, 9.6, and 9.8
The study reports fewer TPGR source tokens but does not benchmark graph construction, storage, latency, cost, provider reliability, concurrency, or recovery behavior. Table 6 and Section 9.8
The evidence ladder and discussion support reporting outcome correctness, evidence access, and evidence sufficiency separately, with semantic citation support treated as a distinct layer. Sections 3.3, 6.3, and 8.6
Evaluation & Analysis · Reasoning & Agents

WANDR finds the gap between finding facts and proving them

Perplexity’s 500-task benchmark makes research agents build collections whose branches end in evidence, then shows how quickly coverage and completeness break down. The diagnostic design is valuable; its leaderboard needs a narrower reading because the benchmark, judges, and winning system come from the same organization.

TL;DR

WANDR argues that research agents fail less at finding plausible pages than at completing every branch of a requested collection with evidence. Its hierarchy and hard-subtree scoring expose the gap: Perplexity’s hard F1 falls from 0.245 on retrieval-only checks to 0.133 under full verdicts, while deeper or larger collections degrade further. Use it as an engineering stress test for discovery, fan-out, and citation support—not as a universal leaderboard, given author-controlled judging and quota-based recall.

WANDR release ·500 tasks; 170,495 source-backed records ·~8 min
Every requested record creates another branch

A system can find a handful of credible companies and still fail a task that asks for at least 70srcceo_cfo_appointments example, because every missing company is part of the answer. That simple mismatch is why WANDR is useful: it measures the work of finishing a collection and proving each member.

Perplexity’s Wide ANd Deep Research (WANDR) is an open benchmark of 500srcOpening; Realistic tasks, generated at scale data-collection tasks drawn from de-identified patterns in production requests. The tasks cover competitive mapping, due diligence, literature review, market analysis, product comparison, and talent sourcing. Each separates breadth from depth. A system has to discover a large set of qualifying entities, then investigate every one far enough to support all requested claims with evidence.

At its core is a qualification-key hierarchy. A structure such as company(n) → employee(m) → URL(k) asks for n companies, m employees at each company, and k supporting pages for each employee. Other tasks can be flat, nested, matrix-shaped, or split across multiple evidence branches. One released task makes the obligation explicit: find at least 70 US-based companies with a CEO or CFO appointment in a specified window, then provide an authoritative appointment page and a listing-authority page for each. That is 140srcceo_cfo_appointments example records, and an appointment without separate listing proof leaves the company incomplete.

The missing branch is where the score collapses

Six production systems ran on all 500 tasks under pinned configurations and passed through the same fetch, identity-resolution, judging, and scoring pipeline. Perplexity’s Search as Code (SaC) led the main run at 0.363srcWhat we found soft F1 and 0.133srcWhat we found hard F1. Anthropic reached 0.249srcWhat we found and 0.072srcWhat we found; the other systems reached no more than 0.121srcWhat we found soft F1 and 0.035srcWhat we found hard F1.

Soft F1 gives partial credit to incomplete members. Hard F1 requires the full requested subtree to be correct, which makes it the sharper test for a collection that is supposed to be complete. The benchmark’s best hard precision and hard recall were 0.150srcWhat we found — Partial progress is common; complete coverage is not and 0.134srcWhat we found — Partial progress is common; complete coverage is not—roughly one in seven submitted members and one in seven requested members received full credit. On Perplexity’s run, as target volume rose from the smallest to largest bin, hard precision fell from 0.235srcWhat we found — Scale compounds the problem; Deeper hierarchies are harsher still to 0.096srcWhat we found — Scale compounds the problem; Deeper hierarchies are harsher still and hard recall from 0.219srcWhat we found — Scale compounds the problem; Deeper hierarchies are harsher still to 0.079srcWhat we found — Scale compounds the problem; Deeper hierarchies are harsher still. With three or more intermediate keys, its hard precision and recall fell to 0.019srcWhat we found — Scale compounds the problem; Deeper hierarchies are harsher still and 0.017srcWhat we found — Scale compounds the problem; Deeper hierarchies are harsher still, from 0.392srcWhat we found — Scale compounds the problem; Deeper hierarchies are harsher still and 0.378srcWhat we found — Scale compounds the problem; Deeper hierarchies are harsher still with no intermediate key.

Those comparisons are bin associations within the benchmark; the figure caption explicitly says they do not establish a causal effect of scale or structure. They still give an engineer a useful failure hypothesis: each added member or branch creates another place where a full record can fail.

Effort changes the score. On a matched 45srcWhat we found — effort-setting evaluation-task subset, Perplexity reached 0.447srcWhat we found — effort-setting evaluation soft F1 and 0.224srcWhat we found — effort-setting evaluation hard F1 at xhigh. In the main run, its lead came with a median 14.9srcWhat we found — main-run comparison-minute solve, $5.20srcWhat we found — main-run comparison per task, and 3.82srcWhat we found — main-run comparison million reported tokens; OpenAI and Exa were faster and cheaper but much weaker, while Anthropic came closest on quality with substantially heavier resource use. These numbers describe a particular system-and-budget configuration.

Pages are easy; complete proof is hard

WANDR grades open-ended tasks without an exhaustive answer key. For each submitted record, it re-fetches the cited page, checks that the page is usable, the claim is clear and in scope, the excerpts appear on it, and the page and excerpts support every requirement. Binary verdicts roll up into precision, recall, and F1; a retrieval-only score separates reaching a plausible page from satisfying the full evidence standard.

The breakdown matters more than the leaderboard. Terminal evidence-slot completion ranged from 0.979srcWhat we found — discovery is the first structural bottleneck; Mean task-level raw structural completion figure to 0.994srcWhat we found — discovery is the first structural bottleneck; Mean task-level raw structural completion figure across the six full runs, versus 0.611srcWhat we found — discovery is the first structural bottleneck; Mean task-level raw structural completion figure to 0.951srcWhat we found — discovery is the first structural bottleneck; Mean task-level raw structural completion figure for top-level discovery and 0.767srcWhat we found — discovery is the first structural bottleneck; Mean task-level raw structural completion figure to 0.967srcWhat we found — discovery is the first structural bottleneck; Mean task-level raw structural completion figure for enrichment. Duplicate collapse cost only 0.017–0.205srcWhat we found — discovery is the first structural bottleneck; Mean task-level raw structural completion figure percentage points. The first structural bottleneck is therefore discovery, before the final URL is attached.

For five systems, only 3.2%srcWhat we found — Finding a usable page is usually easy; finding complete evidence is hard8.9%srcWhat we found — Finding a usable page is usually easy; finding complete evidence is hard of submitted pages were unusable; OpenAI was the 23.1%srcWhat we found — Finding a usable page is usually easy; finding complete evidence is hard outlier. The larger losses came after that: 33.6%srcWhat we found — Finding a usable page is usually easy; finding complete evidence is hard68.3%srcWhat we found — Finding a usable page is usually easy; finding complete evidence is hard of pages failed at least one substantive requirement, while 57.5%srcWhat we found — Finding a usable page is usually easy; finding complete evidence is hard86.6%srcWhat we found — Finding a usable page is usually easy; finding complete evidence is hard of submitted excerpts failed to support everything their records claimed. For Perplexity, soft F1 fell from 0.531srcWhat we found — Finding a usable page is usually easy; finding complete evidence is hard under retrieval-only checks to 0.363 under the full verdict, and hard F1 from 0.245srcWhat we found — Finding a usable page is usually easy; finding complete evidence is hard to 0.133. Reaching a plausible page is only the start of a finished record.

The useful result is diagnostic

The strongest part of WANDR is its decomposition. Its score tree separates discovery, enrichment, identity handling, page qualification, and evidence extraction, giving an engineering team a way to distinguish a search problem from a fan-out, entity-resolution, or citation-construction problem. That is more actionable than a single end-to-end score.

The task set has the scale to make that stress test consequential. The median task asks for 50srcRealistic tasks, generated at scale members, four records per member, and 245srcWhat we found — Finding a usable page is usually easy; finding complete evidence is hard records overall. Across the release, 500 tasks call for 170,495srcRealistic tasks, generated at scale source-backed records; difficulty is split into 167srcRealistic tasks, generated at scale lower-, 166srcRealistic tasks, generated at scale middle-, and 167 higher-difficulty examples.

The construction pipeline has four stages: seeding from de-identified requests; authoring through an author–critic loop and mechanical linting; admission, which tests reachability by merging 10srcRealistic tasks, generated at scale12srcRealistic tasks, generated at scale authoring rollouts and audits the task judge; and curation. Human sign-off is optional during admission. It is a sensible way to keep human effort focused on quality control instead of exhaustive annotation.

The same structure fits Search as Code well. Retrieval, filtering, fan-out, rendering, joins, deduplication, and stopping logic can be expressed programmatically, while deterministic computation handles repeated operations outside the model context. The paper presents that profile as consistent with SaC’s stronger breadth retention and excerpt construction. Without a component ablation or matched control, consistency is the limit of the explanation.

The leaderboard needs a smaller frame

WANDR is also an internally controlled evaluation. The same organization built the benchmark and supplied the winning Search as Code system; it also controls task seeding, the author–critic loop, task-specific judges, admission, and curation. The evaluation reports no human-agreement study or judge-error analysis for entity qualification, source authority, entailment, completeness, or duplicate resolution. Human sign-off is optional at admission, and the process does not establish the released judge’s precision or recall.

The grader also re-fetches cited pages. The evaluation gives no stated policy for stale, conflicting, redirected, dynamic, or inaccessible content, so the same citation can become time-dependent. Baseline comparison is likewise hard to reconstruct. The phrase “pinned configuration” leaves model versions, prompts, tool permissions, search budgets, retry and timeout policies, tuning procedures, and full cost accounting unspecified. The main leaderboard reports one configuration per system, with no seeds, repeated runs, confidence intervals, or significance tests; the effort sweep covers only a matched 45-task subset. The safe interpretation is a within-release stress test. A universal ranking claim would outrun this evidence.

Recall carries a separate scope limit. WANDR uses requested volume as its denominator, filling a shortfall with zeros. For a task asking for at least 70, the grader can verify 70 qualifying submitted companies, yet it has no independently established universe against which to count omissions. An agent can satisfy the quota by choosing easier valid entities and leave harder or less visible ones untouched. The score measures the quality and completeness of the chosen set; it cannot establish exhaustive recall across the world’s qualifying entities.

Use WANDR as a stress test

For teams building research agents, the practical use is clear. Run the hierarchy when the deliverable is a collection; inspect discovery, enrichment, page requirements, and excerpt support before changing the model; report the effort setting and resource budget beside F1; and use hard scores to count finished records within the benchmark. WANDR makes the requirement explicit that every branch end in a claim and evidence pair a reader can recheck.

Ask which branch failed, then make the next run close it.

Grounding — claim → source
WANDR is an open benchmark of 500 realistic data-collection tasks for wide-and-deep research. Opening; Realistic tasks, generated at scale
The benchmark separates breadth, which discovers qualifying entities, from depth, which supports every requested claim with evidence. Why wide-and-deep research matters
The task set includes competitive mapping, due diligence, literature review, market analysis, product comparison, and talent sourcing. Opening; Why wide-and-deep research matters
The qualification-key hierarchy can express company-to-employee-to-URL structures, flat lists, nested searches, matrices, and multiple evidence branches. Why wide-and-deep research matters
The CEO/CFO appointment task asks for at least 70 US-based companies, separate appointment and listing evidence for each, and 140 records overall. ceo_cfo_appointments example
Six production systems ran all 500 tasks through the same fetch, identity-resolution, judging, and scoring pipeline; Perplexity Search as Code led at 0.363 soft F1 and 0.133 hard F1, Anthropic reached 0.249 and 0.072, and the remaining systems reached no more than 0.121 and 0.035. What we found
Soft scores award partial credit to incomplete members, while hard scores require a correct full subtree. Reference-free, evidence-verified grading
The best hard precision and hard recall were 0.150 and 0.134, interpreted as roughly one in seven submitted and requested members. What we found — Partial progress is common; complete coverage is not
Perplexity’s hard precision and recall fell from 0.235 and 0.219 in the smallest target-volume bin to 0.096 and 0.079 in the largest, and from 0.392 and 0.378 with no intermediate key to 0.019 and 0.017 with three or more. What we found — Scale compounds the problem; Deeper hierarchies are harsher still
The scale and hierarchy comparisons are task-bin associations, and the figure caption says the lines do not imply a causal effect. Hard precision, hard recall, latency, and cost by target volume and hierarchy depth figure caption
On a matched 45-task effort subset, Perplexity reached 0.447 soft F1 and 0.224 hard F1 at xhigh. What we found — effort-setting evaluation
Perplexity’s main-run median solve time was 14.9 minutes, its mean cost was $5.20 per task, and it reported 3.82 million tokens per task; OpenAI and Exa were faster and cheaper with lower scores, while Anthropic used more resources for similar quality. What we found — main-run comparison
The grader re-fetches cited pages and checks page usability, claim scope and clarity, excerpt fidelity, and support for every requirement. Reference-free, evidence-verified grading; The grading pipeline
Terminal evidence-slot completion ranged from 0.979 to 0.994, top-level discovery from 0.611 to 0.951, and enrichment from 0.767 to 0.967; duplicate collapse caused 0.017–0.205 percentage points of count loss. What we found — discovery is the first structural bottleneck; Mean task-level raw structural completion figure
For five systems, unusable submitted pages accounted for 3.2%–8.9%, OpenAI was at 23.1%, page-requirement failures ranged from 33.6% to 68.3%, and excerpt-support failures ranged from 57.5% to 86.6%. What we found — Finding a usable page is usually easy; finding complete evidence is hard
Perplexity’s soft F1 fell from 0.531 under retrieval-only checks to 0.363 under the full verdict, while hard F1 fell from 0.245 to 0.133. What we found — Finding a usable page is usually easy; finding complete evidence is hard
WANDR’s score tree localizes failures to discovery, enrichment, identity handling, page qualification, and evidence extraction. Reference-free, evidence-verified grading; The grading pipeline
The median task asks for 50 members, four records per member, and 245 records overall; the 500 tasks call for 170,495 source-backed records and are split into 167, 166, and 167 difficulty examples. Realistic tasks, generated at scale
Task construction uses seeding, an author–critic authoring loop, mechanical linting, admission, and curation; admission tests reachability by merging 10–12 authoring rollouts and audits the task judge. Realistic tasks, generated at scale
Search as Code can express retrieval, filtering, fan-out, rendering, joins, deduplication, and stopping logic programmatically, and the paper links that profile to stronger breadth retention and excerpt construction without reporting a component ablation or matched control. Search as Code is well matched to this task shape; forensic_context.red_flags
The benchmark’s authors control both WANDR and the winning Search as Code system, as well as task seeding, authoring, task-specific judges, admission, and curation. forensic_context.red_flags; Opening; What we found
No human-agreement study or judge-error analysis is reported for qualification, source authority, entailment, completeness, or duplicate resolution, and human sign-off is optional. forensic_context.ledger; forensic_context.red_flags; Realistic tasks, generated at scale
The evaluation does not state operational policies for stale, conflicting, redirected, dynamic, or inaccessible pages, while the grader re-fetches cited pages. Reference-free, evidence-verified grading; forensic_context.red_flags
Exact baseline model versions, prompts, tool permissions, budgets, retries, timeouts, tuning procedures, and full cost accounting are unspecified; the main run has no reported seeds, repeated runs, confidence intervals, or significance tests, and the effort sweep uses 45 tasks. What we found; forensic_context.red_flags
WANDR’s recall denominator is the requested volume rather than an independently established universe of all qualifying entities, so the metric measures quota completion rather than exhaustive world-level recall. Reference-free, evidence-verified grading; forensic_context.ledger — recall denominator
Branch-level diagnostics, hard subtree scores, and effort and resource reporting provide the basis for using WANDR as an engineering stress test. Reference-free, evidence-verified grading; What we found; What’s next
Reasoning & Agents · Evaluation & Analysis

Claude’s science demo is real—and narrower than the pitch

Anthropic used Claude to design minibinders against 15 protein targets and to interpret raw nuclear magnetic resonance (NMR) and liquid chromatography–mass spectrometry (LC-MS) files. The work shows a general model can coordinate specialist scientific tools and produce useful first-pass results; its protein comparisons and chemistry validation are too limited to support a broad claim about autonomous drug discovery.

TL;DR

Anthropic’s demonstrations support a narrower claim than autonomous drug discovery: Claude can orchestrate established protein-design tools through wet-lab testing and turn raw NMR/LC-MS files into useful first-pass reports. The protein campaign found 354 binders from 1,320 designs across 14 of 15 targets, but comparisons lack matched controls and key methodological details, while chemistry evidence comes from one routine sample. Use it to widen search and accelerate review, not replace synthesis, assays, or expert validation.

Anthropic research post ·15 protein targets; 1,320 designs; one quality-control sample ·~8 min
The result lives in the handoff layer

Claude chose where to design on each protein target, generated candidate structures and sequences by orchestrating publicly available structure-design, sequence-design, folding, and co-folding models, ran several cycles of in silico optimization, and screened candidates for expression, solubility, and binding. Adaptyv Bio and Twist Bioscience then produced and tested those designs in the lab. In the chemistry experiment, Claude decoded raw instrument files and returned a calibrated NMR spectrum, peak tables, mass and ultraviolet spectra, and a purity report. Anthropic’s strongest claim sits at that workflow level: the demonstrated contribution is the handoff layer between a general model and specialist tools.

That is a real bottleneck to attack. Machine-learning protein systems already design and rank candidates, yet the report says computational experts still need days, and often weeks, of orchestration. In analytical chemistry, routine instrument runs take minutes; the tedious work begins with vendor-specific files and their interpretation. The two demonstrations show an agent operating an established scientific stack and delivering a usable first pass. They leave a new binder-design engine and end-to-end drug development outside the evidence.

The protein campaign reaches the bench, with uneven results

The protein campaign had real experimental contact. Claude Opus 4.8src“The campaign” — target-selection paragraph and Mythos Preview worked against 15src“The campaign” — target-selection paragraph targets, including all of Adaptyv Bio’s BenchBB targets and two novel targets, 15-PGDH and GDF-8. The multi-target setup allowed 48src“The campaign” — compute and autonomy setup hours and up to 12,500src“The campaign” — compute and autonomy setup NVIDIA H100 hours of compute; Mythos Preview also ran one target per session for 24src“The campaign” — compute and autonomy setup hours, with up to 2,500src“The campaign” — compute and autonomy setup H100 hours per target. After launch, the researchers supplied no additional scientific, technical, or operational guidance. Adaptyv Bio and Twist Bioscience produced and tested the candidates, and the report counts 354src“Claude’s performance on the targets” — campaign totals binders from 1,320src“Claude’s performance on the targets” — campaign totals designs against 14src“Claude’s performance on the targets” — campaign totals of the 15 targets.

The arm-level rates give the headline result some substance. Multi-target Mythos Preview reached 26.7%src“Claude’s performance on the targets” — hit-rate paragraphs, and Opus 4.8 reached 22.6%src“Claude’s performance on the targets” — hit-rate paragraphs; the report describes 10src“Claude’s performance on the targets” — hit-rate paragraphs15%src“Claude’s performance on the targets” — hit-rate paragraphs as typical for current campaigns. Mythos reached 35.1%src“Claude’s performance on the targets” — hit-rate paragraphs when it worked target by target. RBX1 is the sharpest example: 40%src“Claude’s performance on the targets” — RBX1 subsection for Mythos in single-target mode against 3.7%src“Claude’s performance on the targets” — RBX1 subsection among Adaptyv Bio competition participants, with a top-ranked design reported to outperform the winning entry, which was one of 245src“Claude’s performance on the targets” — RBX1 subsection designs entered. The candidates went into wet-lab testing, so these figures describe measured binders rather than model scores.

The target-level picture keeps the result honest. Opus 4.8 produced multiple binders to TNFα, including designs that bound human, cynomolgus monkey, and mouse TNFα, while Mythos Preview failed on that target. Claude also produced 15 confirmed binders across six targets containing at least 20%src“Claude’s performance on the targets” — β-sheet subsection β-strand. Against maltose-binding protein (MBP), all 90src“Claude’s performance on the targets” — MBP subsection designs lacked a confirmed hit, although one showed a weak, reproducible signal. That is a capable search process with meaningful target dependence, a more useful conclusion than blanket superiority.

The rates are promising; the comparison is not yet fair

The percentages are promising; the comparison is not yet fair. The 10–15% baseline is presented as a typical rate, without a same-target rerun of a current pipeline under the same assay, design count, compute budget, and expert effort. The RBX1 number comes from competition participants rather than a matched control. The internal mode comparison bundles several changes as well: the multi-target Mythos run had 48 hours and up to 12,500 H100 hours across the panel, while the single-target runs had 24 hours and up to 2,500 H100 hours per target. The 35.1% rate could reflect target focus, resource allocation, stochastic search, or some combination.

The panel itself is benchmark-heavy, and the report gives no complete inclusion or exclusion protocol. That limits how far this result can be generalized. The setup says Claude was asked to design 30src“The campaign” — design-arm and 30-design paragraphs; “Claude’s performance on the targets” — total-design paragraph binders for each of the 15 targets, and it describes three arms. If the 30-design request applied to every arm, that implies 1,350src“The campaign” — design-arm and 30-design paragraphs; “Claude’s performance on the targets” — total-design paragraph requested designs; the performance section reports 1,320, with no reconciliation. The 14-of-15 endpoint is presented for the multi-arm campaign, while the rates are split by arm; it is an across-arm result, with no single-condition denominator. The comparison as presented gives no exact hit or high-affinity thresholds, assay controls, replicate structure, independent seeds, or uncertainty estimates, and the authors say further characterization is planned to confirm the hit rates and affinity measurements. These are preliminary screening results, with a useful signal and a still-uncertain effect size.

Autonomy depends on the setup that precedes the clock. Researchers selected the panel, wrote an extensive protein-design prompt, supplied internet access and connectors for Google Drive, Slack, Gmail, and BioRxiv, provisioned GPUs, and handled access approvals and infrastructure monitoring. The run also had no limit on token or sub-agent budgets within the allotted time. Claude then worked without additional scientific, technical, or operational guidance. That is autonomous execution after configuration; the report gives no accounting of expert setup time, actual GPU or token consumption, or monetary cost. Expertise has moved upstream into the prompt and environment.

The chemistry win is file handling

Opus 5’s chemistry experiment is cleaner as a product demonstration and smaller as an evaluation. Given a contract lab’s raw files and a two-sentence prompt, it processed a routine quality-control sample’s NMR and LC-MS data in 23src“Claude runs the analytical chemistry workflow” — task and timing paragraphs and 19src“Claude runs the analytical chemistry workflow” — task and timing paragraphs minutes, respectively, in parallel, without vendor software or an operator. It returned an 18src“Claude runs the analytical chemistry workflow” — NMR and LC-MS result paragraphs-peak NMR table with hydrogen counts within 0.08src“Claude runs the analytical chemistry workflow” — NMR and LC-MS result paragraphs ¹H of the lab’s values and measured LC-MS purity at 96.4%src“Claude runs the analytical chemistry workflow” — NMR and LC-MS result paragraphs, versus 96.33%src“Claude runs the analytical chemistry workflow” — NMR and LC-MS result paragraphs in the lab’s analysis. For the undocumented LC-MS format, Claude first reproduced the instrument’s recorded totals for all 2,664src“Claude runs the analytical chemistry workflow” — LC-MS paragraph scans. This is exactly the kind of tedious file handling that can make a general model useful to a chemist.

Then the run exposed why review still matters. Claude flagged four broad NMR peaks as hydrogens probably attached to nitrogen or oxygen and proposed adding heavy water, the same check the laboratory independently ran three days later. Its first pass said all four peaks had disappeared; its self-check corrected that to two and reached the lab’s conclusion. The correction is evidence of error detection, while the initial mistake keeps the output from being self-authenticating.

Still, this was one routine quality-control sample. Agreement with a single lab analysis is agreement with a reference workflow; it does not supply an independent ground truth for compound identity or purity. Routine proton NMR runs take two to three minutes and LC-MS runs about 10; the lab records about two minutes of hands-on NMR processing, with an LC-MS report following roughly two hours after loading. The comparison between a roughly 25-minute parallel model run and a four-day finished report captures queue and scheduling delay as well as analysis. It shows a faster response path, while labor and cost savings remain unmeasured.

The practical win is a faster first pass

A scientist could use Claude to choose and chain established design tools, generate candidate binders, or turn raw instrument files into a reviewable report. The protein experiment shows that this front end can reach the bench with useful hit rates; the chemistry experiment shows that file decoding and first-pass interpretation can happen without specialist vendor software. In both cases, the model makes the workflow more parallel while synthesis, binding assays, and human review remain the gates that determine whether the output survives.

Availability sets another boundary. The report describes Opus 5 as generally available, while protein-design work remains unavailable for general access under a planned scientist access program because of dual-use concerns. The authors also say minibinders are not a standard therapeutic modality and that even a high-affinity binder is only the first step toward a drug-like molecule. The campaign contains no downstream evidence on specificity, stability, aggregation, immunogenicity, pharmacology, or in vivo efficacy, and the chemistry test covers no varied sample set or orthogonal structural standard. Use Claude to widen the search and collapse routine analysis, then spend validation effort where a plausible-looking answer can fail. It can move the first draft of a design or assay report closer to the bench; the bench still decides whether it is right.

Grounding — claim → source
Claude’s protein workflow selected binding sites, orchestrated publicly available structure-design, sequence-design, folding, and co-folding models, optimized candidates in silico, and screened for expression, solubility, and binding; Adaptyv Bio and Twist Bioscience produced and tested the designs. “The campaign” — workflow and validation paragraphs
In the chemistry workflow, Claude converted raw instrument files into a calibrated NMR spectrum, peak tables, mass and ultraviolet spectra, and purity outputs. “Claude runs the analytical chemistry workflow” — NMR and LC-MS output paragraphs
The report says existing protein-design models expedite design and ranking but still require days or weeks of expert orchestration, while routine NMR and LC-MS runs take minutes and file interpretation is tedious. “Claude designs proteins” and “Claude runs the analytical chemistry workflow”
The protein campaign used Opus 4.8 and Mythos Preview on 15 targets, including all of Adaptyv Bio’s BenchBB targets, 15-PGDH, and GDF-8. “The campaign” — target-selection paragraph
The multi-target setup allowed 48 hours and up to 12,500 NVIDIA H100 hours, while the single-target Mythos setup allowed 24 hours and up to 2,500 H100 hours per target; no additional scientific, technical, or operational guidance was supplied after launch. “The campaign” — compute and autonomy setup
External evaluators reported 354 binders from 1,320 designs against 14 of 15 targets. “Claude’s performance on the targets” — campaign totals
Arm-level hit rates were 26.7% for Mythos Preview, 22.6% for Opus 4.8, and 35.1% for Mythos Preview in single-target mode, with 10–15% described as typical. “Claude’s performance on the targets” — hit-rate paragraphs
On RBX1, Mythos Preview reached 40% versus 3.7% among competition participants, and its top-ranked design was reported to outperform the winning design among 245 entries. “Claude’s performance on the targets” — RBX1 subsection
Opus 4.8 produced TNFα binders that bound human, cynomolgus monkey, and mouse TNFα, while Mythos Preview failed on that target. “Claude’s performance on the targets” — TNFα subsection
Claude produced 15 confirmed binders across six targets with at least 20% β-strand. “Claude’s performance on the targets” — β-sheet subsection
MBP produced no confirmed binders among 90 designs, although one showed a weak, reproducible binding signal. “Claude’s performance on the targets” — MBP subsection
The 10–15% reference is a generic typical-rate comparison, RBX1 is compared with competition participants rather than a matched current pipeline, and the single-target and multi-target modes differ in wall time and compute allocation. “Claude’s performance on the targets” — hit-rate and RBX1 passages; “The campaign” — mode descriptions
The selected panel combines common benchmark targets, all of Adaptyv Bio’s BenchBB, and 15-PGDH and GDF-8, without a complete inclusion or exclusion protocol. “The campaign” — target-selection paragraph
The setup describes three design arms and 30 requested binders per target; 30 designs across all three arms would imply 1,350 requested designs, while the performance section reports 1,320 total designs and an across-arm 14-of-15 endpoint. “The campaign” — design-arm and 30-design paragraphs; “Claude’s performance on the targets” — total-design paragraph
The presented protein comparison gives no exact hit or high-affinity thresholds, assay controls, replicate structure, independent seeds, or uncertainty estimates, and the authors plan more characterization. “Claude’s performance on the targets” — hit-rate, affinity, and closing characterization passages
The setup included an extensive prompt, internet access, Google Drive, Slack, Gmail, and BioRxiv connectors, GPU access, and no token or sub-agent budget limits; humans handled approvals and monitoring before Claude worked without further guidance. “The campaign” — resource list and human-involvement paragraphs
Only upper-bound compute allocations are stated; actual GPU or token use, expert setup labor, and monetary cost are not quantified. “The campaign” — compute ceilings and resource list
Opus 5 processed one routine quality-control sample from raw NMR and LC-MS files plus a two-sentence prompt in 23 and 19 minutes in parallel, without vendor software or an operator. “Claude runs the analytical chemistry workflow” — task and timing paragraphs
The chemistry output contained 18 NMR peaks with hydrogen counts within 0.08 ¹H of the lab’s values and purity of 96.4% versus 96.33%. “Claude runs the analytical chemistry workflow” — NMR and LC-MS result paragraphs
Claude reproduced the instrument’s recorded totals for all 2,664 LC-MS scans before performing further analysis. “Claude runs the analytical chemistry workflow” — LC-MS paragraph
Claude flagged four NMR peaks, proposed heavy water, and corrected an initial claim that all four disappeared to a conclusion that only two did; the lab ran the check three days later. “Claude runs the analytical chemistry workflow” — NMR paragraph
The lab report arrived four days after the first spectrum, while routine proton NMR and LC-MS runs take two to three and about 10 minutes, hands-on NMR processing about two minutes, and LC-MS reporting roughly two hours after loading. “Claude runs the analytical chemistry workflow” — timing paragraphs
The report describes Opus 5 as generally available, while protein-design capabilities remain unavailable for general access under a planned scientist access program because of dual-use concerns. “Agentic biological discovery is dual-use” and “Claude runs the analytical chemistry workflow”
The conclusion says minibinders are not a standard therapeutic modality and that high-affinity binding is only the first step toward a drug-like molecule; no downstream therapeutic characterization is presented. “Conclusion”
The chemistry evaluation consists of one routine quality-control sample and supplies no diverse test set or orthogonal structural ground truth. “Claude runs the analytical chemistry workflow” — sample description and comparison paragraphs
Evaluation & Analysis

When ASR Follows the Transcript Instead of the Audio

A study of 11 open-source speech recognizers finds that the strongest VoxPopuli performers are unusually willing to reproduce a benchmark transcript when the audio is masked, contradictory, or ambiguous. The probes are useful and the pattern is worth testing; WER inflation remains unquantified, with benchmark conditioning entangled with speaker, corpus, and language-model cues.

TL;DR

This study argues that low ASR leaderboard WER can coincide with models learning benchmark transcript conventions rather than relying only on audio. Across 11 open-source models, the six with 5.4–5.8% VoxPopuli WER had markedly higher reference-following rates in underdetermined probes, while generic and fresh voices weakened the pattern. The association is confounded by exposure, speaker and corpus cues, and language-model priors, so use the probes alongside WER rather than treating them as evidence of measured score inflation.

Paper· Code repository ·11 open-source models; English VoxPopuli ·~7 min
A low WER can hide a learned convention

Among 11srcMethods open-source automatic speech recognition (ASR) models tested on English VoxPopuli, the six with the best reported word error rates (WERs)—5.4%srcResults, opening paragraph; Figure 2 to 5.8%srcResults, opening paragraph; Figure 2—also had the highest rates of choosing the benchmark’s reference rendering in deliberately underdetermined cases: 0.18srcResults, opening paragraph; Figure 2 to 0.30srcResults, opening paragraph; Figure 2 on the paper’s reference-disagreement accept-ref measure. Every model at 6.5%srcResults, opening paragraph; Figure 2 WER or above was at 0.10srcResults, opening paragraph; Figure 2 or below.

That is the kind of pattern a leaderboard cannot explain. A public transcript can become an answer key: a model may learn which error, spelling, or editorial convention earns credit, then reproduce it when the audio leaves room for another answer. The authors define those gains as “benchmark optimization,” or “benchmaxxing.” Their useful contribution is a test that makes the habit visible. The stronger claim—that the behavior has inflated scores without improving general transcription ability—still needs a firmer test.

The probes force audio and reference apart

The measure behind that comparison is built around an uncomfortable question. Each probe begins at a position where the audio underdetermines the reference transcript. The authors pair the reference rendering, r, with a competing rendering, a, intended to be supported by the audio or acoustically equivalent. Under standard greedy decoding, accept-ref is the fraction of those positions at which the model emits r rather than a. The premise is conditional: if the audio leaves both renderings viable and a model repeatedly chooses r, the pattern is evidence of a benchmark cue.

Reference disagreement uses cases where the benchmark transcript conflicts with the sound; masked-number recovery removes the relevant number from the audio; orthographic switching tests equivalent conventions, including honorific and archaic-spacing cases. The tests turn a broad concern about benchmark dependence into an observable choice. They ask what the system does when sound alone cannot settle the answer.

To locate the trigger, the authors generated synthetic speech using voices cloned from evaluation speakers, generic voices, and fresh speakers in the same domains. Separate mechanistic experiments used activation patching, attention readouts, low-rank linear steering, and appended audio. The paper reports bidirectional flips in at least some cases. That gives the behavior a manipulable footprint, even if it does not yet explain what the footprint represents.

Fresh voices weaken the signal

That setup produces its strongest signal on public data. On masked-number recovery, several of the same models had slightly higher accept-ref on public VoxPopuli and LibriSpeech than on the fresh held-out sets libri-fresh and ep-fresh; the top models on LibriSpeech reached about 0.40srcResults §3.3; Figure 3; Appendix Table 4. The orthographic tests pointed in the same direction: six of 11 models were reported to exceed a 0.5srcResults §3.3; Figure 3; Appendix Table 4 switch-rate baseline on the honorific test, and eight of 11 exceeded it on archaic spacing. Together, these results suggest sensitivity to corpus conventions at a granularity finer than a dataset label.

More revealing is the voice control. Clones of VoxPopuli and LibriSpeech evaluation speakers produced directionally similar accept-ref to the original recordings. Generic voices reading the identical transcript lowered accept-ref for many models, while clones of fresh speakers from the same domain often landed closer to the generic condition. Because the words stayed fixed in the generic-voice comparison, this is the paper’s strongest clue that the trigger is attached to a benchmark-associated acoustic or speaker cue.

The language-model-prior control compares audio lift against a causal language-only condition. For elevated models—Cohere-Transcribe, Canary-Qwen-2.5B, Phi-4-Multimodal, and Higgs-Audio-v3-8B—the reported audio lift remained positive on real recordings and evaluation-speaker clones, then collapsed toward zero for generic voices. That pattern is suggestive, though changing the voice also changes recording conditions, prosody, and synthesis artifacts. The control narrows the story; it does not isolate one cause.

The evidence stops short of score inflation

That is where the paper’s interpretation outruns its design. The central comparison is cross-sectional: 11 systems spanning encoder–decoder/transducer and speech–large language model (LLM) architectures, roughly 0.6 billion to 8 billion parameters, with different training mixtures. Figure 2 takes WER from the June 2026srcFigure 2 caption; Methods; Conclusion Open ASR Leaderboard, whereas accept-ref comes from the study’s own greedy-decoding evaluation. The 5.4% to 5.8% versus 6.5% or higher split is descriptive. Most detailed evidence is English VoxPopuli, with LibriSpeech used for selected extensions. With no matched training exposure, pinned common decoding protocol, or uncertainty-aware analysis, the association could reflect benchmark optimization, model quality, language-model priors, or speaker and transcript exposure.

The labels themselves carry a heavy burden. The Methods section defines each item through an r,a pair, and the Results points to human-annotated data and a consensus panel, yet the paper does not report item counts, masking details, annotator agreement, or enough item-level examples to show how often a is uniquely supported by the signal. A masked number has no acoustic realization in the masked segment, while orthographic alternatives are acoustically identical. A model may choose the reference through an ordinary language prior, speaker identity, prosody, channel, or editorial convention. The conclusion acknowledges that surrounding acoustic context can legitimately affect transcription; the voice controls change several of those variables together.

VoxPopuli brings a separate exposure question. The Methods section reports that 40%srcMethods, VoxPopuli description of test speakers overlap with the training split in the Hugging Face version. That makes an exposure audit important, though it does not establish that every evaluated model trained on that version or quantify equivalent exposure through other public data. The paper reports no significant accept-ref regression among non-leaked speakers, but gives no group sizes or effect sizes to make that null result persuasive. The authors describe ep-fresh and libri-fresh as post-cutoff, same-domain sets, and DaiKon as a private control of 450srcMethods, held-out and fresh-data description conversational clips. The reported results include no DaiKon WER and do not show accept-ref predicting naturalistic errors, so the practical score-inflation claim remains unmeasured.

The mechanistic conclusion has the same boundary. Steering or appended audio can change a response, but output control alone does not identify a benchmark-specific representation. The reported experiments give no clear no-op or irrelevant-audio controls, intervention-selection holdouts, or cross-model and cross-layer replication. The causal story is therefore preliminary.

Use it as a pre-leaderboard sanity check

The practical contribution is easy to carry forward. Alongside WER, an ASR evaluation can include positions where the reference is underdetermined, then measure whether the model follows the acoustically supported alternative or a corpus convention. The same test on fresh speakers and naturalistic recordings can tell a developer whether a low WER travels beyond the benchmark’s acoustic signature. Its natural role is diagnostic alongside WER.

For this paper, the right conclusion is narrow. In the 11-model comparison, the best public WERs coincide with more reference-following, and the behavior weakens under generic and fresh voices. The pattern is important enough to add to evaluation practice; the size of any WER inflation and any loss on real-world transcription remain unknown. Use the probe alongside WER: a model that follows an acoustically supported alternative when the audio leaves room for one has earned more trust than a model that has learned the benchmark’s local convention.

Grounding — claim → source
The study evaluates 11 open-source ASR models spanning encoder–decoder/transducer and speech–LLM architectures, focuses on English VoxPopuli, and uses LibriSpeech for selected extensions. Methods
The six models with 5.4% to 5.8% VoxPopuli WER have reference-disagreement accept-ref of 0.18 to 0.30, while every model at 6.5% WER or higher is at or below 0.10. Results, opening paragraph; Figure 2
The paper defines benchmark optimization as gains from benchmark-specific artifacts rather than generalizable transcription ability and calls it benchmaxxing. Introduction
The probes compare reference rendering r with competing rendering a where the audio underdetermines the reference, and accept-ref is the greedy-decoding fraction that emits r rather than a. Methods, behavioral-probe definition
The three probe families cover reference disagreement, masked-number recovery, and orthographic switching, including honorific and archaic-spacing cases. Introduction; Methods; Results §3.3
Masked-number accept-ref is higher on public VoxPopuli and LibriSpeech than on libri-fresh and ep-fresh, with top LibriSpeech models near 0.40; six of 11 models exceed 0.5 on honorific switching and eight of 11 on archaic spacing. Results §3.3; Figure 3; Appendix Table 4
Evaluation-speaker voice clones produce directionally similar accept-ref to source recordings, generic voices reduce it for many models, and fresh same-domain clones often move toward generic voices. Results, voice-clone analysis; Figure 4
For Cohere-Transcribe, Canary-Qwen-2.5B, Phi-4-Multimodal, and Higgs-Audio-v3-8B, the reported audio lift is positive on real and evaluation-speaker audio and collapses toward zero for generic voices. Results, voice-clone and audio-lift discussion; Appendix Figure 10(b)
Mechanistic analyses use activation patching, attention readouts, low-rank linear steering, and appended audio, with bidirectional flips reported in some cases. Abstract; Conclusion
Figure 2 sources WER from the June 2026 Open ASR Leaderboard, whereas the Methods defines accept-ref from standard greedy decoding; the evaluated models vary in architecture, parameter scale, and training data. Figure 2 caption; Methods; Conclusion
The detailed evidence is concentrated on English VoxPopuli, with selected LibriSpeech extensions, while the conclusion generalizes more broadly to ASR. Methods; Results; Conclusion
The probe description mentions human-annotated data and a consensus panel but does not provide the item counts, masking specification, annotator agreement, or item-level examples needed to assess the alternatives. Methods, behavioral-probe definition; Results §3.3; Figure 2 caption; Appendix Table 1
The paper acknowledges that prosody, speaker characteristics, and recording context can legitimately influence transcription. Conclusion
The Methods section reports that 40% of VoxPopuli test speakers overlap with the training split in the Hugging Face version. Methods, VoxPopuli description
The paper reports no significant accept-ref regression for non-leaked VoxPopuli speakers, without providing group sizes or effect sizes. Results §3.3
The authors describe ep-fresh and libri-fresh as post-cutoff same-domain sets and DaiKon as a private 450-clip conversational control. Methods, held-out and fresh-data description
DaiKon is not accompanied in the reported results by an independent WER result or an analysis linking accept-ref to naturalistic errors. Results; Conclusion
The mechanistic reporting does not provide clear no-op or irrelevant-audio controls, intervention-selection holdouts, or cross-model and cross-layer replication. Abstract; Conclusion; mechanistic-analysis results
The paper claims benchmark-conditioned behavior can inflate benchmark performance without reflecting improved general-purpose transcription, but does not report a counterfactual WER correction or naturalistic degradation analysis. Abstract; Results; Conclusion
Evaluation & Analysis · Post-Training & Alignment

Self-improvement needs a measured null

An audit of three rounds of rank-32 low-rank adaptation (LoRA) self-training on Qwen3-8B shows how batching noise and thresholded transition statistics can make a frozen model look as though it learned. With frozen controls in place, it records gains under external distillation and no detected expansion in this short self-training regime, while showing why the negative result should travel only as far as the experiment.

TL;DR

The piece argues that apparent self-improvement can be an artifact of evaluation noise, especially batching and thresholded transition statistics, rather than learning. In frozen Qwen3-8B controls, serialization removed three-quarters of flips, while the k=128 expansion rule labeled 7 of 25 AIME problems as newly reached; a LoRA study found 0–2 gains for self-training versus 8–11 for external distillation. Treat the short-run null as conditional: use repeated solves, no-op controls, intervals, and matched seeds—not evidence that self-training cannot expand capability.

Paper· Code and evaluation artifacts ·Qwen3-8B; rank-32 LoRA; 1,408 evaluation draws ·~6 min
A frozen model can look as though it learned

Run a frozen Qwen3-8B through the same temperature-zero evaluation twice, and a single-decode ledger can report six new solves and nine lost ones. The model never trained. That is the paper’s strongest point: before calling a transition evidence of self-improvement, measure how often an unchanged model produces it. Serializing requests removed three-quarters of the flips, yet even one request at a time changed about 2%srcIntroduction, paragraph on temperature-zero decoding and batching. of the greedy verdicts. The experiment points to batching as a major source of the phantom transitions; the remaining serial flips make a one-sample state estimate untenable.

Across three evaluation sets, the authors catalogue seven failure modes and report that each can reverse a finding when its control is missing. The underlying problem is straightforward: a transition subtracts two sampled estimates, so rare problems at the edge of a model’s reach are where a lucky draw can masquerade as learning or loss. Aggregate accuracy hides that movement; a per-problem ledger exposes it, along with its own noise.

The expansion statistic fails its own null

The clearest example is the expansion statistic adopted from prior work. At k=128srcIntroduction, expansion-statistic discussion; Conclusion E.3. samples, a problem counts as expanded when the base model records no correct sample and the trained model records at least one. Apply it to two evaluations of frozen Qwen3-8B, and seven of 25srcIntroduction, expansion-statistic discussion; Conclusion E.3. previously unreached American Invitational Mathematics Examination (AIME) problems look expanded: a null rate of 0.280srcIntroduction, expansion-statistic discussion; Conclusion E.3.. All seven were single lucky samples.

One frozen comparison makes a natural repair look sufficient: require at least two successes. Across 110srcIntroduction, expansion-statistic discussion; Conclusion E.3. frozen comparisons, the reported null remained 0.058srcIntroduction, expansion-statistic discussion; Conclusion E.3. [0.038srcIntroduction, expansion-statistic discussion; Conclusion E.3., 0.078srcIntroduction, expansion-statistic discussion; Conclusion E.3.]. The threshold reduced the artifact, leaving a non-zero floor.

The replacement is a per-problem exact test against a baseline pooled from repeated evaluations of the untrained model, with false-discovery-rate control across problems. It made no detections on held-out frozen replicates, and that result was unchanged under the tested multiple-testing rules, error rates, and pool sizes. This is a useful sanity check with a hard limit: an all-null holdout with zero calls cannot distinguish a calibrated test from an overly conservative one, and it gives no minimum detectable effect for a real transition. The procedure avoids the particular false positives shown here; the paper has not established that it dominates thresholded statistics in general.

The controlled comparison points to sharpening

Once the floor is measured, the substantive comparison becomes easier to believe. The study ran three rounds of rank-32srcAbstract and Introduction, controlled-audit description. low-rank adaptation (LoRA) on Qwen3-8B, comparing three self-training arms with external distillation from a stronger teacher. The arms were matched in stream, retained volume, and evaluation. Among the 22srcAbstract and Introduction, positive-control result. problems the base model reached at most five times in 1,408srcAbstract and Introduction, positive-control result. draws, the paper reports 8–11srcAbstract and Introduction, positive-control result. gains for distillation and 0–2 for the self-training forms. A logistic regression reported β=1.91srcAbstract and Introduction, positive-control result. and p<10srcAbstract and Introduction, positive-control result.⁻⁸ against the explanation that the gap was merely a consequence of distillation’s larger overall gain.

That is a meaningful dissociation within this setup. The positive control registers a signal while self-training produces no detected expansion on the same rare-problem slice, consistent with sharpening: self-training made existing reach more reliable, while external information helped on rarely reached problems. Those ranges give a useful directional contrast and leave the precise effect size unresolved.

The positive control is also asymmetric in the dimension that matters most: the teacher contributes external information. Matching stream, retained volume, and evaluation gives a controlled comparison on those axes; the regression addresses the larger-overall-gain explanation while the information gap remains. On the ten problems the base model never reached, the comparison was statistically inconclusive. The authors are right to keep that separate: the evidence supports neither expansion nor its absence on that subset. The result concerns rare reaches in this evaluation regime.

The result stops at the edge of its design

The boundary around the result matters. The schedule was roughly 270srcConclusion D.1. optimizer steps, far shorter than schedules the paper positions against; one Qwen backbone family carries every claim. Expansion rests on 22 low-base problems from one mathematics benchmark, and the group is defined by an observed baseline count. The comparison is therefore conditional on a noisy selection boundary, and its null result has no practical upper bound attached. It establishes what this short run did under this ledger, with no basis for turning it into a statement that self-training cannot expand capability.

The damage side of the ledger is more dramatic. The compared training arms produced 88srcIntroduction, corruption result.106srcIntroduction, corruption result. corruption events among 1,163srcIntroduction, corruption result. problems in a band, against a design-matched frozen floor of 8; more than half of those events exceeded any frozen-model solve-rate change observed across 20srcIntroduction, corruption result. independent comparisons. The band came from MATH training problems almost certainly present in pretraining and was built to make corruption observable. That makes it a useful stress test of the measurement, with limited reach as an estimate of general harm.

Put the null beside the transition

The paper’s useful contribution is a discipline for reading transition claims. Give every statistic a no-op control, an interval, and a design matched to the training arm. Estimate correctness from repeated solve rates rather than one decode. The records often already exist in a multi-arm study, although the authors say four frozen replicates are insufficient for the nulls examined here. They also recommend at least three training seeds scored on the same problems; their policy-gradient arm shows why, since the third seed can change the finding.

Code and reduced per-problem counts are released for every checkpoint, sampling mode, and problem, including samples drawn, correct samples, truncations, tokens, and cost. That lets readers recompute the reported numbers from the public records. Before accepting a claim that a model learned a particular problem, ask what an unchanged model does under the identical ledger. Without that number, the ledger can record motion even when the model stayed still.

Grounding — claim → source
A frozen Qwen3-8B evaluated with a single temperature-zero decode produced six apparent learnings and nine apparent corruptions; serialization removed three-quarters of the flips, while serial evaluation still changed about 2% of greedy verdicts. Introduction, paragraph on temperature-zero decoding and batching.
The study reports seven transition-audit failure modes across three evaluation sets, including two standard practices and one correction nested inside another. Abstract and Introduction, transition-audit overview.
The expansion rule counts a problem as expanded when the base model has no correct sample in k draws and the trained model has at least one; at k=128, a frozen comparison labeled 7 of 25 AIME problems as expanded, or 0.280. Introduction, expansion-statistic discussion; Conclusion E.3.
Requiring at least two successes appeared to repair the expansion null once, but across 110 frozen comparisons the reported null was 0.058 with interval [0.038, 0.078]. Introduction, expansion-statistic discussion; Conclusion E.3.
The proposed per-problem exact test pools repeated baseline evaluations, applies false-discovery-rate control, and made no detections on held-out frozen replicates under the tested rules, error rates, and pool sizes. Abstract and Introduction, exact-test discussion.
The experiment compared three rounds of rank-32 LoRA self-training on Qwen3-8B with external distillation from a stronger teacher, matching stream, retained volume, and evaluation. Abstract and Introduction, controlled-audit description.
Among 22 problems reached at most five times by the base model in 1,408 draws, the reported gain ranges were 8–11 for distillation and 0–2 for the three self-training forms. Abstract and Introduction, positive-control result.
A logistic regression reported β=1.91 and p<10⁻⁸ against the explanation that the asymmetry was only a consequence of distillation’s larger overall gain. Abstract and Introduction, positive-control result.
The comparison on the ten problems never reached by the base model was statistically inconclusive. Introduction and Conclusion D.1.
The self-training schedule was roughly 270 optimizer steps with rank-32 LoRA, shorter than schedules positioned against in the paper; one Qwen backbone family carries the claims, and the expansion analysis uses 22 low-base problems from one mathematics benchmark. Conclusion D.1.
The 22-problem group is defined by the base model’s observed count of at most five solves in 1,408 draws. Introduction, positive-control result.
The all-null held-out result does not establish test power, equivalence, a minimum detectable effect, or general superiority over thresholded expansion statistics. Introduction and Abstract, which report held-out all-null non-detections; statistical interpretation of that result.
The compared training arms produced 88–106 corruption events among 1,163 band problems versus a design-matched frozen floor of 8, with more than half exceeding any frozen-model solve-rate change observed across 20 comparisons. Introduction, corruption result.
The corruption band was drawn from MATH training problems likely present in the backbone’s pretraining data and constructed to make corruption observable. Conclusion D.1.
The study recommends a no-op control with an interval for each statistic, a design-matched control, and at least three training seeds scored on the same problems; it says four frozen replicates are insufficient for the relevant nulls and that a third seed can change the policy-gradient finding. Conclusion, recommendations paragraph.
Code and reduced per-problem counts are released for each checkpoint, sampling mode, and problem, including samples drawn, correct samples, truncations, tokens, and cost. Conclusion and Appendix D.4.
The external distillation control receives information from a stronger teacher, so matching stream, retained volume, and evaluation does not make it information-equivalent to self-training. Introduction, positive-control description.
Pretraining & Scaling · Reasoning & Agents

MidTool shows a tool-use gain, not yet a mid-training effect

MidTool builds a 20.3B-token mixture from documents, code, application programming interfaces, and Model Context Protocol skills, then uses it to mid-train Qwen3 base models before supervised fine-tuning and reinforcement learning. The reported BFCLv3 gains make the release worth using, while the unmatched extra stage leaves the explanation for those gains unsettled.

TL;DR

MidTool argues that a dedicated mid-training stage built from documentation, code, API specifications, MCP skills, and executable trajectories can improve tool-use readiness before supervised fine-tuning and reinforcement learning. On BFCLv3, Qwen3-4B-Base rises from 39.73% to 50.25% with SFT, but the 20.3B-token addition also brings unmatched data and compute, so the result credits the whole recipe rather than proving a mid-training or two-branch effect. Use it as a practical recipe, and test the interaction slices that matter.

Paper· MidTool data and models ·20.3B-token mixture; 4B and 8B Qwen3 bases ·~6 min
The extra stage carries the headline

MidTool’s headline result is also its easiest to misread. On BFCLv3, the paper’s function-calling benchmark, Qwen3-4B-Base reaches 50.25%srcTable 3 overall after MidTool-Mix followed by supervised fine-tuning (SFT), up from 39.73%srcTable 3 for the same base model with SFT alone—a 10.52srcTable 3-point gain. At 8B, the corresponding SFT scores are 51.12%srcTable 3 and 47.62%srcTable 3. With reinforcement learning (RL) added, the MidTool arms reach 54.18%srcTable 3 and 55.12%srcTable 3, versus 39.51%srcTable 3 and 45.79%srcTable 3 for the arms without mid-training.

Those are meaningful recipe numbers. They show that a tool-use-focused training stage can leave both tested models better prepared for downstream tool-use training. The qualification is structural: MidTool-Mix adds 20.3B tokens before SFT and RL, so the treatment receives more data and compute by construction. The experiment measures the value of the whole recipe. It cannot separate a mid-training effect from ordinary continued training on a large tool-use corpus.

Tool use starts before the tool call

That possibility is exactly why the data design matters. An agent can fail before it ever makes a call: it can miss a tool affordance in documentation, fill a required field from the wrong context, lose the order of a multi-tool workflow, or freeze when information is missing. MidTool’s premise is that the knowledge behind these decisions is scattered across web pages, PDFs, code repositories, application programming interface (API) specifications, and structured tool definitions. Post-training traces show the desired behavior; mid-training is intended to put the supporting knowledge into the base model before SFT and RL.

MidTool-Mix combines those source families into a large tool-use mixture. Context-grounded trajectory augmentation turns documentation and code into supervision for identifying tool boundaries, inferring parameters, and recovering workflow structure from messy artifacts. Native agentic trajectory synthesis builds executable trajectories from real APIs, Model Context Protocol (MCP) skills, and collected rollout traces, with checks for schema grounding, turn order, required arguments, and consistency with tool responses. One branch teaches the model to read a tool; the other teaches it to operate one. That is a clean engineering hypothesis, and the strongest conceptual move in the paper.

The novelty is in the package

The conceptual ingredients are familiar. Toolformer inserts API calls into training data; ToolLLM/ToolBench and Gorilla/API-Bench use API-grounded supervision; ToolACE and APIGen automate schema-grounded or executable tool-use synthesis. MidTool’s narrower contribution is the package: an open corpus-construction pipeline around a 20.3B-token mixture for general tool use at the mid-training stage, with MCP skills alongside documents, code, and executable traces. That is a substantial data contribution, even when the causal story around the stage remains unsettled.

The training comparison is easy to parse. For Qwen3-4B-Base and Qwen3-8B-Base, both recipes use the same sampled 100K tool-use subset from TOUCAN for SFT, and the RL variant uses 526srcBaselines and Training Setup synthetic tool-use environments. The stated downstream recipe is held fixed; MidTool-Mix is the extra stage. That keeps the practical question clear, yet leaves the decisive control out: the reported comparison supplies no generic continued-training arm at the same token volume, no trajectory-only alternative, and no compute-matched comparison. The paper reports that removing either synthesis branch degrades performance, but branch removal also changes the amount and content of training data. The ablation supports the mixture as a practical bundle; it cannot assign credit to the two-branch design.

The aggregate score hides the trade-offs

BFCL’s component scores tell a more useful story than the aggregate. The paper says the largest gains appear on longer interaction horizons, stronger schema grounding, and unfamiliar tools, and the table’s multi-turn results point in that direction. The trade-offs matter: with SFT at 8B, single-turn performance slips from 66.40%srcTable 3 to 65.73%srcTable 3, while the listed hallucination component falls from 65.03%srcTable 3 to 59.82%srcTable 3; at 4B, the same component falls from 60.46%srcTable 3 to 56.95%srcTable 3. An overall win can therefore coexist with regressions in individual behaviors.

RL sharpens the asymmetry. It adds 3.93srcTable 3 points to the MidTool 4B overall score, from 50.25% to 54.18%, and 4.00srcTable 3 points at 8B, from 51.12% to 55.12%. The no-mid-training arms move in the other direction, from 39.73% to 39.51% at 4B and from 47.62% to 45.79% at 8B. The RL result is an interaction in this table between the later RL stage and the MidTool initialization, rather than a general dividend of RL.

MidTool also reports improvements on verified τ²-Bench and MCP-Universe. MCP-Universe runs tasks on real MCP servers spanning browser automation, finance, location, and web search, making it a relevant test of transfer. The scope remains narrow: only Qwen3-4B-Base and Qwen3-8B-Base are evaluated, and thinking is disabled. The reported numbers are point estimates without repeated-seed variance, confidence intervals, or significance tests. Training uses real APIs and MCP skills, while evaluation and RL also use tool schemas, MCP servers, and synthetic environments; without an overlap manifest or schema/API hash check, unseen-tool generalization remains a claim about the setup rather than a demonstrated holdout result.

Use the release as a recipe

MidTool is worth trying. Its corpus combines documentation, code, schemas, and executable trajectories, and the release includes data and models. For an engineer building multi-turn workflows, the actionable experiment is clear: add a dedicated tool-use stage before SFT, then judge the result on the interaction slices that matter to the application.

That is the right size of conclusion. The release is a useful extra-training recipe, and the BFCL gains justify testing it on multi-turn workloads. Budget the 20.3B-token stage as part of the intervention. The stage itself has not yet earned causal credit.

Grounding — claim → source
MidTool-Mix is reported as a 20.3B-token mixture. Abstract; Introduction; Conclusion
MidTool mid-trains Qwen3-4B-Base and Qwen3-8B-Base before downstream SFT and optional RL. Baselines and Training Setup
On BFCLv3, Qwen3-4B-Base + SFT scores 39.73% overall, while Qwen3-4B-Base + MidTool-Mix + SFT scores 50.25%, a 10.52-point increase. Table 3
On BFCLv3, the corresponding Qwen3-8B-Base SFT scores are 47.62% without MidTool-Mix and 51.12% with it. Table 3
With SFT + RL, the 4B scores are 39.51% without MidTool-Mix and 54.18% with it; the 8B scores are 45.79% and 55.12%. Table 3
MidTool-Mix is an additional 20.3B-token stage before the stated fixed downstream recipe, creating an unmatched data and compute budget. Baselines and Training Setup; Conclusion
The stated source families include web pages, PDFs, code repositories, API specifications, and structured tool artifacts such as MCP skills. Abstract; Introduction
Mid-training is positioned between general pre-training and post-training. Introduction
Context-grounded trajectory augmentation targets tool boundaries, parameter inference, and workflow recovery from documentation and code. Introduction
Native agentic trajectory synthesis uses real APIs, MCP skills, and collected rollout traces and validates schema grounding, turn order, required arguments, and tool-response consistency. Introduction
Toolformer, ToolLLM/ToolBench, Gorilla/API-Bench, ToolACE, and APIGen provide prior examples of API-grounded or synthetic tool-use supervision. Prior-art assessment
Both recipes use a sampled 100K tool-use subset from TOUCAN for SFT, and the RL setup uses 526 synthetic tool-use environments. Baselines and Training Setup
The reported comparison contains no generic continued-training arm at the same token volume, no trajectory-only alternative, and no compute-matched comparison. Baselines and Training Setup; experiment-control assessment
The conclusion reports that removing either synthesis branch degrades performance. Conclusion
At 8B with SFT, BFCL single-turn performance falls from 66.40% to 65.73%, and the listed hallucination component falls from 65.03% to 59.82%; at 4B, the corresponding component falls from 60.46% to 56.95%. Table 3
RL adds 3.93 points to the MidTool 4B overall score and 4.00 points at 8B, while the no-mid-training scores change from 39.73% to 39.51% and from 47.62% to 45.79%. Table 3
The paper reports improvements on verified τ²-Bench and MCP-Universe, whose MCP evaluation uses real servers spanning browser automation, finance, location, and web search. Results — Benchmarks; Conclusion
Only Qwen3-4B-Base and Qwen3-8B-Base are evaluated, and thinking is disabled for the reported setting. Baselines and Training Setup
The reported results are point estimates without repeated-seed variance, confidence intervals, significance tests, or a tool/schema overlap audit. Table 3; evaluation-control assessment
The release provides MidTool data and models. Abstract — Data & Model
Efficiency & Inference · Reasoning & Agents

GRIP’s RAG gains outrun its causal story

GRIP gives the query a full-capacity bypass and squeezes retrieved premises through a four-dimensional noisy channel. Its five-benchmark gains are substantial, yet the design changes evidence selection and context length alongside the bottleneck, leaving the mechanism less settled than the table.

TL;DR

GRIP improves RAG question answering across five benchmarks, beating the listed baselines in every row while sharply reducing verifier-defined unsupported claims. Its design gives the query a full-capacity bypass but compresses verified retrieved premises into a four-dimensional noisy state; the roughly 31.5-fold drop in estimated query–latent mutual information shows the channel changed, not necessarily that useful residual evidence survived. Treat it as a promising whole-pipeline lever, not isolated proof of the bottleneck’s causal role.

GRIP paper (arXiv) ·d_z = 4; Llama-3-8B; five benchmarks ·~7 min
The table is strong enough to matter

GRIP gives a retrieval-augmented generation (RAG) system a wide query path and a four-dimensional evidence channel. The model sees the question in full; the retrieved premise arrives through a noisy bottleneck. The paper calls the failure it targets query dominance: a high-capacity query path leaves retrieved evidence as a marginal correction. Across five question-answering benchmarks, that arrangement posts the best task score among the three listed baselines in every row. The table is persuasive. The causal story is ahead of it.

Against Standard RAG, GRIP moves from 68.2srcTable 1 to 76.5srcTable 1 on HotpotQA, 65.2srcTable 1 to 73.4srcTable 1 on StrategyQA, 62.8srcTable 1 to 71.2srcTable 1 on 2WikiMultihopQA, 74.3srcTable 1 to 85.6srcTable 1 on ProofWriter, and 78.4srcTable 1 to 82.1srcTable 1 on SQuAD 2.0srcResults §5; Table 1. The unweighted average improvement is 7.98srcTable 1; Conclusion points, rounded in the conclusion to 8.0srcTable 1; Conclusion. Its lead over the architecture-matched Llama-3 Iterative control is 7.2srcResults §5; Table 1 exact-match points on HotpotQA and 4.1srcResults §5; Table 1 accuracy points on StrategyQA. Those are sizeable gains across different reasoning regimes, even if their explanation needs more discipline.

The bottleneck makes redundancy expensive

The method’s bet is about capacity allocation. Query Q and the reasoning context retain full-dimensional access to the decoder, while an extracted, verified premise p_k is mapped to z_k = Bθ(p_k) + ε_k, with Gaussian noise and d_z = 4. Because the query is available through the bypass, the authors argue that query-correlated features become an expensive use of the evidence channel’s few coordinates. The intended survivor is information useful for predicting the answer once Q is known—the residual in GRIP’s vocabulary.

GRIP takes two reasoning steps and retrieves 10srcIntroduction; Results §5 passages per step, then works with roughly 25srcIntroduction; Results §5 entailment-verified evidence tokens per query. The introduction contrasts that with roughly 4,000srcIntroduction; Results §5 raw retrieved-context tokens for the baseline. This is a severe change in both the amount and the form of evidence reaching the decoder. The four-dimensional state arrives after premise compression and natural-language-inference (NLI) filtering, so the bottleneck is one intervention in a pipeline that also selects and gates the evidence.

The methods section draws a useful line between intuition and proof. It writes the conditional information bottleneck (CIB) objective, −I(Z;Y∣Q)+βI(Z;Q), then explicitly says GRIP does not optimise it and treats residual coding as a mechanism-level interpretation. That caveat matters: low capacity can reduce query information by discarding information. The residual claim needs answer-relevant evidence to survive the squeeze.

The control narrows the claim; attribution remains loose

Llama-3 Iterative is the strongest comparison in the table. It follows GRIP’s two-step schedule, uses the same frozen Dense Passage Retrieval (DPR)-Wiki index, entropy reranking, span extraction, NLI gate, and decoding hyperparameters, then feeds the verified premise as ordinary full-dimensional text. GRIP’s lead over it supports an effect beyond asking the model to reason in two steps.

The comparison is still heavily bundled. Standard RAG and GRIP expose the decoder to radically different evidence streams: one retains raw retrieved context, while the other passes a much smaller verifier-selected stream. Selection and context restriction can change both accuracy and the number of claims that have a retrieved premise to support. GRIP’s full pipeline also includes two reasoning passes, reranking, extraction, NLI gating, and compression. The study asserts a shared compute budget, but gives no end-to-end latency or memory accounting; the control description does not settle training-data parity, exact retrieval inputs, or output-length constraints. Retrieval coverage after extraction and gating is likewise left unmeasured in the reported comparison.

The baseline set is modest. Table 1 evaluates Standard RAG, Self-Ask, and Llama-3 Iterative; Self-RAG, context-aware decoding, and RAFT-style training appear in the discussion without a head-to-head result. The conclusion says dimensional restriction and stochasticity work in combination, yet the main results provide no numerical ablation that lets the reader weigh those ingredients separately. The package has earned credit. The four coordinates and noise have not earned all of it.

The diagnostics point to compression

The most striking mechanistic number is the estimated query–latent mutual information: 14.8srcAbstract bits for the baseline representation versus 0.47srcAbstract bits for GRIP, a roughly 31.5srcAbstract-fold drop. The residual-alignment analysis points in the same direction, reporting that GRIP states occupy subspaces less aligned with query-dominant directions. Both observations fit the design. They do not by themselves identify useful residual information. The comparison pairs a four-dimensional noisy state with a full-dimensional baseline representation, making some reduction in mutual information a built-in consequence of the intervention. The method description leaves the estimator, representation layer, pairing procedure, and normalisation unspecified, and gives no effect size or dimensionality-matched comparison for the alignment result. The number is easier to read as evidence that the channel changed than as a calibrated measure of what it retained.

The grounding result is impressive on its stated metric, which is narrower than the word hallucination suggests. Here hallucination is the percentage of generated claims not entailed by retrieved evidence. GRIP falls from 31.7%srcTable 1 to 8.6%srcTable 1 on HotpotQA, from 31.2%srcTable 1 to 9.8%srcTable 1 on 2WikiMultihopQA, and from 28.7%srcTable 1 to 8.6% against Llama-3 Iterative on HotpotQA. Across the five Standard RAG rows, the mean falls from 28.12%srcTable 1; Conclusion to 8.34%srcTable 1; Conclusion, a relative reduction of about 70.3%srcTable 1; Conclusion. The paper’s 73%srcTable 1; Conclusion figure tracks the favourable HotpotQA reduction from 31.7% to 8.6%.

An alternate verifier helps the result: MiniCheck agrees with the in-pipeline DeBERTa verifier 89.0%srcResults §5.2 of the time, with Cohen’s kappa of 0.77srcResults §5.2, and puts the HotpotQA rate at 10.1%srcResults §5.2 rather than 8.6%. That remains well below the baselines, while covering one dataset and a verifier agreement rather than factual ground truth. Three random seeds were used, but seed variation is detailed for HotpotQA and paired-bootstrap significance is reported only for HotpotQA and SQuAD 2.0. No response-length, claim-count, or abstention analysis is reported, leaving shorter or more constrained answers as a live contributor to the grounding numbers.

A useful lever with a smaller theory attached

GRIP earns a place in the toolbox because it turns a familiar retrieval failure into an engineering lever. In the Llama-3-8B/DPR-Wiki setup, the full package improves exact match or accuracy and verifier-defined grounding on all five benchmarks. That is enough to make the design worth trying in an iterative question-answering system with similar constraints.

The portable lesson is smaller than the strongest theory attached to it. A four-dimensional noisy channel can accompany better answers and fewer claims unsupported by retrieved evidence. Every reported system uses the same Llama-3-8B decoder and frozen DPR-Wiki retrieval substrate, so the evaluation says little about other model families, retrieval stacks, domains, or long-form generation. For an engineer, the actionable takeaway is to test the bottleneck as part of the whole pipeline and read the mutual-information drop as evidence that the channel changed, while measuring grounding separately.

Grounding — claim → source
GRIP gives the query full-dimensional decoder access and maps an extracted, verified premise into a four-dimensional state with additive Gaussian noise. Introduction; Methods Eq. (4)
The paper frames query dominance as a high-capacity query path leaving retrieved evidence as a marginal correction. Introduction
The evaluation covers HotpotQA, StrategyQA, 2WikiMultihopQA, ProofWriter, and SQuAD 2.0, with Standard RAG, Self-Ask, and Llama-3 Iterative as the listed baselines. Results §5; Table 1
GRIP has the highest exact-match or accuracy score in every Table 1 row against the listed baselines. Table 1
GRIP’s task scores versus Standard RAG are 76.5 versus 68.2 on HotpotQA, 73.4 versus 65.2 on StrategyQA, 71.2 versus 62.8 on 2WikiMultihopQA, 85.6 versus 74.3 on ProofWriter, and 82.1 versus 78.4 on SQuAD 2.0. Table 1
The unweighted mean task-score improvement over Standard RAG is 7.98 points, reported as 8.0 points in the conclusion. Table 1; Conclusion
GRIP leads Llama-3 Iterative by 7.2 exact-match points on HotpotQA and 4.1 accuracy points on StrategyQA. Results §5; Table 1
GRIP uses two reasoning steps, 10 retrieved passages per step, roughly 25 entailment-verified evidence tokens per query, and is contrasted with roughly 4,000 raw retrieved-context tokens for the baseline. Introduction; Results §5
GRIP describes residual coding through a conditional information bottleneck objective but explicitly says it does not optimise that objective and treats the residual explanation as a mechanism-level interpretation. Methods §4.3
Llama-3 Iterative follows the two-step schedule and uses the same listed DPR-Wiki substrate, entropy reranking, span extraction, NLI gate, and decoding hyperparameters while feeding verified premises as ordinary full-dimensional text. Results §5
The broader comparison combines the bottleneck with premise selection, span extraction, NLI filtering, compression, and a smaller decoder-visible evidence stream. Introduction; Methods; Results §5
The study asserts a shared compute budget but does not report end-to-end latency or memory accounting, and the control description does not establish training-data, retrieval-input, or output-length parity. Results §5; Results §5.2
Table 1 evaluates Standard RAG, Self-Ask, and Llama-3 Iterative, while Self-RAG, context-aware decoding, and RAFT-style training are discussed without head-to-head results. Introduction; Results §5; Table 1
The conclusion attributes the mechanism to the combination of dimensional restriction and stochasticity, but the main results provide no numerical ablation values for weighing those ingredients separately. Conclusion; Results
The reported query–latent mutual-information estimate falls from 14.8 bits to 0.47 bits, approximately a 31.5-fold reduction. Abstract
GRIP’s residual-alignment analysis reports bottleneck states occupying subspaces less aligned with query-dominant directions. Abstract; Conclusion
The mutual-information comparison involves representations with different dimensionality and noise, while estimator, layer, pairing, normalisation, and uncertainty details are not specified in the method and results description. Methods §4.3; Results §5
Hallucination is defined as the percentage of generated claims not entailed by retrieved evidence. Results §5
GRIP reduces hallucination from 31.7% to 8.6% on HotpotQA, from 31.2% to 9.8% on 2WikiMultihopQA, and from 28.7% to 8.6% against Llama-3 Iterative on HotpotQA. Table 1
Across the five Standard RAG rows, mean hallucination falls from 28.12% to 8.34%, about 70.3%, while the paper’s 73% figure corresponds closely to the HotpotQA reduction. Table 1; Conclusion
MiniCheck agrees with the in-pipeline DeBERTa verifier at 89.0%, has Cohen’s kappa of 0.77, and changes the HotpotQA hallucination rate from 8.6% to 10.1%. Results §5.2
Reported results are averaged over three random seeds; seed standard deviations are given for HotpotQA, and paired-bootstrap significance is reported for HotpotQA and SQuAD 2.0. Results §5.2
The evaluation does not report response length, claim counts, or abstention rates. Results §5.2
All reported systems use Llama-3-8B decoding and the frozen DPR-Wiki retrieval substrate. Results §5
Efficiency & Inference · Evaluation & Analysis

SparsePR reconstructs skipped attention, with a speedup still to audit

SparsePR builds executable routes from current-call response geometry and uses 64 exact rows per head to fit a correction for skipped interactions. Across four 720p video and world models, it keeps aggregate benchmark scores close to dense attention at 22–26% realized executed-pair density, while its end-to-end accounting needs a cleaner audit.

TL;DR

SparsePR argues that attention can be made executable at roughly quarter-density by routing queries and paired key/value tokens in current-call response space, then fitting skipped-output residuals from 64 exact rows per head. Across four 720p video and world models, aggregate scores stay essentially at dense levels around 22–26% realized pair density, but the practical speed claim remains provisional: baselines use different densities, and online routing, probing, and fitting are not broken out for a matched-budget comparison.

Paper ·Four 720p models; 22–26% realized pair density; one H100 ·~6 min
The route is shared, so the support is larger

Attention sparsity becomes a different problem when a GPU has to execute blocks rather than individual rows. In the semantic partition examined for Wan2.2, a median query needed only 6.2%srcIntroduction, analysis of shared-route support of the keys to retain 90%srcIntroduction, analysis of shared-route support of its attention mass. Group eight queries behind one route and the median support rose to 22.9%srcIntroduction, analysis of shared-route support. The hardware must cover the shared support, so row-wise concentration can overstate the sparsity available to an executable operator.

That is only half of the problem. Renormalized hard drop changes the output according to the omitted mass and the values represented by the omitted and retained interactions. Two routes can retain similar mass and produce different post-softmax errors. SparsePR’s useful reframing follows: choose the partition in a space that predicts shared responses, then model the residual left by the sparse computation.

SparsePR reconstructs what routing drops

At each attention call, SparsePR samples query rows and uses their key-response profiles to build the paired key/value (K/V) partition. Its key metric is Q_sᵀQ_s divided by the number of sampled queries, so two keys are close when the sampled queries give them similar pre-softmax logit responses. The method projects keys into 48srcResults, Implementation details response directions and applies k-means to paired K/V tokens. The centroids of those groups then define the query-response metric; queries are projected into 64srcResults, Implementation details directions, normalized by their root-mean-square scale, and clustered into groups that share routing. The order is asymmetric: K/V groups first, query groups second. That is the part aimed at executable support rather than raw activation proximity.

After routing, 64 exact query rows per head serve as probes. For each probe, the method has a dense output and a sparse output; their difference is the post-softmax residual. It fits that residual as an affine function of the sparse output, using a rank-16srcResults, Implementation details fit and a ridge coefficient of 0.1srcResults, Implementation details, then applies the correction to unprobed rows. The partitions and fit are recalculated online for the current call, with no weight update. The sparse output carries information about the skipped contribution, and the probes turn that information into a call-specific calibration.

The quality result holds at a quarter of the pairs

Table 1 evaluates HunyuanVideo-13B on VBench for text-to-video, Wan2.2-I2V-A14B on VBench++ for image-to-video, and Cosmos-Predict2.5-14B plus Cosmos3-Nano-16B on physical-world generation and prediction, all at 720p. Dense and sparse runs use the same conditioning inputs, preprocessing, random seeds, sampling schedule, inference steps, guidance settings, resolution, and frame count. On one BF16 NVIDIA H100, SparsePR uses 21.92%srcTable 1 realized executed-pair density for HunyuanVideo and reaches a 2.61srcTable 1× end-to-end speedup. Its reported ImgQual and subject-consistency scores are 0.850srcTable 1 and 0.976srcTable 1, matching the dense row. Wan2.2 uses 21.97%srcTable 1, reaches 1.80srcTable 1×, and scores 0.687srcTable 1 and 0.973srcTable 1 against dense scores of 0.689srcTable 1 and 0.974srcTable 1.

The world-model rows tell the same story. Cosmos-Predict2.5 at 22.14%srcTable 1 density records ImgQual 0.714srcTable 1, subject consistency 0.976, and PBench Quality 77.75srcTable 1, versus dense scores of 0.714, 0.976, and 77.76srcTable 1. Cosmos3-Nano at 25.96%srcTable 1 reaches 1.48srcTable 1× while scoring 0.699srcTable 1, 0.949srcTable 1, and 77.30srcTable 1, compared with 0.700srcTable 1, 0.950srcTable 1, and 77.31srcTable 1 for dense attention. That is a good result at a clearly stated operating point: the sparsifier does not visibly damage these aggregate measures.

The speed advantage needs a common budget

The quality result is cleaner than the speed comparison. The most instructive baseline is SVG-EAR. For HunyuanVideo, SparsePR’s 21.92% density is close to SVG-EAR’s 22.17%srcTable 1; for Wan2.2, the figures are 21.97% and 23.64%srcTable 1. On Cosmos-Predict2.5, however, SparsePR runs at 22.14% versus 29.75%srcTable 1, and on Cosmos3-Nano at 25.96% versus 37.18%srcTable 1. SparsePR is faster in all four rows—2.61× versus 1.93srcTable 1×, 1.80× versus 1.61srcTable 1×, 1.51srcTable 1× versus 1.10srcTable 1×, and 1.48× versus 1.10×—but the larger work cut on the Cosmos models explains part of the gap. The table provides no equal-density speed-quality curve, so it cannot isolate algorithmic advantage from budget advantage.

The method’s own setup also needs to be counted carefully. The current-call response pass over keys, eigenvector construction, clustering, exact probes, and ridge fit all surround the sparse attention kernel. The paper states that timing includes online costs, yet gives no wall-clock breakdown and does not make clear whether the response pass enters the executed-pair density denominator. The 1.48×–2.61× figures are therefore reported measurements for the H100 runs, rather than a portable statement about speed at a matched work budget.

The useful conclusion is narrower than the headline

The broad ingredients have familiar precedents in clustered routing and sparse-plus-correction attention. SparsePR’s specific contribution is the asymmetric K/V-then-query construction paired with a call-specific affine fit. The component story is harder to score: the paper attributes most of its reconstruction improvement to probe fitting and says response-coupled partitioning helps hard-drop and finite-probe reconstruction, yet the reported results show neither the underlying attention-reconstruction error nor a numerical component ablation. The combined system is visible; the reason each piece earns its setup cost is not.

That sets the result at the right scale. SparsePR has a well-motivated mechanism and a useful four-model quality table, with one aggregate operating point per model. Its durable design rule is to build shared routing from response geometry and calibrate skipped output from a small exact sample. For an engineer, it is worth treating as a roughly quarter-density operator on the tested workloads, with the online pipeline and a density-matched baseline counted in the same benchmark. The residual fit is the part to carry forward; the headline speedup is the part to verify.

Grounding — claim → source
Wan2.2 required a median 6.2% support per query for 90% retained attention mass, rising to 22.9% when eight grouped queries shared a route. Introduction, analysis of shared-route support
Under renormalized hard drop, retained attention mass alone does not determine post-softmax output error. Introduction, analysis of residual error
Response-Coupled Partitioning uses sampled-query response geometry to form paired K/V groups and then query groups. Methods, Response-Coupled Partitioning, equations (6) and (7)
SparsePR uses feature ranks rK=48 and rQ=64, 64 exact rows per query head, output rank 16, and ridge coefficient 0.1. Results, Implementation details
Probe-Fitted Residual Reconstruction models the post-softmax residual as an affine function of the sparse output and calibrates it for each attention call. Methods, Probe-Fitted Residual Reconstruction; Abstract
Evaluation covers HunyuanVideo-13B, Wan2.2-I2V-A14B, Cosmos-Predict2.5-14B, and Cosmos3-Nano-16B across text-to-video, image-to-video, and physical-world tasks at 720p. Results, Models and benchmarks; Table 1
Dense and sparse runs use the same conditioning inputs, preprocessing, random seeds, sampling schedule, inference steps, guidance settings, resolution, and frame count. Results, Evaluation protocol
HunyuanVideo SparsePR reaches 21.92% density and 2.61× speedup, with ImgQual 0.850 and subject consistency 0.976 matching the dense benchmark scores. Table 1
Wan2.2 SparsePR reaches 21.97% density and 1.80× speedup, with ImgQual 0.687 and subject consistency 0.973 versus dense scores of 0.689 and 0.974. Table 1
Cosmos-Predict2.5 SparsePR at 22.14% density records 1.51× speedup and scores 0.714, 0.976, and 77.75 versus dense scores of 0.714, 0.976, and 77.76. Table 1
Cosmos3-Nano SparsePR at 25.96% density records 1.48× speedup and scores 0.699, 0.949, and 77.30 versus dense scores of 0.700, 0.950, and 77.31. Table 1
SVG-EAR uses densities of 22.17%, 23.64%, 29.75%, and 37.18% and speedups of 1.93×, 1.61×, 1.10×, and 1.10× on the four model rows. Table 1
The method performs online response-based metric construction, eigenvector extraction, clustering, probing, and ridge fitting, while the paper states that timing includes online costs. Methods, Response-Coupled Partitioning and Probe-Fitted Residual Reconstruction; Results, Implementation details
The reported results do not show a numerical component ablation or the attention-reconstruction-error metric used in the paper’s motivation. Abstract and Conclusion; Results, Table 1
The quality evidence is aggregate, uses one operating point per model, and is reported on a single BF16 NVIDIA H100 setup. Results, Implementation details; Models and benchmarks; Table 1
The paper’s broad ingredients have precedents in clustered routing and sparse-plus-correction attention, while its specific proposal is the asymmetric current-call combination. Introduction, prior-work discussion; novelty assessment
What Shipped

What Shipped

New releases clustered around agent runtimes, model routing, enterprise connectors, and inference hardware, with privacy, security, and evaluation controls moving into the deployment stack.

01
DeepSeek Model Release

DeepSeek releases V4-Flash-Vision-Exp for multimodal agent workflows

DeepSeek released V4-Flash-Vision-Exp, an experimental multimodal model that adds image understanding to the V4-Flash model. It keeps V4-Flash’s pure-text capabilities, handles screenshots, charts, and other image inputs, and DeepSeek says it brings performance on visual-agent tasks close to Opus 4.8; DeepSeek Harness 0.1.1 supports the model out of the box.

Experimental; available through the DeepSeek API; supported by DeepSeek Harness 0.1.1 · DeepSeek API Docs
02
OpenAI Policy & Safety

OpenAI pauses frontier reinforcement-learning work

OpenAI said it paused reinforcement learning (RL) for two weeks after a forthcoming model approached its critical cybersecurity threshold, and its largest planned frontier RL run remains on hold. The company is using smaller-scale training and evaluations to assess model behavior and validate safeguards while strengthening network isolation so that a compromised workload cannot by itself reach the internet or internal networks. For frontier-model builders, training-environment security and evidence of alignment now sit directly on the path to larger runs.

Largest planned frontier RL run remains on hold; smaller training and evaluations continue · OpenAI
03
Anthropic Feature & Product

Anthropic expands Mythos 5 cyber-defense access through Claude Security

Anthropic made Claude Mythos 5 available in Claude Security for Enterprise customers, where it scans codebases for vulnerabilities and returns Common Weakness Enumeration (CWE) categories, confidence and severity ratings, and suggested fixes for human review. The model itself remains restricted: partner integrations are coming, Anthropic plans to expand its Cyber Verification Program, and a new $35 million fund will provide credits for open-source security work. For security teams, the release exposes Mythos-level defensive output through a bounded product interface rather than a general-purpose model endpoint.

Public beta for Claude Enterprise customers; direct Mythos 5 access remains restricted; partner integrations coming soon · Claude by Anthropic
04
Cursor Feature & Product

Cursor launches Origin as an interoperable code-hosting platform

Cursor launched Origin, a code-hosting platform for repositories, browsing and editing, collaboration, and pull requests. Teams can keep GitHub repositories alongside Cursor-hosted ones and sync them, while Cursor says agent-native features and a wider app ecosystem are coming to Origin. For software teams adopting AI coding tools, that creates an interoperable repository surface without requiring an immediate GitHub migration.

Launched; GitHub interoperability; agent-native features coming soon · TechCrunch
05
Cerebras Infra & Hardware

Cerebras introduces CS-4 for rack-scale inference

Cerebras introduced CS-4, a rack-scale inference system built from three WSE-3 Turbo processors and the Nexus platform architecture for interactive reasoning and agentic workloads. Cerebras claims up to 30× faster inference than graphics processing unit (GPU) systems across its reported model set, more than 1,000 tokens per second on models larger than 10 trillion parameters, and wafer-to-wafer latency as low as 2 microseconds. Its disaggregated-inference design places prefill on complementary GPU or application-specific integrated circuit (ASIC) platforms, giving infrastructure teams another path for high-throughput serving.

Introduced; rack-scale inference system · Cerebras
06
TrueFoundry Open Source

TrueFoundry open-sources a vendor-neutral agent runtime

TrueFoundry released TrueForge, an MIT-licensed, vendor-neutral runtime for building, deploying, debugging, and governing production AI agents. It provides the agent loop, tool and Model Context Protocol (MCP) orchestration, persistent sessions, context compaction, approvals, and sandbox-as-a-tool support, while leaving model and infrastructure choices to the developer. On DevRev’s 14-task Enterprise-Bench, TrueFoundry reports about 11/14 tasks solved at $2.90 per run with open-source GLM-5.2 versus about $11.80 for Claude Managed Agents with Opus 4.8; with Opus 4.8 on both sides, it reports $8.50 versus $11.80 and 40 versus 63 minutes. That combination gives teams an open runtime for sessions, approvals, and tools without tying the control loop to one model vendor.

Open source; MIT licensed · TrueFoundry
07
Ramp Feature & Product

Ramp launches Router, a multi-provider model-routing API

Ramp launched Router, a United States-only application programming interface (API) for switching among models from OpenAI, Anthropic, DeepSeek, Moonshot, Minimax, NVIDIA, xAI, and Z.ai. It is free through the end of 2026 with inference charges still applying, includes a $26 launch credit, and can route by up to three user-specified benchmarks while exposing token spend, cost, latency, and fallback data. For builders, Router offers a low-friction multi-provider testing and fallback layer; its opt-out retention policy records inputs, outputs, and tool calls for one year by default, making data handling a deployment decision.

Launched; United States only; free through the end of 2026, with inference charges still applying · TechCrunch
08
Perplexity Open Source

Perplexity open-sources Numbat for endpoint agent security

Perplexity open-sourced Numbat, a security suite that integrates with agent harnesses on enterprise client endpoints to enforce rules and prevent, detect, and mitigate agent-related incidents. It targets agents with privileged access that may run autonomously for hours or days, where security controls have to extend beyond the model layer. For teams deploying coding or desktop agents, Numbat adds a system-level policy and response layer around the harness.

Open source · Perplexity Research
09
Liquid AI Model Release

Liquid AI releases LFM2.5-DSpark for faster inference

Liquid AI released DSpark draft checkpoints for LFM2.5-1.2B-Instruct, LFM2.5-2.6B, and LFM2.5-8B-A1B, adding a speculative-decoding path that preserves greedy output while reducing decode latency. The company reports up to 3.18× throughput on an H100, up to 2.87× on an M4 Max, and a 57% average function-calling latency reduction for LFM2.5-2.6B; the checkpoints include upstream support for `llama.cpp` and SGLang in Safetensors and GGUF formats. For builders, DSpark makes faster local and hosted tool-using inference available without changing the target model’s greedy outputs.

Open checkpoints; Safetensors and GGUF formats; llama.cpp and SGLang support · Liquid AI
10
Salesforce Feature & Product

Salesforce opens Headless 360 to external agents through MCP

Salesforce expanded Headless 360 with Model Context Protocol (MCP) servers and reusable Agent Skills, exposing authorized Salesforce capabilities to Agentforce and external agents including Claude, ChatGPT, and Cursor. The Data 360 MCP Server is generally available with approximately 200 APIs, while the Headless 360 MCP Server is in open beta; more than 100 reusable Agent Skills and the Multi-framework are generally available. For enterprise builders, the release provides a governed discovery and invocation layer that carries permissions, workflows, validation rules, and governance context into agent calls.

Data 360 MCP Server generally available; Headless 360 MCP Server open beta; more than 100 Agent Skills and Multi-framework generally available · Futurum Group
11
Perplexity Benchmarks & Evals

Perplexity releases WANDR to test wide-and-deep research agents

Perplexity released WANDR (Wide ANd Deep Research), an open benchmark and evaluation harness built around 500 realistic data-collection tasks for knowledge work, including competitive mapping, due diligence, literature review, and talent sourcing. The strongest system in Perplexity’s evaluation reached 0.363 soft F1 and 0.133 hard F1, quantifying the difficulty of finding many qualifying records and supporting each with evidence. For builders, WANDR turns breadth, completeness, and evidence coverage into explicit research-agent evaluation targets.

Open benchmark and evaluation harness · Perplexity Research
12
Binance Feature & Product

Binance launches Agent OS for permissioned AI trading

Binance launched Agent OS, which lets developers connect AI applications and agents to Binance APIs, Wallet Agentic Hub, x402 transaction verification and payment facilitator API, Skill Hub, and MCP support for market analysis and trade execution. It works with ChatGPT, Codex, Claude Code, and Cursor, and uses dedicated subaccounts with withdrawals blocked by default plus optional per-order approval. Binance does not impose a separate cap on what an agent can trade or lose, so the funded subaccount and its permissions remain the builder’s main safety boundary.

Launched; MCP support; dedicated agent subaccounts · TechCrunch