Skip to content
← Blog

How to Read AI Model Benchmarks

26 May 2026 · RS Management

TL;DR

  • A public benchmark eventually ends up in training data and starts measuring the model's memory instead of its skill.
  • The date a test set was created matters as much as the score.
  • 30 to 60 of your own production cases, judged against criteria written before the test, are a better basis for a decision than any leaderboard.

“The new model beats our current one by a few points in the ranking. Is that reason enough to migrate?” Before answering, check where those points come from. Benchmarks, meaning public sets of test tasks, make sense as a research tool. They lose that sense when a lab score lands on a sales slide as a forecast of how the model will handle a specific company’s invoices, contracts or service tickets.

Three mechanisms account for most of the gap between a ranking and work inside a company.

Trap What it looks like What to check before buying
Test set contamination The score rises, work quality does not When the test set was created
Errors in the answer key The ranking changes after the set is corrected Which version of the set the score was computed on
A different skill from the company’s Multiple-choice questions instead of a 20-page scan Results on your own set built from company documents
No closed pool of tasks Overfitting cannot be detected Whether the set has a non-public part

Contamination: the model knows the answers

Benchmarks are published on the internet, and training data is collected from the internet. The longer a test set circulates publicly, the more likely it is that the model has already seen the tasks or their solutions during training.

In May 2024 Scale AI prepared GSM1k, 1,205 new grade-school math problems matched to the popular GSM8K set in difficulty, number of steps and length.1 The most overfitted model families lost up to a dozen or so percentage points on the fresh problems, leading models far less. An overfitted model still solves new problems, just worse than the public score promised.

The same happened with SWE-bench Verified (software engineering benchmark), a set of 500 issues from open source repositories that served for two years as the unofficial leaderboard for coding. In February 2026 OpenAI announced it would stop reporting results on that set, because growing contamination and flaws in the tests themselves meant the differences at the top of the table no longer carried information. As an alternative it pointed to SWE-bench Pro, released by Scale AI in September 2025, where part of the tasks is kept in a closed pool. At launch the best models scored below 25% there.2

A set from 2021, on which leading models have long scored close to the maximum, mostly measures how well the material was memorized.

The benchmark measures a different skill

MMLU (Massive Multitask Language Understanding), for years the most-cited general-knowledge set, consists of multiple-choice questions from 57 subjects. In 2024 a research team manually reviewed a sample of 5,700 questions and published a corrected version called MMLU-Redux.3 It estimated that about 6.5% of items contain errors, from a wrong answer key to ambiguous questions. In virology more than half of the reviewed items turned out to be faulty, and after filtering out bad questions the order of models in the ranking could change.

  • 5,700MMLU questions reviewed by hand by the MMLU-Redux team
  • c. 6.5%of items with an error: a wrong answer key or an ambiguous question
  • over 50%faulty items in the reviewed virology subset

Even with a correct key a heavier difference remains. A task in a company rarely has four answer options. More often it is twenty pages of a poor-quality scan, industry jargon, internal abbreviations, a requirement to cite the source of every number and a consequence that shows up only in the books. Picking the right answer from a list translates only partly into that kind of work.

Variance: the same model, different results

A benchmark score describes the model together with its surroundings: the system prompt, available tools, number of attempts, how answers are verified and the token limit. In agentic tasks this layer accounts for a large share of the difference between published scores, and it is sometimes described in a single footnote sentence.

Most entries on public leaderboards come from the providers themselves and have never been independently reproduced. In April 2025 researchers from Cohere Labs, AI2 and several universities described in “The Leaderboard Illusion” the practice of testing many private model variants before publication and showing only the best one. Before the Llama 4 release Meta tested 27 variants this way.4 The leaderboard organizers accepted some of the criticism and disputed some, but result selection remains a problem the reader of a ranking faces alone.

Models also change under a fixed name. A version update or a change of default parameters can shift behavior on edge cases, so a table from last quarter already describes a slightly different model.

Your own test set

The alternative is less impressive and far more effective:

Element Rule
Where cases come from 30 to 60 from your own production, including the hard and edge cases where work usually gets stuck
Who defines a good result The person who does this work every day, not the technical team
When to write the criteria Before seeing any results, because criteria added afterwards confirm the earlier thesis
Test conditions The same prompt, tools and number of attempts for every candidate
What to measure besides quality Cost and response time
Where to keep the set Only inside the company, because publishing it starts the contamination cycle

Preparing such a set takes one to three days of work from someone who knows the domain. With 50 cases, differences of a few percentage points mean nothing, but the set reliably separates a model that handles the company’s documents from one that does not.

A model 2 points better on the test and 4 times more expensive rarely wins in the annual budget.

Four questions before quoting a score

When a ranking table ends up in a meeting anyway, it goes through a short filter:

  1. Who reported the score and whether anyone independent reproduced it.
  2. When the task set was created and whether it could already be in training data.
  3. Whether the set has a closed pool that allows overfitting to be detected.
  4. How the test conditions are described: prompt, tools and number of attempts.

A ranking is enough to narrow the candidate list from twenty to three. The decision on which of the three goes into production is made on the company’s own data. We review candidates and plan your own test set as part of an AI Consultation.

Frequently asked questions

Can AI model rankings be trusted?

Partly. Rankings help narrow the candidate list, but scores are distorted by test set contamination, errors in answer keys and result selection by providers.

What is benchmark contamination?

A situation in which test tasks or their solutions ended up in the model's training data. The score then measures the model's memory instead of its skill.

How do you test a model on your own data?

Collect 30 to 60 production cases, write the evaluation criteria before testing and check every candidate under the same conditions, also measuring cost and response time.

Footnotes

  1. Scale AI, “A Careful Examination of Large Language Model Performance on Grade School Arithmetic”, May 2024: https://arxiv.org/abs/2405.00332. ↩

  2. Scale AI, SWE-Bench Pro, September 2025: https://scale.com/blog/swe-bench-pro. ↩

  3. Gema et al., “Are We Done with MMLU?”, 5,700-question sample, estimated 6.49% error rate: https://arxiv.org/abs/2406.04127. ↩

  4. Singh et al., “The Leaderboard Illusion”, April 2025, on 27 private variants tested before the Llama 4 release: https://arxiv.org/abs/2504.20879. ↩

Blog content is informational and educational. It does not constitute legal or tax advice, nor individual business advisory. The scope of our services is described in the terms.

See the package: AI Consultation