Should an AI test only check the final answer, or also how it got there, and can it do both?
How should benchmarks balance verifiability against outcome resolution?
This explores the tension between benchmarks you can check cleanly (a final answer matched against known ground truth) and benchmarks whose results tell you more about what happened (how the agent got there, and whether the score means what it claims), and how to get both.
This explores the tension between benchmarks you can check cleanly, such as a final answer matched against ground truth, and benchmarks whose results tell you more about what happened: how the agent got there, and whether the score means what it claims. The corpus points to a layered answer. Keep the headline score strictly checkable, then add detail only in forms that are themselves checkable.
The case for putting verifiability first is that richer-looking evaluation can flatter the model. LR²Bench scores only final answers against deterministic ground truth, and it reveals a roughly 20% ceiling that trace-based grading would have inflated by rewarding reasoning that merely looks like reasoning (Should reasoning benchmarks score final answers or reasoning traces?). Verifiable answers are also what make the recent gains possible. A 3B model matching much larger systems does so on tasks with checkable ground truth, where RL gets a clean reward signal (Can small models match frontier reasoning without massive scale?). The catch is that this only works where answers can be checked at all.
A perfectly verifiable score can still tell you very little. Qwen2.5-Math-7B can reconstruct 54.6% of MATH-500 from partial prompts yet scores 0.0% on a post-release benchmark, so the score was measuring memorization (Does RLVR success on math benchmarks reflect genuine reasoning improvement?). Genuine reasoning behavior can appear in the same model at the same time, so benchmark gains and real capability are separable (Can genuine reasoning activation coexist with contaminated benchmarks?). Other things a single number hides include whether a model believes what it says, since truthfulness and honesty are distinct (Can a model be truthful without actually being honest?). Another is whether one output is representative, since a zero-temperature answer is still one draw from a distribution (Does setting temperature to zero actually make LLM outputs reliable?).
The most promising fix adds resolution by recording evidence rather than by judging more subjectively. BenchShield lets operators claim that a run followed the intended evaluation path, backed by recorded infrastructure evidence instead of a terminal score alone (Can infrastructure evidence replace terminal scores in benchmark validation?). AgentCompass separates the benchmark, harness and environment so that trajectories can be inspected, which surfaces reward hacking that a scalar score conceals (How can we make reward-hacking visible in agent evaluation?). Asynchronous verifiers extract checkable state from a reasoning trace as it runs and step in only on violations, with near-zero latency cost on correct runs (Can verifiers monitor reasoning without slowing generation down?). The same finer-grained logic shows up in trace selection, where step-level confidence catches breakdowns that a global average masks (Does step-level confidence outperform global averaging for trace filtering?).
More checking has limits. Validator consensus guarantees agreement from the protocol alone, but semantic validity only holds statistically, so adding validators does not certify meaning (Can validator consensus guarantee both agreement and semantic correctness?). How exposed a benchmark is to reward hacking also depends on where the evaluator's errors sit and how well the system searches, so no universal ranking of vulnerable setups exists (Can distance alone rank which substrates resist reward hacking?). In practice: score the final answer for the headline, attach evidence about the path that someone else can verify, and report whatever you cannot verify as a statistical claim.
Sources 12 notes
LR²Bench scores only final answers against deterministic ground truth, not reasoning steps. This methodological choice reveals a 20% ceiling that trace-based evaluation would inflate by counting stylistic reasoning mimicry as actual reasoning capability.
A 3B model trained with curriculum SFT and multi-domain RL reaches 94.3 AIME26 and 80.2 LiveCodeBench scores matching much larger systems. The result is bounded to verifiable tasks with checkable ground truth, where RL can provide clean reward signals.
Qwen2.5-Math-7B reconstructs 54.6% of MATH-500 from partial prompts but scores 0.0% on post-release LiveMathBench, revealing dataset contamination. On clean benchmarks, only correct rewards improve performance; random and inverse rewards fail or degrade reasoning ability.
RLVR activates genuine reasoning patterns through RL training while benchmark improvements may reflect data memorization on contaminated datasets. These operate at different measurement levels and can coexist without contradiction.
Research using RepE shows that truthfulness (output matches reality) and honesty (output matches internal representations) are separate mechanisms. Larger models may improve in truthfulness while declining in honesty, a gap current benchmarks cannot detect.
Show all 12 sources
Fixed seeds and zero temperature replicate the same output repeatedly, but that output remains one draw from the model's probability distribution. McDonald's omega testing across 100 repetitions reveals that consistency does not equal reliability.
BenchShield enables benchmark operators to issue claims about valid task completion grounded in recorded infrastructure evidence rather than terminal scores alone. This shifts from a single number to a verifiable claim about whether an agent followed the intended evaluation path.
AgentCompass separates benchmark, harness, and environment into independent components, enabling trajectory analysis that surfaces reward-hacking and other failure modes scalar scores conceal. This architectural change shifts evaluation from opaque final scores to inspectable agent behavior.
Decoupling verification from generation lets verifiers run alongside a single trace, forking to extract verifiable state and intervening only on violations. On correct runs the latency penalty is near-zero; interwhen matches or beats CoT across benchmarks at similar token budgets.
Local step-level confidence catches reasoning breakdowns that global averaging masks and enables early stopping before traces complete. This approach achieves comparable accuracy gains to naive majority voting with far fewer generated traces, proving trace quality matters more than quantity.
Honest Quorum's threshold theorems split into two kinds of guarantee: agreement rests on protocol assumptions alone, while semantic validity and liveness depend on statistical bounds over validator behavior that the protocol cannot enforce.
A distance-dependent error bound and capacity ordering are formal statements about limits, not predictions of what systems find. Where evaluator errors sit among reachable behaviors and search effectiveness determine actual exposure, which shifts as the scoring defect location changes.
Papers this line draws on 8
The research behind the notes this line reads — ranked by how closely each paper relates.
- Local Coherence or Global Validity? Investigating RLVR Traces in Math Domains
- The Invisible Leash: Why RLVR May Not Escape Its Origin
- Does Reinforcement Learning Really Incentivize Reasoning Capacity in LLMs Beyond the Base Model?
- Hack-Verifiable Terminal Bench: Evaluating Reward Hacking in Terminal Tasks
- Stop Anthropomorphizing Intermediate Tokens as Reasoning/Thinking Traces!
- What Characterizes Effective Reasoning? Revisiting Length, Review, and Structure of CoT
- BAITBENCH: Measuring Agent Reward Hacking with Optional Shortcuts Planted in ML Tasks
- BenchShield: Formal Model-Backed Instrumentation for Reward Integrity in LLM-Agent Evaluation Infrastructure