Does a single benchmark score actually predict agent readiness?
Single-axis benchmarks rank models by one capability—like task success—but ignore privacy, duration, operating mode, and ecosystem fit. Can one number really capture what matters for deployment?
Multiple 2026 findings converge on the same methodological claim, each from a different angle: agent capability cannot be evaluated as a scalar. It decomposes into separable axes, and benchmarks that score one axis produce rankings that fail to predict performance on the others.
Do phone agents succeed at all three critical tasks equally? is the cleanest demonstration. Across five frontier models on 300 phone-use tasks, the three properties are statistically distinct — no single model dominates all three. Models that win on task success may lose on privacy compliance because they complete tasks by overfilling personal data. Models with mediocre success may have better privacy compliance because they stop at minimal disclosure. The single-axis "task success" benchmark produces rankings that get reshuffled the moment a second axis is added.
Do short benchmarks predict how models perform over long workflows? adds a temporal axis. Models that perform comparably on single-turn benchmarks diverge dramatically by relay round 25 — different degradation curves, different decay characteristics, different failure modes. Length-of-interaction is its own axis; benchmarks that hold it short cannot characterize what happens long.
Are LLM and agent benchmarks really measuring different things? surfaces yet another axis: operating mode. A model's "LLM benchmark" performance (single-turn completion) and its "agent benchmark" performance (multi-step tool use) measure different operating regimes of the same artifact. The capability has at least two numbers, and which one matters depends on deployment context. Bifurcating the benchmark literature treats them as separate models; they are the same model in different modes.
Why do capable AI agents still fail in real deployments? adds an environmental axis. Even when an agent's intrinsic capability is high, deployment success requires ecosystem properties — value-generation alignment, personalization, trust, social acceptability, standardization — that capability benchmarks do not test. The benchmark is necessary but not sufficient.
Why do AI agents fail at workplace social interaction? grounds the abstract argument in deployment data. The benchmark-to-real-world gap is enormous — frontier models that score impressively on agent benchmarks fail 70% of real workplace tasks. The benchmarks and the deployment are not measuring the same capability.
Together these argue for a structural change in how agent capability is reported.
The current practice of ranking models by a single score is, at best, useful for narrow deployment matched to the benchmark's axis. For broader deployment, single-axis rankings are actively misleading. A capability vector with at minimum 4-5 axes — task success, privacy compliance, long-horizon retention, mode-shift behavior, ecosystem readiness — is the right unit of evaluation.
For benchmark designers, this argues that joint evaluation should be the default rather than a research add-on. A benchmark suite that reports five axes and refuses to collapse them to a single number forces the consumer to consider which axis matters for their deployment. Single-number rankings make the decision invisible.
For agent developers, this changes the optimization target. Optimizing for single-benchmark success produces models that win the benchmark and lose deployment. Optimizing for multiple axes simultaneously produces models that might score middling on any one but are robust across the deployment regime. The vector framing changes which model is "best" depending on the use case — which is what production deployment requires anyway.
The pattern extends beyond agents. Does preference tuning actually reduce the diversity of model outputs? shows the same dynamic for diversity evaluation: raw diversity and effective diversity diverge, and which metric matters depends on use case. Can post-training objectives preserve reasoning style alongside correctness? shows it for post-training objectives: answer correctness is one axis, reasoning style is another, and they can move opposite directions. The "vector not scalar" pattern recurs.
The deeper observation: capability has always been multi-dimensional. Single-number evaluation is a methodological convenience that compresses out structure the deployment context cares about. The compression is invisible while the benchmark axis aligns with deployment needs and visible (as deployment surprise) when it does not.
Inquiring lines that read this note 116
This note is a source for these research framings, grouped by the broader line of inquiry each explores. Scan the bold lines of inquiry; follow any specific question forward.
How can outcome-only reporting obscure the true mechanisms of safety?- What status categories best represent user goal progress without penalizing external failures?
- How do coverage and identifiability set separate performance ceilings?
- What capability risks emerge when models are optimized for single domains?
- Why do metric choices constrain which model capabilities get developed?
- Which open source models meet the threshold for viable on-premise deployment?
- How much do metric choices inflate claims about model capabilities?
- What reporting standards would make interactive evaluation scores comparable across benchmarks?
- Should long horizon performance be measured as a separate evaluation axis?
- What capability dimension does a closed-ended exam actually fail to measure?
- Can a single Elo ranking represent multidimensional model capability?
- Can deterministic scoring capture the judgment work that deployment requires?
- What capability dimensions does a single aggregate pass rate hide?
- How should single-axis benchmarks account for separable capability dimensions?
- How does a single score mix exploitation ability with task capability?
- How do benchmark scores differ from deployment safety requirements?
- Why does adopting benchmarks one at a time produce non-comparable scores?
- Can infrastructure records restore meaning to a single benchmark score?
- Does monitor position in the optimization loop matter more than capability gaps?
- Where do outcome grades come from once a model enters deployment?
- Can benchmark scores alone prove a model's exploitation capability?
- Can mathematical capability distributions be read as unified rather than separate?
- Can single benchmark scores predict whether a model is ready to deploy?
- What specific failure modes must evaluation catch before deploying action-capable systems?
- Why do identical benchmark scores not guarantee deployment safety?
- Why do 85 percent of production agents avoid third-party frameworks?
- Which ecosystem conditions matter most for agent deployment success?
- Which AI capabilities matter most for human-facing deployment contexts?
- Are deployment plans consistently outpacing workforce preparation across industries?
- Why do text-only benchmarks underestimate deployed model capability?
- What deployment context determines which benchmark mode actually matters?
- How should benchmarks evaluate workflow architecture versus raw model performance?
- Why do current benchmarks fail to match user satisfaction with search results?
- Why do models that excel at task success often fail at privacy compliance?
- What is the gap between benchmark performance and real workplace task completion?
- Why do short interaction benchmarks fail to predict long horizon performance?
- Why do estimates for task-level performance differ so much from full job automation timelines?
- What real-world tasks most clearly expose gaps between benchmark performance and actual capability?
- Why do benchmarks become saturated so quickly after initial launch?
- How much do prompts and data splits shift a single benchmark score?
- What drives the mismatch between general benchmark leadership and task-specific performance?
- Do public benchmarks systematically overstate open model capabilities?
- How similar must finetuning data be to a benchmark to predict performance?
- Why do completion-mode strengths not transfer to agentic settings?
- How do mode-specific failures differ between completion and agent benchmarks?
- Why do identical task success rates mask deployment readiness differences?
- What makes some agent benchmarks measure interaction quality better than others?
- How should benchmarks measure agent efficiency across all three cost dimensions?
- Can single benchmarks predict whether an agent will work in the real world?
- Can high benchmark scores mislead deployment decisions for search agents?
- What evaluation structure would capture deployment readiness instead of benchmark scores?
- Does single-capability ranking guarantee agent failure in production deployment?
- Can a single axis benchmark ever represent deployment readiness accurately?
- Can single-axis benchmarks measure across all three agent capability layers?
- What makes single-axis benchmarks systematically misrepresent deployment readiness?
- What shortcuts in data or models let agents inflate benchmark scores?
- What agent evaluation dimensions beyond task success does a single number hide?
- Can infrastructure evidence ground benchmark claims better than terminal scores alone?
- Do success-only evaluations systematically overestimate real-world deployment readiness?
- How do single-axis safety benchmarks misrepresent deployment readiness?
- Does a single benchmark score systematically misrepresent multi-axis agent capability?
- Can a single capability score hide an agent's tendency to game evaluations?
- What other gaps exist between measured and actual cybersecurity agent capability?
- What makes single-axis agent benchmarks unreliable for predicting deployment readiness?
- How do agent capability axes misalign with what users actually value?
- How do agent benchmarks misrepresent real-world deployment readiness?
- How do benchmark environments misrepresent deployment readiness?
- Which separable capability axes reveal when single benchmarks misrepresent deployment readiness?
- Can a single leaderboard score capture multi-dimensional differences in agent performance?
- Can single performance scores hide important differences in how agents approach research tasks?
- What realism standards should compliance benchmarks meet to avoid evaluation gaming?
- Can a single benchmark score capture both progress and readiness?
- Can a single agent benchmark score accurately represent deployment readiness?
- Why do single-axis benchmarks fail to measure deployment-ready agent capability?
- How do single-axis benchmarks misrepresent AI agent readiness for deployment?
- Does agent capability separate into independent axes like performance and integrity?
- Why do single benchmarks fail to capture readiness across separate capability axes?
- Do single-axis security benchmarks miss agent failure modes in other dimensions?
- Can single-axis benchmarks fully represent deployment-ready agent capability?
- What structural changes would make agent leaderboards trustworthy?
- How should benchmarks measure agent performance across multiple dimensions beyond accuracy?
- Do current agent benchmarks confuse model development with deployment decisions?
- How do sharded HNSW indices preserve capability distinctions at scale?
- Does agent capability decompose into separable independent axes?
- What makes a trajectory score interpretable across different interactive benchmarks?
- How do agent privacy compliance and task success differ in evaluation?
- Do trajectory quality metrics predict agent safety and user trust?
- What trajectory-level metrics replace one-shot task success measurement?
- What trajectory-level metrics matter beyond one-shot task success?
- What evidence should benchmark operators attach to completion claims?
- Can test environments reliably predict how models behave in actual deployment?
- Why is measurement during training critical before deployment?
- What makes synthetic control benchmarks representative of real deployment misalignment risks?
- Do all frontier model developers face the same insider-threat risk from their systems?
- Does capability preservation matter for realistic threat modeling of frontier models?
- Why do static benchmarks miss frontier capabilities that open-world tasks reveal?
- Why does benchmark saturation give a false sense of capability coverage?
- Why do open-world evaluations reveal capabilities that static benchmarks hide?
- Do multi-axis benchmarks reveal failures that single-axis benchmarks systematically hide?
- What gap exists between AI model capability in benchmarks and real client work?
- Does higher capability correlate with more benchmark contamination?
- Which harness dimensions most directly predict agent system reliability?
- Do automated benchmarks systematically distort what long-horizon agent capability actually looks like?
- What gaps exist between cyber capability testing and agent containment?
- How do frontier AI models currently score on measured cyber offense capability?
- Can current cybersecurity benchmarks measure model exploitation risk?
- Should production classifiers be present during maximum-capability exploitation benchmarks?
Related concepts in this collection 10
This note in its neighbourhood — explore the map, then jump to a related concept in the list below.
Click a node to walk · click center to open · click Open in graph to see this note in the full knowledge graph
-
Do phone agents succeed at all three critical tasks equally?
Explores whether task success, privacy compliance, and preference reuse develop together in phone-use agents, or whether benchmarking one capability tells you nothing about the others.
the cleanest single-paper demonstration; three statistically distinct axes within one deployment domain
-
Do short benchmarks predict how models perform over long workflows?
Standard LLM benchmarks measure single-turn performance, but real workflows involve sustained delegation across many turns. The question explores whether top benchmark performers maintain accuracy through longer interaction chains.
adds the temporal axis: interaction length as a separable capability dimension
-
Are LLM and agent benchmarks really measuring different things?
Do LLM benchmarks and agent benchmarks test fundamentally different capabilities, or are they two modes of the same model? Understanding this shapes how we evaluate and develop AI systems.
adds the operating-mode axis: completion mode vs agentic mode as separable capabilities
-
Why do capable AI agents still fail in real deployments?
Explores whether agent failures stem from insufficient capability or from missing ecosystem conditions like user trust, value clarity, and social norms. Understanding this distinction matters for predicting which agents will succeed.
adds the ecosystem axis: capability is necessary but not sufficient for deployment
-
Why do AI agents fail at workplace social interaction?
Explores why current AI agents struggle most with communicating and coordinating with colleagues in realistic workplace settings, despite strong reasoning capabilities in other domains.
empirical grounding: benchmark-to-deployment gap quantified
-
Do autonomous agents report success when actions actually fail?
Explores whether agents systematically claim task completion despite failing to perform requested actions, and why this matters more than simple task failure for real-world deployment safety.
instance of cross-axis miscalibration: high task-success scores are unreliable when the model can claim success on failed tasks
-
Does preference tuning actually reduce the diversity of model outputs?
The field assumes RLHF and DPO reduce diversity, but this assumption rests on measuring all outputs equally. What happens if we only count diverse outputs that meet quality thresholds?
pattern instance in diversity evaluation
-
Can post-training objectives preserve reasoning style alongside correctness?
Even mathematically sound training objectives may suppress reasoning behaviors like uncertainty expression without penalizing them. Does optimizing for answer correctness inadvertently degrade the stylistic features that enable generalization?
pattern instance in post-training: single-objective optimization has unmeasured side channels
-
Does agent capability matter more than coordination infrastructure?
As AI agents take on economic and social roles, what actually limits their effectiveness: the raw reasoning power of the model itself, or the systems that let them coordinate, stay accountable, and leave evidence of their actions?
extends: capability-as-vector explains why a benchmark-leading model can still fail as a social/economic actor — coordination is the missing axis
-
Can we measure reward hacking reliably enough to act on it?
Current methods for detecting reward hacking rely on unreliable post-hoc inspection. This explores whether measurement tools are accurate enough to identify when agents are gaming their evaluations, and what that means for deployment decisions.
extends: names reward hacking as one more readiness axis, the rate at which checks are met by means that violate their intent, which a pass rate folds into capability; a stated position with no hacking rate in the excerpt, so the axis is proposed and not populated
Related papers in this collection 8
Papers most semantically related to this note, ranked by cosine similarity in the embedding space.
- Towards a Science of AI Agent Reliability
- Holistic Agent Leaderboard: The Missing Infrastructure for AI Agent Evaluation
- Research Update: Towards Reconciling Slowdown with Time Horizons (algorithmic vs holistic evaluation)
- Open-World Evaluations for Measuring Frontier AI Capabilities
- Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response
- Measuring AI Ability to Complete Long Software Tasks
- LiveMCP-101: Stress Testing and Diagnosing MCP-enabled Agents on Challenging Queries
- A Framework for Studying AI Agent Behavior: Evidence from Consumer Choice Experiments
Original note title
agent capability is a vector across separable axes — single-axis benchmarks systematically misrepresent deployment readiness