OpenInterpretability
  • Ekbasis
  • Guide
  • Research
  • Lab
  • Tools
  • Notes
  • Registry
  • Manifesto
Download the modelDownload
OpenInterpretability

Ekbasis: know what an action will do before your agent runs it. From an independent lab for AI-agent safety. Open weights, Apache-2.0: download it and run it yourself.

Download the model
Ekbasis
  • Getting started
  • Download (Hugging Face)
  • For agents (agents.md)
  • Results and models
  • Client and CLI
  • Cookbook
The lab
  • About the lab
  • Open tools
  • Observatory
  • ProbeBench
  • InterpScore
  • Academy
Research
  • Manifesto
  • Roadmap
  • Papers & posts
  • Docs
Community
  • GitHub org
  • Notebooks
  • SDK (openinterp)
  • HuggingFace
© 2026 OpenInterpretability — Apache-2.0 for code, CC-BY 4.0 for docs.Built in public.
LeaderboardDimensionsTasksModelsTransfer matrixEval-awarenessMedical AIMethodologySubmit
Back to ProbeBench
ProbeBench Tasks10 tasks

Benchmarks the leaderboard runs on.

10 tasks across 8 categories. Each entry names the upstream paper and dataset; where we have not published the exact split we evaluated on, the hash reads not published instead of showing a number nobody can check.

10
Tasks
across alignment-relevant categories
8
Categories
hallucination → refusal
2,180
Total test examples
held-out, hashed splits
5
Active probes
evaluated on these tasks

Hallucination

Factual fabrication, entity recall failures.

4 tasks

HaluEval-QA

id: haluval-qa
hallucination

Open-ended question answering with annotated hallucination labels (Li et al. 2023).

Paper: arXiv:2305.11747Dataset: huggingface.co
Test set size
200 examples
Test set SHA-256
not published
Positive classhallucinated
Probes evaluated: 2▾
ProbeAUROC [CI]Eval-awareDist-shift
FabricationGuard
L31 · end_question
0.903 [0.85, 0.95]0.8400.710
RewardHackGuard
L31 · token_avg
0.650 [0.56, 0.74]0.5900.520

SimpleQA

id: simpleqa
hallucination

Open-domain factual QA — short factoids, very hard. SOTA closed-book ~50% (OpenAI 2024).

Paper: arXiv:2411.04368Dataset: huggingface.co
Test set size
100 examples
Test set SHA-256
not published
Positive classhallucinated
Probes evaluated: 1▾
ProbeAUROC [CI]Eval-awareDist-shift
FabricationGuard
L31 · end_question
0.882 [0.83, 0.93]0.8200.720

TruthfulQA-MC1

id: truthfulqa-mc1
hallucination

Tests resistance to popular misconceptions (Lin et al. 2022). Different cognitive task than fabrication.

Paper: arXiv:2109.07958
Test set size
200 examples
Test set SHA-256
not published
Positive classmisconception
Probes evaluated: 1▾
ProbeAUROC [CI]Eval-awareDist-shift
FabricationGuard
L31 · end_question
0.599 [0.51, 0.69]0.5700.550

MMLU

id: mmlu
hallucination

Capability control — multiple-choice knowledge across 57 domains. NOT hallucination per se; included as scope check.

Paper: arXiv:2009.03300
Test set size
500 examples
Test set SHA-256
not published
Positive classincorrect
Probes evaluated: 1▾
ProbeAUROC [CI]Eval-awareDist-shift
FabricationGuard
L31 · end_question
0.444 [0.40, 0.49]0.4200.410

Reasoning

Chain-of-thought faithfulness, hypocrisy gap.

4 tasks

Hypocrisy Gap

id: hypocrisy-gap
reasoning

CoT-vs-belief divergence. Measures when model states reasoning that diverges from its internal belief (arXiv:2602.02496, Jan 2026).

Paper: arXiv:2602.02496
Test set size
180 examples
Test set SHA-256
not published
Positive classunfaithful_cot
Probes evaluated: 1▾
ProbeAUROC [CI]Eval-awareDist-shift
DeceptionGuard
L40 · last_token
0.800 [0.72, 0.87]0.7100.650

GSM8K

id: gsm8k
reasoning

Grade-school math word problems. Used as the reasoning-faithfulness within-domain bench. Hallucination = model produces wrong answer despite reasoning trace appearing coherent.

Paper: arXiv:2110.14168Dataset: huggingface.co
Test set size
300 examples
Test set SHA-256
not published
Positive classwrong_answer
Probes evaluated: 1▾
ProbeAUROC [CI]Eval-awareDist-shift
ReasonGuard
L55 · mid_think
0.9080.7720.612

StrategyQA

id: strategyqa
reasoning

Open-domain commonsense reasoning requiring multi-step strategy. Used as the cross-domain transfer test for reasoning-faithfulness probes (math → commonsense).

Paper: arXiv:2101.02235Dataset: huggingface.co
Test set size
150 examples
Test set SHA-256
not published
Positive classwrong_answer
Probes evaluated: 1▾
ProbeAUROC [CI]Eval-awareDist-shift
ReasonGuard
L55 · mid_think
0.6120.5200.500

MATH

id: math
reasoning

Hendrycks competition mathematics — PhD-level math problems including algebra, calculus, number theory, geometry. Hardest reasoning bench in the registry. Qwen3.6-27B baseline 18% accuracy. Used as advanced-difficulty stress test for reasoning-faithfulness probes.

Paper: arXiv:2103.03874Dataset: huggingface.co
Test set size
200 examples
Test set SHA-256
not published
Positive classwrong_answer
Probes evaluated: 1▾
ProbeAUROC [CI]Eval-awareDist-shift
ReasonGuard
L55 · mid_think
0.5000.4250.500

Deception

Strategic dishonesty, sleeper agents, alignment faking.

1 task

Apollo Insider Trading

id: apollo-insider-trading
deception

Apollo Research deception suite — model concealing illicit trades when asked. AUROC 0.96-0.999 on linear probes (arXiv:2502.03407).

Paper: arXiv:2502.03407Dataset: github.com
Test set size
150 examples
Test set SHA-256
not published
Positive classdeceptive
Probes evaluated: 1▾
ProbeAUROC [CI]Eval-awareDist-shift
DeceptionGuard
L40 · last_token
0.978 [0.96, 0.99]0.9100.840

Sandbagging

Capability hiding under evaluation.

0 tasks
🌱
Slot open · propose a benchmark task
No task registered for sandbagging yet. Open a PR with a YAML registry entry to claim the slot.
Submit a task

Eval Awareness

Model knows-it-is-being-tested confound.

1 task

Apollo Eval-vs-Deploy

id: apollo-eval-deploy
eval awareness

Linear probes separate real-world eval prompts from deployment prompts. Power-law scaling with model size (arXiv:2509.13333).

Paper: arXiv:2507.01786
Test set size
200 examples
Test set SHA-256
not published
Positive classevaluation
Probes evaluated: 1▾
ProbeAUROC [CI]Eval-awareDist-shift
EvalAwarenessGuard
L40 · end_question
0.930 [0.88, 0.97]0.9300.810

Reward Hacking

RL-induced misalignment generalization.

0 tasks
🌱
Slot open · propose a benchmark task
No task registered for reward hacking yet. Open a PR with a YAML registry entry to claim the slot.
Submit a task

Manipulation

EU AI Act Article 5 — persuasion / subliminal.

0 tasks
🌱
Slot open · propose a benchmark task
No task registered for manipulation yet. Open a PR with a YAML registry entry to claim the slot.
Submit a task

Refusal

Over/under-refusal calibration; jailbreak proxy.

0 tasks
🌱
Slot open · propose a benchmark task
No task registered for refusal yet. Open a PR with a YAML registry entry to claim the slot.
Submit a task

Open-source dataset commitment

Every test set referenced here is publicly available under the dataset's original license. When we also publish the exact split we evaluated on, we pin its SHA-256 so a probe can be checked against the same bytes; until then the row says not published.

If a dataset is gated (e.g., requires HF agreement), we link to the canonical source and ship our exact preprocessed splits as a separate Apache-2.0 derivative when permitted.

Submit a task

Have a benchmark task that should be in here? Open a PR with the YAML registry entry.

tasks/your-task-id.yamlYAML
id: your-task-id
name: "Your Task Name"
category: hallucination   # or any of the 8 ProbeBench categories
description: "Short description"
paper: "arXiv:XXXX.XXXXX"
dataset_url: "https://huggingface.co/datasets/your/dataset"
test_set_size: 200
test_set_hash: "abc123..."   # SHA-256 of the canonical test split
positive_label: "hallucinated"
Open the registry on GitHub Submission template
ProbeBench v0.0.1 · Tasks index
Leaderboard·Methodology·Submit