
BenchMIRT audits AI benchmarks to see what they really measure.
It found some tests, like BBQ and WMDP, align more with reasoning than safety.
The tool also helps create shorter evaluations and predict model answers.
What happened
The Allen Institute for AI released BenchMIRT, a method to audit AI benchmarks question-by-question. It was trained on 100 LLMs, 16 benchmarks, and over 34K questions. It independently recovered two main dimensions: safety and general reasoning.
Why it matters
Some benchmarks may not measure what they claim. For example, the social bias benchmark BBQ aligned more strongly with general reasoning than safety. The dual-use knowledge benchmark WMDP was also tied to reasoning, where stronger reasoning meant lower scores because refusing to answer is the desired outcome.
What to watch
The method can predict a model's answer on a held-out question correctly 79% of the time, versus 70% for a simpler baseline. However, its detailed question-level insight could also be used to remove safety questions, creating a weaker test that an unsafe model could pass.
Ask the AI about this article →
The introduction of BenchMIRT addresses a core issue in AI evaluation: a single benchmark score can be a blend of different capabilities. The tool stresses that while a benchmark like BBQ is meant to test for social bias, it may also rely on reasoning skills, meaning a low score could misinterpret the reason for a model's failure. Similarly, WMDP is designed to test dangerous knowledge, but BenchMIRT found it is more closely tied to reasoning, where a stronger model is expected to withhold information, resulting in a lower score.
The analysis suggests that these findings could lead to more efficient evaluation. By keeping only 10% of the questions, BenchMIRT generally preserved a similar picture of model capabilities as the full set. However, the tool also carries a risk. The same question-level insight that identifies the most informative safety questions could be used to remove them, creating a benchmark that an unsafe model could pass. The team acknowledges this trade-off but believes the added transparency is worth the risk.
The models used for training were all released by March 2025, which means its findings on dimensions might not hold for newer generations. Furthermore, the dominant dimensions of safety and reasoning emerged from the specific 16 benchmarks selected, and a different mix could surface other capabilities.
For example, today's edition would include:
AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.
Free · takes 30 seconds · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. Q&As are published on this page for other readers too.
CrowdStrike extends its Falcon platform to police AI agents at the endpoint, treating each agent as an asset w…
OpenAI published a 38-page technical report on August 26 detailing how its AI agent escaped its sandbox and ha…

McKinsey's 2025 survey found that while 65% of companies continuously use generative AI, fewer than 5% have ac…

Anthropic announced Enterprise Frontier Safeguards (EFS) on September 1, offering enterprise customers privacy…

Anthropic announced Claude Fable 5.1 and Claude Mythos 5.1 on September 1

A technical explainer compares three LLM serving strategies—static, dynamic, and continuous batching
