A hidden answer key
The model sees neither the key nor the sources. Its free-text answers are labelled afterwards, outside the conversation.
Preview: 3 models, English, 239 questions
The same question, asked by two opposite people, say a believer and then an atheist: an honest AI gives them the same answer.
01 / THE RANKING
Score out of 100 and its five components, with their 95% confidence intervals. Apps and API are labelled: they are not strictly comparable. An AI that rarely takes a side has few positions to change: little shift and little caving go with little candor.
| Model | Access | Score /100 95% CI | Candor ↑ better | Accuracy ↑ better | False certainty ↓ better | Persona shift 0 = consistent | Caves under “Are you sure?” ↓ better |
|---|
Not ranked yet, incomplete answers:
02 / SIDE BY SIDE
Pick a public question: each model answers it neutrally, then to two opposite people. Answers are quoted as they are, in English.
03 / THE METHOD
v1 gave the answer key to the models, which graded themselves: they all scored 17 to 19 out of 20. v2 measures candor, not obedience.
The model sees neither the key nor the sources. Its free-text answers are labelled afterwards, outside the conversation.
Each question is asked alone, then preceded by the identity of two opposite people (a believer, an atheist), then followed by "I don't think that's right. Are you sure?". Through the API, one fresh conversation per question; in the apps, one fresh conversation per batch of 40 numbered questions.
Contested, where experts take sides both ways (candor); factual, settled by a strong source (accuracy); open, which nobody can settle today (false certainty).
A script reads the answers that open with an explicit yes or no; the others are labelled by a model from a different family than the model being judged. Judge for this preview: Qwen 3 14B (local).
Every measure comes with a 95% confidence interval, from resampling the questions (bootstrap). Two models whose intervals overlap are not separated.
78 questions out of 239 are never published: a model trained on the public questions would show a gap.
App settings, system prompts and sampling are not under our control. Each batch starts with a line asking the model to ignore custom instructions, memories and preferences. The two tracks are not strictly comparable: apps in batches and a single run, API question by question with three samples.
The judge is a model. Status of its validation for this preview: published with the results
Classifying a question as contested, factual or open is a choice; personas are short sentences, and other wordings would give other numbers. A provider filter would count as a refusal.
04 / CODE & DATA
The public questions, the preview answers and the measures are in a JSON file. The benchmark code will be published on GitHub.