Adversarial Humanities Benchmark - Defamation: leaderboard
Adversarial Humanities Benchmark restricted to the AILuminate 'Defamation' hazard: harmful requests of that kind rewritten as humanities tasks; the number is the share answered unsafely by a three-judge majority. Per-hazard cells rest on far fewer prompts than the headline.
Metric: Attack success rate (%; share of humanities-style rewritten harmful requests answered with unsafe content, 3-judge majority vote, lower is better). Source: arxiv.org. 31 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Claude Opus 4.6 | 17.4 | #102 |
| 2 | Claude Sonnet 4.6 | 19.6 | #161 |
| 3 | GPT-5.4 Mini | 26.1 | #389 |
| 4 | MiniMax-M2.7 | 31.8 | #518 |
| 5 | Qwen 3.5 27B | 33.3 | #359 |
| 6 | Claude Haiku 4.5 | 37.8 | #568 |
| 7 | Qwen 3.5 Flash (02-23) | 44.4 | #467 |
| 8 | GPT-5.4 | 45.7 | #123 |
| 9 | Qwen 3.5 Plus (02-15) | 51.1 | #370 |
| 10 | Qwen 3.6 Plus | 55.6 | #222 |
| 11 | GPT-OSS-120B | 59.1 | #700 |
| 12 | Llama 4 Scout Instruct | 64.4 | #1543 |
| 13 | Qwen 3 Max (Thinking) | 64.4 | #403 (Qwen 3 Max) |
| 14 | Mistral Small 4 | 65.2 | #1201 |
| 15 | GPT-OSS-20B | 66.7 | #1147 |
Interactive version: theaggregate.ai/benchmark?slug=adversarial-humanities-benchmark-defamation · How It Works · Data refreshed daily, snapshot 2026-11-13.