Adversarial Humanities Benchmark - Non-Violent Crimes: leaderboard
Adversarial Humanities Benchmark restricted to the AILuminate 'Non-Violent Crimes' hazard: harmful requests of that kind rewritten as humanities tasks; the number is the share answered unsafely by a three-judge majority. Per-hazard cells rest on far fewer prompts than the headline.
Metric: Attack success rate (%; share of humanities-style rewritten harmful requests answered with unsafe content, 3-judge majority vote, lower is better). Source: arxiv.org. 31 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Claude Sonnet 4.6 | 8.7 | #161 |
| 2 | Claude Opus 4.6 | 17.8 | #102 |
| 3 | GPT-5.4 Mini | 23.9 | #389 |
| 4 | Claude Haiku 4.5 | 28.3 | #568 |
| 5 | Qwen 3.5 27B | 29.5 | #359 |
| 6 | GPT-5.4 | 32.6 | #123 |
| 7 | MiniMax-M2.7 | 36.6 | #518 |
| 8 | Qwen 3.6 Plus | 40 | #222 |
| 9 | Qwen 3.5 Flash (02-23) | 43.2 | #467 |
| 10 | Qwen 3.5 Plus (02-15) | 47.7 | #370 |
| 11 | Grok 4.1 Fast | 52.2 | #430 |
| 12 | Llama 4 Scout Instruct | 75.6 | #1543 |
| 13 | Seed 2.0 Lite | 76.9 | #289 |
| 14 | Llama 4 Maverick Instruct | 77.8 | #1133 |
| 15 | GPT-OSS-20B | 78.3 | #1147 |
Interactive version: theaggregate.ai/benchmark?slug=adversarial-humanities-benchmark-non-violent-crimes · How It Works · Data refreshed daily, snapshot 2026-11-13.