CarryOnBench - Harmfulness (No Clarifications): leaderboard
Metric: Harmfulness (1-5): GPT-5.2 rates each response for harmful or policy-violating content (4 or more is harmful); a conversation scores its worst turn, averaged over conversations, over multi-turn conversations of 4 to 12 turns with only pushback, rephrasing and non-contentful user turns, conversation-level, on CarryOnBench (398 seemingly harmful SORRY-Bench queries with a benign underlying intent; user turns simulated by Gemini-3-Flash); lower is better. Source: arxiv.org. Saturation forecast: Not forecast. 14 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Claude Haiku 4.5 | 1.7 |
| 2 | Claude Sonnet 4 | 1.7 |
| 3 | Olmo 3.1 32B Instruct | 1.8 |
| 4 | GPT-OSS-120B | 1.9 |
| 5 | GPT-5 Mini | 2 |
| 6 | GPT-5.4 | 2.1 |
| 7 | Llama 4 Maverick | 2.1 |
| 8 | OLMo 3 7B Instruct | 2.1 |
| 9 | Qwen 3 235B A22B | 2.3 |
| 10 | Gemini 3.1 Pro (Preview) | 2.8 |
| 11 | Qwen 3 32B | 3.1 |
| 12 | DeepSeek V3.1 | 3.1 |
| 13 | Qwen 3 Next 80B A3B Instruct | 3.3 |
| 14 | Mixtral 8x7B Instruct (v0.1) | 3.3 |
Interactive version: theaggregate.ai/benchmark?slug=carryonbench-harmfulness-no-clarifications · How It Works · Data refreshed daily, snapshot 2026-10-07.