CarryoverBench - Latent ASR: leaderboard
CarryoverBench:nanobot persistent-agent runtime,101attack variants and12benign tasks;temp0,sharedprompt/tools. Instant single-shot and Autonomous/Latent any-fire over5followups; utility task-weighted artifact rubric. Qwen3-235B-A22B main run disables thinking; other requested efforts unspecified. Defense/runtime ablations are separate experiments. Rate (%).
Metric: Rate (%). Source: arxiv.org. Saturation forecast: Around January 2027. 5 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | GPT-5.4 | 8.3 | #82 |
| 2 | GLM-5 | 11.1 | #140 |
| 3 | Claude Sonnet 4.6 | 22.2 | #92 |
| 4 | Gemini 3.1 Pro (Preview) | 38.9 | #60 |
| 5 | Qwen 3 235B A22B (Non-reasoning) | 52.8 | #315 (Qwen 3 235B A22B) |
No result here: #4 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.
Interactive version: theaggregate.ai/benchmark?slug=carryoverbench-latent-asr · How It Works · Data refreshed daily, snapshot 2026-10-22.