CarryoverBench - Overall ASR: leaderboard

CarryoverBench:nanobot persistent-agent runtime,101attack variants and12benign tasks;temp0,sharedprompt/tools. Instant single-shot and Autonomous/Latent any-fire over5followups; utility task-weighted artifact rubric. Qwen3-235B-A22B main run disables thinking; other requested efforts unspecified. Defense/runtime ablations are separate experiments. Rate (%).

Metric: Rate (%). Source: arxiv.org. Saturation forecast: Around January 2027. 5 models tracked.

Top models

#ModelScoreOverall rank
1GPT-5.411.9#82
2Claude Sonnet 4.618.8#92
3GLM-527.7#140
4Gemini 3.1 Pro (Preview)51.5#60
5Qwen 3 235B A22B (Non-reasoning)63.4#315 (Qwen 3 235B A22B)

No result here: #4 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=carryoverbench-overall-asr · How It Works · Data refreshed daily, snapshot 2026-10-22.