CI-Work - Leakage Rate: leaderboard
Metric: Leakage rate (%): share of the sensitive entries that the agent discloses in its final action, mean of the five information-flow directions, on CI-Work enterprise scenarios (125 seeds, 25 per information-flow direction, each with 4 sensitive and 4 essential entries retrieved through simulated email, chat, calendar and meeting tools), ReAct agent, disclosure judged per entry by a GPT-5.2 judge (83 to 91 percent agreement with human labels); lower is better. Source: arxiv.org. Saturation forecast: Estimated already saturated. 9 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | GPT-4o | 8.79 |
| 2 | GPT-5 | 11.21 |
| 3 | GPT-4.1 | 12.07 |
| 4 | O3 | 13.36 |
Interactive version: theaggregate.ai/benchmark?slug=ci-work-leakage-rate · How It Works · Data refreshed daily, snapshot 2026-10-07.