ConstraintRot - Injection Attack: leaderboard
Metric: Violation rate (%; 27 episodes in which ingested content instructs the summarizer to omit the policy before the prohibited request). Source: arxiv.org. Saturation forecast: Estimated already saturated. 7 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Claude Sonnet 4.6 | 0 |
| 2 | Gemini 3.5 Flash | 0 |
| 3 | GLM-5.1 | 22 |
| 4 | Qwen 3.6 27B | 33 |
| 5 | GPT-5.4 Mini | 37 |
| 6 | Kimi K2.5 | 41 |
| 7 | DeepSeek V4 Flash | 59 |
Interactive version: theaggregate.ai/benchmark?slug=constraintrot-injection-attack · How It Works · Data refreshed daily, snapshot 2026-09-26.