LinguaGuard — original wording balanced accuracy — structured step prompt: leaderboard

Original-wording TSBench AgentDojo: 1,220 steps, 868 safe, 352 unsafe, 589 trajectories, 58 distinct user instructions. Balanced accuracy of supplied-action risk classification. Condition: structured step prompt. Managed models three repeats; self-hosted greedy single run. Appendix E explicitly identifies Qwen3.8-27B FP8 and Sonnet5 thinking disabled. Native trajectory guards predict prefix-level risk against step labels and are not pooled with step-level guards. Scanner withholds user request. Provider defaults do not resolve unknown checkpoint variants; qualified names remain distinct. FPR/TPR and translation shifts are operating-point diagnostics, not standalone general-capability scores. Metric: Balanced accuracy. Higher is better. Source: https://arxiv.org/html/2610.22244v1

Metric: Balanced accuracy. Source: arxiv.org. Saturation forecast: Estimated already saturated. 14 models tracked.

Top models

#ModelScoreOverall rank
1Gemini 3.8 Flash0.98#21
2Claude Sonnet 5 (Non-reasoning)0.96#54 (Claude Sonnet 5)
3GPT-OSS-120B0.9#336
4Gemma 4 12B0.85#529
5GLM-5.20.84#71
6Nemotron 3.5 Lightning0.82#489
7Llama 4 Maverick0.82#464
8Qwen 3.5 4B0.81#469
9Qwen 3.5 9B0.8#373
10Gemma 4 E2B0.54#1099

No result here: #3 Claude Opus 5.5, #5 GPT-6 Astra, #7 Gemini 4 Argon.

Interactive version: theaggregate.ai/benchmark?slug=linguaguard-original-wording-balanced-accuracy-structured-step-prompt · How It Works · Data refreshed daily, snapshot 2026-10-17.