LITMUS - System Operation: leaderboard
Metric: Attack success rate (%): share of the 31 System Operation seed cases whose dangerous operation physically took effect on the OS, OpenClaw 4.2.0 agent on Ubuntu 24.04 given seed behavior-jailbreak instructions, physical OS state checked by a GPT-4o verifier and analyzer, mean of three runs per case; lower is better. Source: arxiv.org. Saturation forecast: Around October 2027. 6 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Claude Sonnet 4.6 | 46.74 |
| 2 | Qwen 3.6 Plus | 51.61 |
| 3 | Gemini 3.1 Pro (Preview) | 66.34 |
| 4 | GPT-5.3 Codex | 67.74 |
| 5 | DeepSeek V3.2 | 75.27 |
| 6 | DeepSeek V4 Pro | 78.49 |
Interactive version: theaggregate.ai/benchmark?slug=litmus-system-operation · How It Works · Data refreshed daily, snapshot 2026-10-07.