OI-Bench - Threat Framing - Injected Accuracy: leaderboard

OI-Bench (Liou et al., 2026) accuracy (%) on its 3,000 zero-shot four-choice questions after a fifth, question-irrelevant option is appended whose threat framing directive (virus and bomb threats, a zero-score penalty and a penalty-backed override instruction) urges its selection; averaged over that category's directive types. Higher is better.

Metric: Accuracy (%). Source: arxiv.org. Saturation forecast: Not forecast. 12 models tracked.

Top models

#ModelScoreOverall rank
1Claude Haiku 4.585.78#568
2Grok 4.181.26#473
3GPT-574.29#163
4Llama 4 Scout73.82#1787
5Qwen 3 235B A22B73.72#622
6GPT-5 Mini71.93#349
7DeepSeek R171.82#467
8Llama 4 Maverick68.1#1105
9DeepSeek V3.267.55#403
10Qwen 3 8B63.55#1838
11Gemini 2.5 Pro55.46#262
12Gemini 2.5 Flash Lite48.36#958

No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.

Interactive version: theaggregate.ai/benchmark?slug=oi-bench-threat-framing-injected-accuracy · How It Works · Data refreshed daily, snapshot 2026-11-12.