PiSAs (Single Agent): leaderboard

One assistant serves several co-workers and holds all their personal details while making an organisational decision such as ticket allocation or a discharge check; the number is the share of details inappropriate for that task that it passes on, under a High privacy instruction. Unlike CIMemories, the information belongs to several users of one shared system, not to the one user it is serving.

Metric: Appropriateness violation rate (%; share of inappropriate personal attributes exposed, lower is better). Source: arxiv.org. 8 models tracked.

Top models

#ModelScoreOverall rank
1GPT-6 Astra19.3#6
2GPT-5.6 Sol24.8#30
3Kimi K336.5#54
4Claude Sonnet 539.1#111
5Claude Fable 5.140.3#15
6Qwen 3.6 27B42#341
7Qwen 3.8 Max43#55
8Kimi K2.549.5#256

Interactive version: theaggregate.ai/benchmark?slug=pisas-single-agent · How It Works · Data refreshed daily, snapshot 2026-11-13.