SafePyramid - L0 Rule Understanding: leaderboard

Rule matching rate on the 1,000 L0 cases, whose policies hold independent decisive and distractor rules, from SafePyramid (2026), an in-context policy guardrailing benchmark: a case matches when neither the false-positive nor the false-negative rules exceed a threshold share of the true violations, averaged over thresholds from 0.7 to 1.0. Higher is better.

Metric: Rule matching rate (%) on the 1,000 L0 cases (independent decisive and distractor rules): per case (a multi-turn conversation plus an in-context safety policy), the predicted set of violated rules matches the ground-truth set when neither false positives nor false negatives exceed (1 - tau) of the true violations; averaged over tau = 0.7, 0.8, 0.9 and 1.0; per-policy evaluation, refused cases excluded; higher is better. Source: arxiv.org. Saturation forecast: Around October 2027. 12 models tracked.

Top models

#ModelScoreOverall rank
1Claude Opus 4.7 (Max)73.8#79 (Claude Opus 4.7)
2DeepSeek V4 Pro (Max)70.8#188 (DeepSeek V4 Pro)
3GPT-5.5 (xHigh)70.7#49 (GPT-5.5)
4Grok 4.3 (High)70.6#333 (Grok 4.3)
5Qwen 3.6 Max (Preview) (Thinking)68.9
6Seed 2.0 Pro (High)63.1#211 (Seed 2.0 Pro)
7Gemini 3.5 Flash (High)61.4#101 (Gemini 3.5 Flash)
8Hy3-preview (High)60.6#316 (Hy3-preview)

No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.

Interactive version: theaggregate.ai/benchmark?slug=safepyramid-l0-rule-understanding · How It Works · Data refreshed daily, snapshot 2026-11-13.