TIER (Llama-3.1-8B-Instruct Judge) - Contextual: leaderboard
The contextual level of TIER (Trinh-Thi et al., 2026): 296 requests that embed harmful intent in a plausible context such as art, medicine, education or history across four risk areas. Attack success rate in percent, the share of greedy responses that Llama-3.1-8B-Instruct labels harmful compliance on a six-label behavior scale; lower is better.
Metric: Attack success rate (%; L3 harmful intent embedded in plausible contexts such as art, medicine, education and history, generated with Gemma-4-12B-it, 296 prompts over four risk areas; share of prompts whose response Llama-3.1-8B-Instruct labels harmful compliance (label 5 of a six-label behavior scale), greedy decoding with the default chat configuration). Source: arxiv.org. Saturation forecast: Around February 2027. 6 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | gpt-j-6B | 6.4 | #9941 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=tier-llama-3-1-8b-instruct-judge-contextual · How It Works · Data refreshed daily, snapshot 2026-11-12.