Your grader can change results while the model stays fixed
Four other reported failures shifted eval verdicts while the model under test stayed fixed, so your next adoption call may be measuring the judge instead.
The judge moved, not the model
The verifier audit is the cleanest case, and the reporting turned up the same failure four more times: an eval verdict changed while the model under test did not. Every comparison therefore carries confounders beyond the model, namely the grader and the safety policy layer, plus the inference config.
Approval signals reward the wrong answer
ByteByteGo revisits OpenAI's April 2025 GPT-4o rollback. Per OpenAI's post-mortem, favorable evaluations and user feedback missed the regression, and there were no sycophancy-specific deployment evals. Preference labels Goodhart: one thumbs-up folds accuracy and tone into a single bit along with caution, and never records whether the rater checked correctness. The cited 'Towards Understanding Sycophancy' work found that matching the user's stated view predicted preference judgments. In an A/B test with approval as the primary metric, the more agreeable variant starts with a structural advantage.
Refusals look like capability gaps
Mistral reports 82% on an unnamed reproduce-and-patch security test and says several closed models refuse it and score near zero, Techpresso notes. The thing the 82% doesn't tell you is how much of the gap is declining rather than failing, since it mixes whether a model tries with whether it succeeds once it does. AINews adds that Cline attributes Large 4's cyber lead largely to fewer refusals. Opus 5.5 and GPT-6 Astra had about 40% of tasks blocked by their own safety filters. A model that refuses 95% of prompts but solves 90% of its attempts is a different system from one that attempts everything and solves 82%.
Config and instrument drift
- Mistral says many reported Large 4 failures trace to not setting reasoning_effort="high".
- Vals and Artificial Analysis list a 512K context window for Large 4, and OpenRouter lists 1M. That mismatch silently changes which prompts get truncated.
- pixelmatch 8.0 moves to a more perceptually accurate color metric, so identical image pairs now produce different diff counts. A visual-regression gate tuned on v7 thresholds will shift pass rates with no model change.
Reading the ICML number correctly
At n=6,617, τ≈0.08 is statistically non-zero (null standard error about 0.008) and practically close to random. Human-human agreement wasn't reported, so the human baseline is noisy as well. Until judge-human agreement is measured, the judge's verdict has no known error rate.
The smart move
Treat each grader as a model with its own error rate. A stratified human re-grade of 200–300 outputs yields a flip-rate estimate with a usable interval. At a true 10% flip rate, n=300 gives about ±3.4 points. Score security and red-team evals with refusal rate and accuracy given an attempt as separate numbers, and report unconditional accuracy alongside them.
Run sycophancy tests in both directions. One measures capitulation under four kinds of pushback: plain disagreement, confident assertion, claimed expertise and repeated challenge. The other checks whether the model accepts a correction backed by valid evidence, such as a failing test. A model that never changes its mind aces the first and fails the second. ByteByteGo's planning estimate is about 500 items per pressure arm for ±3.5 points at a 20% capitulation rate.
Timing matters here. Mistral's two-week half-price launch window and the October 27 weight drop put several adoption decisions through evaluation harnesses this month.
A leaderboard delta reported without a measured grader error rate has an unknown confidence interval. The 300-output re-grade above pins that error rate to about ±3.4 points.
What to do
Have two reviewers re-grade a stratified sample of 200–300 outputs from your verifiers and LLM judges this sprint. Report the grade-flip rate with a 95% CI before the October 27 Mistral weight release.
Starting this sprint, split every capability score into refusal rate, accuracy given an attempt and unconditional accuracy. Pin a hashed inference config (reasoning_effort, provider, context limit, max output) to every eval run.
This quarter, add a two-sided sycophancy suite as a pre-registered non-inferiority guardrail on any A/B test whose primary metric is thumbs-up, CSAT or session rating. It should measure capitulation under four pressure types and correction-acceptance under valid evidence.