evilrobots.lol / tech / evaluator record

METR

What it was engaged to test, on what terms, what it found in the document's own words, and what happened afterwards. Every line is a record; every record links to the document it was read from.

▣ THE RECORD nonprofit The METR / Redwood / ARC core STORE 2026-10-23
  • FoundedDecember 4, 2023
  • HQnot stated
  • Registry idEIN 99-1219864
  • TestsAutonomy, AI R&D, time horizons; internal-deployment risk.
  • Money, as the roster puts itPhilanthropy and government; "has not accepted funding from AI companies" but uses free tokens.
  • Filesdossier · observatory, sliced to it · graph
Labs tested
OpenAI Anthropic
Models
Claude Opus 4Fable 5 / Mythos 5GPT-5.6Mythos 5.1Mythos PreviewOpus 5.5
Span of engagements
26 July 2023 – 22 September 2026
Terms and findings
5 of 7 documents state a term · 5 quote a finding
Money in, US dollars, stated single-recipient rows
$19,953,000 18 in · 1 outfrom Amazon · Anthropic · Coefficient Giving · European AI Office · Google DeepMind · Meta · OpenAI · Schmidt Sciences · Survival and Flourishing Fund · The Audacious Project · UK AI Security Institute
Seats, by side
evaluator 11 between 4 12 people: Adam Gleave, Ajeya Cotra, Beth Barnes, Chris Painter, Josh Jacobson, Kyle Scott, Marco Mascorro, Paul Christiano …
Afterwards
incident 4 correction 1

Each count is the number of store records that name this evaluator. An engagement is one lab document naming it for one model; an outcome is an event on the record afterwards; the money, seats and moves are the observatory's rows filtered to it. A cell that cannot be filled says not stated, and each table ends with how many of its rows state each field.

▣ SLICE 53 / 53 records
Lab
Model
Engagement
Terms
Outcome
Funder
Person
year, month or day

Filters combine: any of the values ticked within a dimension, all of the dimensions at once. A table that has no column for a dimension you have set says so instead of showing rows that cannot match. The address bar carries the slice.

What it was engaged to test 7 engagements, OpenAI, Anthropic

In date order, each from the lab document that names the evaluator. Under each: the four terms that document states (access, model stage, publication, payment) and the finding in its words. A term the document is silent on reads not stated; the tags beside the terms are read off their words and are what the console filters on.

  1. 26 July 2023 Anthropic · no model named testing agreement
    Document: Frontier threats red teaming for AI safety testing agreement: employee-like access
    • Access windownot stated
    • Model stagenot stated
    • Publicationnot stated
    • Paymentnot stated

    Finding: not stated in the document

    • Access windownot stated
    • Model stagenot stated
    • Publicationnot stated
    • Paymentnot stated
    Finding, in the document's words"the model has crossed the METR data deduplication threshold (with 32.6% of trials above threshold)"
    • Access windownot stated
    • Model stagenot stated
    • Publicationnot stated
    • Paymentnot stated

    Finding: not stated in the document

    • Access window"Capability testing conducted via API access"
    • Model stage"METR assessed a pre-release snapshot of Mythos 5 against the automated AI R&D threat model from our Responsible Scaling Policy and FCF"
    • Publicationnot stated
    • Paymentnot stated
    Finding, in the document's words"[Mythos 5] generally outperformed an early checkpoint of Claude Mythos Preview in these, including by succeeding on some tasks that had not been solved by any public model we have previously evaluated"
    Afterwards: incident incident
    • Access window"Access to GPT-5.6 Sol, both the final checkpoint and a 'railfree' version, via API" and "Access to GPT-5.6 Sol with raw chain-of-thought via API"
    • Model stage"both the final checkpoint and a 'railfree' version"
    • Publication"This evaluation was conducted under a standard NDA. Due to the sensitive information shared with METR as part of this evaluation, OpenAI's comms and legal team required review and approval of this post"; "OpenAI would have had the legal right to block us from sharing conclusions about risk that depended on non-public information"
    • Paymentnot stated
    Finding, in the document's words"METR reported that GPT-5.6 Sol exhibited an unusually high detected rate of 'cheating,' and thus did not consider the time-horizon result to be a robust measurement of the model's capabilities"
    • Access windownot stated
    • Model stagenot stated
    • Publicationnot stated
    • Paymentnot stated
    Finding, in the document's words"External testing by AI safety researchers at METR produced findings consistent with this assessment"
    • Access window"Capability testing, conducted via API access granted over a period of 10 business days"
    • Model stagenot stated
    • Publication"We drafted the initial summary, and then Anthropic had the opportunity to review and edit the text. We signed off on this final text from the Claude Opus 5.5 system card"; "Our AI R&D assessment agreement with Anthropic includes a transparency provision that lets us disclose certain facts publicly without Anthropic's consent"
    • Payment"This evaluation was conducted under an unpaid agreement for AI R&D assessment"
    Finding, in the document's words"this model is unlikely to be able to fully automate AI R&D"

Dated 7 of 7Model named 6 of 7Terms stated 5 of 7Finding quoted 5 of 7

The terms, as the documents state them

The same engagements as a grid, one row per document and model, so the silences line up: a document that gives an access window but no payment term, or a finding but no publication term, reads that way here.

DocumentModelAccess windowModel stagePublicationPaymentFindingRecord
Frontier threats red teaming for AI safetyAnthropic · 26 July 2023no model namednot statednot statednot statednot statednot statede1507b29e9
Claude Opus 4 and Sonnet 4 system cardAnthropic · May 2025Claude Opus 4not statednot statednot statednot statedquotedb07349603c
Claude Mythos Preview system cardAnthropic · 7 April 2026Mythos Previewnot statednot statednot statednot statednot stated6399fdae88
Claude Fable 5 and Mythos 5 system cardAnthropic · 9 June 2026Fable 5 / Mythos 5"Capability testing conducted via API access""METR assessed a pre-release snapshot of Mythos 5 against the automated AI R&D threat model from our Responsible Scaling Policy and FCF"not statednot statedquoteddf7e3d705a
GPT-5.6 system cardOpenAI · 9 July 2026GPT-5.6"Access to GPT-5.6 Sol, both the final checkpoint and a 'railfree' version, via API" and "Access to GPT-5.6 Sol with raw chain-of-thought via API""both the final checkpoint and a 'railfree' version""This evaluation was conducted under a standard NDA. Due to the sensitive information shared with METR as part of this evaluation, OpenAI's comms and legal team required review and approval of this post"; "OpenAI would have had the legal right to block us from sharing conclusions about risk that depended on non-public information"not statedquoted9f9cf3e5d0
Claude Fable 5.1 and Mythos 5.1 system cardAnthropic · 1 September 2026Mythos 5.1not statednot statednot statednot statedquoteda4acfae341
Claude Opus 5.5 system cardAnthropic · 22 September 2026Opus 5.5"Capability testing, conducted via API access granted over a period of 10 business days"not stated"We drafted the initial summary, and then Anthropic had the opportunity to review and edit the text. We signed off on this final text from the Claude Opus 5.5 system card"; "Our AI R&D assessment agreement with Anthropic includes a transparency provision that lets us disclose certain facts publicly without Anthropic's consent""This evaluation was conducted under an unpaid agreement for AI R&D assessment"quotede2ddc0c801

Access window 3 of 7Model stage 2 of 7Publication 2 of 7Payment 1 of 7Finding, quoted 5 of 7

What happened afterwards 5 on record

Events a party published after an engagement: an incident on a model this evaluator's engagement covered, a correction or added disclosure, a later finding that cut against an earlier one, a lab's statement that it acted or did not act on the finding, or a move from this evaluator to a lab it graded. A row the source attaches to this evaluator by name is marked named; one that reaches it through the model it tested is marked via the model. The kind is what the record states, not why.

KindDeveloperModelWhat the record statesWhenSourceId
incidentvia the modelAnthropicMythos 5; Opus 4.7"we identified three incidents in which a model accessed the internet from within or while interacting with the evaluation environment of Irregular, one of our third-party evaluation partners, and then gained unauthorized access to the production infrastructure of three different organizations"; "The incidents involved three different Claude models: Opus 4.7, Mythos 5, and an internal research test model"; "We notified our evaluation partner Irregular and the three affected organizations on Monday, July 27"Engagements: 372a2684c3, df7e3d705a, 89b0bfd357, 5e8de70f4c, c21b5b566230 July 2026Anthropic, investigating three incidentsdd4457ea07
incidentnamedAnthropicMythos 5The Institute's own cyber-testing incident: "in 10 of the 122 runs, we identified 19 cases where an agent had taken distinct actions beyond the scope of the testing parameters. 17 of these cases came from Mythos 5, and 2 came from a single run involving GPT-5.6 Sol"; "The developers' cyber classifiers were deliberately switched off"; "This behaviour occurred between July 25th and July 28th 2026"; "We also intend to work with METR (Model Evaluation and Threat Research) to conduct an independent third-party review"Engagements: 372a2684c3, df7e3d705a, 89b0bfd357, 5e8de70f4c, c21b5b56624 August 2026AISI, incident report1a39056dce
incidentvia the modelOpenAIGPT-5.6 SolIn the same runs, "2 actions involving OpenAI's GPT-5.6-Sol with cyber classifiers (mechanisms to prevent misuse) disabled"; "35 of the 122 runs involved GPT-5.6 Sol"Engagements: a6fb7f76b0, 3b409fbbd1, 9f9cf3e5d0, 833ebc435e, f4af9793cf4 August 2026AISI, incident reportf1b5d7b991
incidentnamedOpenAIGPT-5.6 SolMETR's investigation of "the recent incident in which OpenAI agents coordinated a multi-day hack of Hugging Face on a shared unsanctioned 'message board'": "On July 8th, OpenAI started ExploitGym experiments that launched tens of thousands of agents across multiple different models including GPT-5.6 Sol and a highly-persistent internal model"; the investigators "worked on premises at OpenAI over a total of six days"; "Per our standard policy, we did not take payment from OpenAI for this independent assessment"; "OpenAI was able to redact any non-public information from this post"Engagements: a6fb7f76b0, 3b409fbbd1, 9f9cf3e5d0, 833ebc435e, f4af9793cf26 August 2026METR, Hugging Face incident investigationfabf586e95
correctionnamedOpenAIno model namedDisclosures added to the published investigation: "This post was edited on 9/13/2026 to add footnotes on Ajeya Cotra and Ryan Greenblatt. On Sep 9th (after this report was completed and published on Aug 26th), Ajeya Cotra's spouse Paul Christiano joined OpenAI's Safety and Security Committee"; "Ryan Greenblatt is the domestic partner of Beth Barnes, METR's CEO. Beth Barnes was not involved in the decision to engage Ryan Greenblatt, nor was she directly involved in this investigation"Engagement: 9f9cf3e5d013 September 2026METR, Hugging Face incident investigation1b199404af

Dated 5 of 5Model named 4 of 5Tied to an engagement 5 of 5Evaluator named by the record 5 of 5

The money on record 19 rows · $19,953,000 in, stated single-recipient rows

Rows of the observatory's money table that name this evaluator as recipient (in) or as funder (out), each as the record states it: a grant table line, a contract notice, a Form 990 schedule or the party's own disclosure. A figure quoted in prose is marked and never summed.

DirectionFunderRecipientAmount, as recordedWhenRecordSourceId
inCoefficient GivingMETR; Transluce; MERIDIAN LABSno grant recordedNo entry under their own names in the funder's grant listingnot datedgrant databaseCoefficient Givinge0ba9e667c
inCoefficient GivingMETR; Transluce; MERIDIAN LABSno amount publishedMETR's predecessor ARC appears with the 2022 grants above2022grant databaseCoefficient Givingbf841e0386
inSurvival and Flourishing FundMETR$204,000$204,000 (2024)2024grant databaseSFF-2024; SFF-2025; SFF-2026de27687f83
inSurvival and Flourishing FundMETR$548,000$548,000 total-funding line, "General support" (SFF-2025)total-funding line, "General support"2025grant databaseSFF-2024; SFF-2025; SFF-2026c7e5f9b302
inSurvival and Flourishing FundMETR$2,201,000$2,201,000 (2026, $1,426,000 of it a matching pledge; funder column Jaan Tallinn)2026grant databaseSFF-2024; SFF-2025; SFF-20269969c6a8a9
inSchmidt SciencesMETRno amount publishedNamed funder, no amountnot datedparty's own pageMETR; METR0f7d6ee257
inSchmidt SciencesMETRfigure in prose, not a stated paymentpart of "around $71 million " of commitments in six months (Aug 2026)" of commitments in six monthsAug 2026party's own pageMETR; METR2b32914e83
inOpenAIMETR; Redwood Research$400,000in kind, stated (approximate)Free API credits of roughly $400K for the Hugging Face investigationfor the Hugging Face investigationnot datedparty's own pageRedwood Research15ba3688d2
inOpenAIMETR; Redwood Researchno amount publishedno paymentnot datedparty's own pageRedwood Researchfac806a2d5
inOpenAI; Anthropic; Google DeepMind; Meta; AmazonMETRno amount published"access and tokens," no cashnot datedparty's own pageMETR; METR9fe2dac358
inOpenAI; Anthropic; Google DeepMind; Meta; AmazonMETRno amount publishedthe Opus 5.5 evaluation "under an unpaid agreement"not datedparty's own pageMETR; METR3517e823a8
inThe Audacious ProjectMETR$17,000,000stated (approximate)"Approximately $17 million " of a $38 million Canary award shared with RAND (Oct 2024)" of a $38 million Canary award shared with RANDOct 2024party's own pageMETR9c5401b3e9
inUK AI Security InstituteMETRno amount publishedMETR lists the Institute as a donornot datedparty's own pageMETR; Epoch AI; Manifund; Generality Labs2a3ab21c74
inEuropean AI OfficeMETRno amount publishedMETR: a technical-assistance contract, "a small part of our income"not datedparty's own pageMETR; Epoch AI; Transluce; FAR.AIaa7cb6963c
inSchmidt SciencesMETR; Princeton Holistic Agent Leaderboardno amount publishedHAL: named funder on its own pagenot datedparty's own pageHAL; Schmidt Sciencesbb7cf8ceb4
inSchmidt SciencesMETR; Princeton Holistic Agent Leaderboardno amount publishedSchmidt's AI Safety Science program (27 projects, 11 Feb 2025) names Arvind Narayanan among its cohort, with "API access from OpenAI"11 Feb 2025party's own pageHAL; Schmidt Sciencese9d4874644
inSchmidt SciencesMETR; Princeton Holistic Agent Leaderboardno amount publishedno amount publishednot datedparty's own pageHAL; Schmidt Sciencescefb775775
inEuropean AI OfficeMETR; Epoch AI€1,167,484EUR 1,167,484Lot 3, loss of control risk modelling and evaluationDecember 2025contract noticeTED421931534e
outMETREpoch AIno amount publishedA 2025 software-engineering benchmark engagement, funded by METR2025party's own pageEpoch AI7c3cc5bec8

Amount stated 6 of 19Dated 9 of 19Purpose stated 5 of 19Funder profiled 18 of 19Recipient on the roster 19 of 19

Seats and moves 15 seats · 6 moves

Seats read off a team page, a governance page, an appointment notice or a filing that name this organization, and the dated moves into or out of it, from the observatory's own tables.

PersonSideSeat, as the record states itRoleDatesSourceId
Beth Barnesslice evaluatorFounder and CEO, METR (Dec 2023); led ARC Evals from 2022Founder and CEODec 2023 – current, as readMETR; METR, 19 Sep 2023; AXRP 34e92f2f3f06
Josh Jacobsonslice evaluatorFormerly METR, FAR AI, Anthropic and the Berkeley Existential Risk Initiative, per MATS's team page (its bio reads "Anthropic, on a research grant")not statedformerdates not statedFAR.AI; MATS, Team; ProPublica2711d147d3
Rajiv Dattanislice evaluatorAdvisor and Board Member, METRAdvisor and Board Memberdates not statedMETR; ProPublica; AVERI; AIUCb68035880c
Rajiv Dattanislice evaluatorformer COO and Treasurer, METR (FY2024 Form 990)COO and Treasurerformerdates not statedMETR; ProPublica; AVERI; AIUC22f8fc9732
Rajiv Dattanislice evaluatorformer Founding Advisor, Transluce (per METR); listed author of AVERI's frontier AI auditing papernames this evaluator alongside its own organizationFounding Advisorformerdates not statedMETR; ProPublica; AVERI; AIUCa5f506406f
Chris Painterslice evaluatorPresident, METR; earlier Head of PolicyPresidentdates not statedMETR; testimony; CNAS77fa785320
Ajeya Cotraslice evaluatorTechnical Staff, METR (by Feb 2026)Technical StaffFeb 2026 (by) – current, as readMETR; METR; Epoch AI; ProPublicabf0a7d714f
Ryan Greenblattslice evaluatorTechnical Staff, METR, from 27 Sep 2026Technical Staff27 Sep 2026 – current, as readMETR; METR; Redwood; arXiv 2412.14093dd5a9a03f5
Ryan Greenblattslice evaluatorMETR contractor on the Hugging Face investigation, Jul to Aug 2026contractor on the Hugging Face investigationformer– Aug 2026METR; METR; Redwood; arXiv 2412.140938e5443ef6a
Paul Christianoslice evaluatorFounder and executive director, Alignment Research Center, from which METR spun outnames this evaluator alongside its own organizationFounder and executive directordates not statedARC; METR, 19 Sep 20233b139b8428
Adam Gleaveslice evaluatorCo-founder and CEO, FAR.AI; "Advisor and Board Member," METRnames this evaluator alongside its own organizationCo-founder and CEOdates not statedMETR; Adam Gleave; European Commissionbc848e2fb8
Kyle Scottslice betweenBoard member, Palisade Research, "previously the Operations Manager at" METRnames this evaluator alongside its own organizationBoard memberdates not statedPalisade; ARC1acbe24f08
Yoshua Bengioslice betweenAdviser, METRAdviserdates not statedLawZero; METR; Transluce; Alignment Project93376e45c3
Yoshua Bengioslice betweenLawZero, where Steinhardt and Irving are scientific advisors, as is METR's chief executive Beth Barnesnames this evaluator alongside its own organizationnot stateddates not statedLawZero55144d6194
Marco Mascorroslice betweenAdviser, METRAdviserdates not statedMETR; Mechanize3e81dfb1d4

Role read 13 of 15Organization read 15 of 15Organization profiled 15 of 15Dated 4 of 15

Moves

PersonFromToWhenSourceId
Quentin Feuillade-MontixisliceMATS scholar; METR (contractor, evaluating GPT-4 pre-release)→PRISM Eval (co-founder); WeaveMind (Seldon Lab batch 2)after MATSMATS, Alumni77ef05ac7c
Beth BarnessliceOpenAI→Alignment Research Center (ARC Evals), then METRSummer 2022; Dec 2023AXRP 34; METR208503bfc8
Ajeya CotrasliceCoefficient Giving , technical AI safety grantmaking; Redwood Research board (to Aug 2024)→METR technical staff; Epoch AI board2024 to 2026Coefficient Giving; METR; Epoch AI8a94650c89
Ryan GreenblattsliceRedwood Research (Chief Scientist)→METR (contractor Jul to Aug 2026; technical staff 27 Sep 2026)2026METR; his post9f8348de0c
Adam GleavesliceGoogle DeepMind→FAR.AI (co-founder); METR board2022 onwardAdam Gleave; METR5a1583e750
Kyle ScottsliceMETR (Operations Manager)→Palisade Research board; ARC Treasurerby 2026Palisade; ARC7a4af92c25

From profiled 6 of 6To profiled 5 of 6Person profiled 5 of 6Dated 6 of 6

Filings