The LEST framework uses system cards to drive LLM safety testing.
Start here
Researchers at Oregon State University propose the LEST framework, treating safety claims in model documentation as executable black-box test specifications, and perform mutation testing on Claude Opus 4.8 and GPT-5.5 to check which claims are actually covered by safety benchmark prompts. The study extracts 56 safety claims from two System Cards, of which 29 (51.8%) can be tested with prompts; of these 29, only 17 (58.6%) are covered by at least one SORRY-Bench seed prompt, and both models refuse to answer unmodified seed prompts at rates exceeding 95%.
Generated by AI from reports · Updated 29 days ago
Attention and developments
Attention, hourly
Now 39, 0% in 24 hours·Peak 39 (Nov 6 03:00)
Related research
This event's paper
- Specification-Based Testing of Large Language Models
arXiv · 2026-10-10 · Deep reading
Progress timeline
- arXiv: Dangerous Capabilities & Safety EvalsSelectedSpecification-based testing of large language models
Researchers at Oregon State University propose the LEST framework, which treats safety claims in model documentation as executable black-box test specifications and performs mutation testing on Claude Opus 4.8 and GPT-5.5 to check which claims are actually covered by safety benchmark prompts. The study extracted 56 safety claims from two System Cards, of which 29 (51.8%) could be tested with prompts; of these 29, only 17 (58.6%) were covered by at least one SORRY-Bench seed prompt, and both models refused over 95% of unmodified seed prompts. On 1,836 mutated prompts, three automatic classifiers flagged 312 candidate shifts from refusal to compliance; after manual review, only 19 (6.1%) simultaneously preserved the original harmful intent and constituted genuine compliance, providing counterexamples for 6 of the 9 claims that were applicable to refusal judgments and covered. The authors state that benchmark category coverage cannot equate to coverage of documentation claims, and automatic evaluation overestimates behavior failures.