Report
BenchMIRT splits a single benchmark score into the capabilities actually driving it
AI2 has published BenchMIRT, a method for auditing LLM benchmarks prompt by prompt rather than at the aggregate score. The evidence is a lab blog post describing the method and its own analysis, including one internal repeat run; there is no third-party replication reported here.
A benchmark score is normally read as one number standing for one ability. BenchMIRT, introduced in a Hugging Face blog post by Kyle Wiggers, works one level down: it looks at how models perform on each individual question and estimates which underlying capabilities are most closely associated with getting that question right. The post frames the problem with BBQ, a benchmark meant to test reliance on social stereotypes, whose Uber question about a grandson and grandfather also requires tracking who is who and reasoning from the evidence given.
The method takes cues from Item Response Theory, the psychometric technique built on the idea that not every question tells you the same amount about a test taker — some are harder, some distinguish stronger performers better. Earlier work, including AI2's Fluid Benchmarking, applied single-dimensional IRT to individual benchmarks. BenchMIRT extends that to multidimensional IRT, so multiple capabilities can contribute to the same questions, and applies IRT at both the model level (a model's strength on the capabilities reflected across the selected benchmarks) and the question level (difficulty, and how well a question distinguishes stronger from weaker models).
It was trained on benchmarking results from 100 LLMs across 16 benchmarks and more than 34,000 questions. Six of those benchmarks measure general reasoning, including MMLU-Pro, GPQA, MATH and BBH; the other ten come from the Olmo 3 safety suite, including HarmBench, StrongReject, WildJailbreak, BBQ, WMDP and XSTest. The post states that BenchMIRT was not told which benchmarks measured which capabilities, and that it independently recovered two dominant dimensions — safety and general reasoning — with the same two emerging when the analysis was repeated from scratch.
The findings that matter for anyone quoting a benchmark number: BBQ, commonly grouped with safety benchmarks, aligned much more strongly with general reasoning, so a low score may partly reflect difficulty understanding or reasoning through the questions rather than safety behaviour. WMDP, which tests dangerous dual-use knowledge, also tracked general reasoning more than safety — and because the benchmark counts refusing or failing to supply that knowledge as the desired response, stronger general reasoning was associated with lower WMDP scores. HarmBench mixed signals within one benchmark: its standard and contextual prompts aligned more closely with safety, its copyright prompts with general reasoning.
The post is explicit that these findings do not necessarily mean the benchmarks are flawed or incomplete, only that a single score can combine several signals. Treat the result as method-plus-one-lab's-analysis: the benchmark selection and the repeat run are AI2's own, and no external replication appears in the evidence here.
Our reading
This matters to anyone who uses a single eval number as a proxy for a capability: the prompt-level view suggests a score can be carried by reasoning load rather than the behaviour the benchmark is named for. Evaluation and reliability readers — especially those choosing between models on safety suites — should care most, because the misattribution it describes is invisible in aggregate leaderboar…
What to do or watch
Before leaning on a benchmark score, check what the items are actually testing; the post links a tech report, a data collection and a code repository, which is where a reader would start to run prompt-level analysis on the eval suite they really use.
Source details and supporting facts
Each line is stated by the page named above it.
Stated by Hugging Face
- Six of the benchmarks measure general reasoning, including MMLU-Pro, GPQA, MATH and BBH; the other ten come from the Olmo 3 safety suite, including HarmBench, StrongReject, WildJailbreak, BBQ, WMDP and XSTest.
- Without being told which benchmarks measured which capabilities, BenchMIRT independently recovered two dominant dimensions: safety and general reasoning, and the same two emerged when the analysis was repeated from scratch.
- BBQ, which evaluates social bias and is commonly grouped with safety benchmarks, aligned much more strongly with general reasoning in BenchMIRT's analysis.
- WMDP scores were more strongly associated with general reasoning than with safety, and stronger general reasoning was associated with lower WMDP scores because the benchmark counts refusing or failing to provide the dangerous knowledge as the desired response.
- HarmBench's standard and contextual questions aligned more closely with safety, while its copyright questions, such as generating lyrics to "What a Wonderful World," were more closely associated with general reasoning.
- The post links a tech report at allenai.org/papers/benchmirt, a data collection on Hugging Face, and code at github.com/allenai/BenchMIRT.
Sources
- Hugging FaceText stored 16 September 2026
How this story was checked. Written from the 1 page listed above, stored 16 September 2026; claims checked against that stored text on 16 September 2026.
What that means
- 6 of 7 reported statements were confirmed against the page that carries them; the rest were removed rather than published.
- Figures in the text were required to appear in the stored source text: yes. Identifiers: yes.
- The check reads stored text only: no claim rests on a fresh look that did not happen.
- Where the reporting was silent, the text says so instead of filling the gap.