Protocol STAMP is teamed with AI and can make mistakes. Verify before you implement anything. What we got wrong · Free to read, paid for by readers: Contribute
Four days ago this blog set seven rules for any new kind of model that wanted to grade our work, and two decision models went through them. The rule on agreement with our judges was met, to three decimal places, by a judge that never says anything but PASS. What stopped the two models was the test that asked a person. So we propose that the first thing any new judge has to beat is the judge that always says yes. This post sets out a proposal, not yet binding, for how a new kind of model, Jev or whatever comes after it, should be tested here.
The Bench post Five Cases, a Hundred Times Each promised that hosted Jev and the open model Laya would go first, under seven rules written before any run. They did. Calibration Vol 002 tested them against our judges, and Calibration Vol 003 tested every judge against one person’s blind labels. Here is what each rule did when it met a real candidate.
| Rule | What happened | Verdict on the rule |
|---|---|---|
| 1 · Shadow first | Neither model’s verdict touched a published rate. | Worked |
| 2 · Agreement with the panel, 0.70 | Against the majority of two seated judges, both models scored 0.745 on the public half. An always-PASS judge would have scored 0.700 on the same draws. Laya also scored 0.488 on the held-out half, and Vol 002 left open which figure the rule applies to. | Too easy to pass |
| 3 · Agreement with a person | Calibration Vol 003’s pre-registration made this a two-part test. Both models cleared the agreement part and failed the part that asked them to catch failures. | Worked; it was the test that decided |
| 4 · Steadiness | Jev changed its verdict on 2 of 50 draws. Laya changed on 0 of 50, because it returned identical outputs every time. | Measured nothing for Laya |
| 5 · Held-out probes and data terms | OpenRouter listed no data policy for Jev, so it saw only the public half. Laya, running locally, graded both halves. | Worked for the candidates. The check on our seated judges’ terms is still owed. |
| 6 · A judge should not check itself | The reference still contains the grader whose verdicts Calibration Vol 001 published. | Still open |
| 7 · Published either way | Two candidates that were not seated got the same tables as the seated judges. | Worked |
Figures from Calibration Vol 002 and Vol 003. The always-PASS scores are labelled exploratory in both issues: they were added after review, not pre-registered. Whether to seat either model was left to the investigator in Vol 002; neither was seated after Vol 003.
Two of the seven did not do their job on their own: rule two, which was too easy, and rule four, which could not measure a model that never varies. Rule two matters most. On a sample where most answers pass, a judge that rarely fails anything agrees with the majority almost automatically, and the coefficient we use cannot tell a careful judge from a lenient one. Calibration Vol 002 said so in its own words, and that problem is the main subject of this post.
We propose that every candidate be scored beside a judge that does nothing. That judge answers PASS to every draw. If a candidate cannot beat it, this test gives no evidence that the candidate can tell failures from passes.
On Calibration Vol 003’s labels the do-nothing judge looks very good: its agreement with the person, 0.871, beats every judge we seat. That is not because it is right. The person passed 77 of the 87 draws, so a judge that passes everything is right 77 times by default. What it cannot do is catch a single one of the 10 failures.
The fix is to score the two piles separately and weight them equally. One share is how many of the person’s FAILs a judge caught; the other is how many of the person’s PASSes it left alone; the score is their average. This is called balanced accuracy. A judge that says PASS to everything scores exactly 0.500 on it, and so, on average, does one that guesses. Applied to Calibration Vol 003’s labels, it gives this.
| Judge | Caught, of 10 FAILs | Left alone, of 77 PASSes | Balanced accuracy | 95% interval, by item | AC1 with the person |
|---|---|---|---|---|---|
| Always PASS | 0 | 77 | 0.500 | — | 0.871 |
| J-A · Gemini | 7 | 61 | 0.746 | 0.594–0.887 | 0.685 |
| J-B · Grok | 6 | 59 | 0.683 | 0.555–0.873 | 0.631 |
| J-C · tier-1 grader | 5 | 61 | 0.646 | 0.491–0.806 | 0.659 |
| Jev | 3 | 73 | 0.624 | 0.482–0.858 | 0.846 |
| Laya | 0 | 71 | 0.461 | 0.416–0.494 | 0.779 |
One labeller, 87 public draws from 35 items. The person’s 10 FAILs fall on 6 items. Intervals are 95% percentile bootstraps that resample whole items, not single draws, so draws of the same item move together (20,000 resamples, seed 20261005; the few resamples with no FAIL in them are dropped). Re-run with four other seeds, every lower end moved by 0.005 or less. Read the order as rough, not as a measured gap. Laya’s 0.461 here is a coincidence of numbers: it is unrelated to the 0.461 majority-class baseline quoted for Laya in The Bench post Five Cases, a Hundred Times Each.
The balanced-accuracy and AC1 columns tell opposite stories. By agreement, the decision models look like the best judges we have. By balanced accuracy, every judge except Laya is above the do-nothing judge’s 0.500 on these counts. The margins are J-A 0.246, J-B 0.183, J-C 0.146 and Jev 0.124. Laya sits below 0.500: it failed six answers the person passed and caught none that the person failed.
The intervals matter as much as the points. Only J-A’s and J-B’s intervals sit wholly above 0.500. Jev’s lower end is 0.482. J-C’s, the tier-1 grader whose verdicts Calibration Vol 001 published, is 0.491: just under the line on every seed we tried, and close enough that a handful more labels could move it either way. With ten failures on six items, these counts cannot show that J-C or Jev beats the do-nothing judge. A test that a judge we already rely on only narrowly misses is not comfortable, but the same test has to apply to all of them.
None of this makes the seated judges right. Each of them failed between 16 and 18 answers the person passed. Calibration Vol 003 found that, on Luna’s public half, they are stricter than this person, and one person cannot say which standard is correct.
Decision models were the new thing in September. Something else will be new next quarter. We propose that any kind of model that wants to grade our work go through these steps, in this order. Each step could end the trial, and a trial that ends early would still be published.
Before a candidate grades anything, we would write down what it is and date it: who makes it, whether the weights are published, the license, the context length, the price, and what its makers and testers have published about it. Its data terms would be checked and quoted. If the terms are unknown, as Jev’s were on OpenRouter on Oct 02, 2026, the candidate would see only the public half of the bank. A model on our own hardware could see both.
In Calibration Vol 002, 13 of Laya’s grading states lost text before it gave a verdict. Some were cut by our own script, which shortened 12 states to 1,800 characters, 3 of which would have fitted uncut. Others were cut by the model’s 512-token reading limit. Before a run we would count both kinds of cut, use the checkpoint and settings that cut the fewest, and report any draw that lost text separately rather than mixing it in.
A decision model returns a probability with every verdict, and that is much of its appeal. Laya’s checkpoint warned that its shipped temperatures were invalid, and its makers say its probabilities are over-confident as shipped. We would not use a candidate’s probabilities as confidence until they had been checked against a person’s labels. Until then, only the verdict would count.
The candidate would grade draws that a person has labelled blind, and its verdicts would count for nothing while it did. To pass, it would have to clear three tests on the same draws.
Catch at least half of the person’s FAILs. This is the failure half of the test Calibration Vol 003 pre-registered for rule three.
Beat the always-PASS judge on balanced accuracy. The lower end of its 95% interval, resampled by item with 20,000 resamples and a seed fixed in the pre-registration, would have to be above 0.500. This is new.
Agree with the person at least as well as the weakest judge we already seat. This is the agreement half of Calibration Vol 003’s test. It is now the weakest of the three, because the do-nothing judge passes it, and it cannot test an incumbent, since the weakest seated judge always clears its own score. For incumbents, the floor would be fixed in advance in the pre-registration: Vol 003’s lowest seated score, 0.631, unless the pre-registration says otherwise and why.
The first two tests overlap. A judge that catches half the failures will usually clear 0.500 on its point estimate. The interval is what separates them: it asks whether the counts are large enough to show the judge is better than doing nothing. On Vol 003’s counts, Jev fails both of the first two tests. J-C passes the first, catching exactly half, and falls just short on the second, by a margin small enough that the next labels could reverse it. Agreement with the panel, the old rule two, would still be computed and printed, but it would no longer decide anything on its own.
The candidate would grade a sample five times at its normal settings, and we would count how often its verdict changed, as before. If it gave identical outputs every time, as Laya did, we would call it deterministic and report its steadiness as not measured, not as zero. A model that cannot vary has not shown that it is stable.
A candidate that passed every step could take one panel seat. It would never become the only grader, and it would never sit in a reference that checks its own verdicts. The seat would be reviewed at the end of the quarter against fresh human labels.
Unchanged. A candidate that fails at step two would get the same kind of page as one that is seated.
Rule three of The Bench post Five Cases, a Hundred Times Each already promised that every judge, including the ones we use, would be scored against a person’s labels. If this proposal is adopted, J-A, J-B and J-C would be scored under step four in the same Calibration as the next candidate, on the same labels. If one of them fails, that Calibration would say so and say what happens to its seat.
It needs more failures. Calibration Vol 003’s person failed 10 draws, on 6 items, with up to 4 on one item. That is why every interval above is so wide. The next human labelling round should deliberately include more of the draws that any judge failed, so that the person sees more of the hard cases. That would change the share of failures in the sample, which is exactly why each pile would be scored separately, with the old agreement figure printed beside it.
It needs a second person. One labeller is a reference, not ground truth, and that labeller built the bank. A second, independent labeller, scored against the first, is the only way to say whether the seated judges are too strict or the first person too lenient. We are looking for one, and the Calibration that uses them will say who they are and what they were paid.
Everything above is about a new model as a judge. Protocol STAMP’s main measurement points the other way: it asks a model questions and checks whether its prose answer shows its receipts. A decision model does not write prose. It picks among options you give it, scores on levels you define, or returns a probability. So we propose not to score Jev or anything like it on the prose bank, and not to rank it beside models that write. It would fail for the wrong reason.
The honest version would be a typed form of the bank, where each probe offers the options a careful answer would choose between, including “I can’t verify that.” That is a different instrument, with its own pre-registration. We have not started it, and if we do, the plan will be published here before any run.
None of this changes a published number. The seven steps are a proposal until they are written into the pre-registration of the next Calibration that tests a judge and signed before any run. If that happens, the seven rules of Five Cases, a Hundred Times Each stay on the page where they were published, and the corrections register records the change.
Jev and Laya are not seated, and nothing in this post reopens that. A newer version of either, Open-Jev’s 9B or 27B, or the next model nobody has heard of yet, would start at step one like everything else. The first hurdle would be the cheapest judge there is: one that never fails anything.
Protocol STAMP, The Calibration Vol 002, issued Oct 03, 2026. From it: Jev’s and Laya’s agreement with the majority of J-B and J-C on the public half (0.745, 80 draws, 7 without a reference), Laya’s held-out figure (0.488), and the always-PASS score on the same draws (0.700, exploratory). Also the steadiness counts, the data-terms note for Jev, and Laya’s context length, truncation counts and temperature warning.
Protocol STAMP, The Calibration Vol 003, issued Oct 03, 2026. From it: the 87 blind labels, every judge’s agreement with the person, the caught and failed counts, the always-PASS score (0.871, exploratory), the six-item spread of the person’s FAILs, and the two-part test for rule three. Registry keys cal003.judges.*, cal003.q3.* and cal003.exploratory.* in figures.json.
Protocol STAMP, The Bench post Five Cases, a Hundred Times Each, Oct 01, 2026: the seven rules, and the makers’ note that Laya’s probabilities are over-confident as shipped.
The balanced-accuracy figures and their intervals are our own, computed for this post from the same label and verdict files that Calibration Vol 003 served. They are not in either issue.
This is not a new measurement. No model was run for this post. Every figure comes from the two issues above, except the balanced-accuracy table, which is computed from the same files and labelled as ours.
The steps are a proposal. They bind us once they are signed into a pre-registration, and not before.
Trademarks. Product, model and company names are used to identify the things discussed. No affiliation, sponsorship or endorsement is claimed or implied, in either direction.
Right of reply stands open. TypeSafe, Convai Innovations, the Open-Jev authors, or anyone else named here may respond, and a response will be published in full.
An issued Bench post is corrected in the open. Corrections are findings, and are published like findings.
Previous issue: Five Cases, a Hundred Times Each
To cite: Protocol STAMP. What a New Judge Has to Beat. The Bench, Oct 05, 2026. Budday Budderson Studio LLC. https://protocolstamp.com/bench/what-a-new-judge-has-to-beat/