AILuminate: Introducing v1.0 of the AI Risk and Reliability Benchmark from MLCommons
Not on the map. Why?
Abstract (arXiv)
The rapid advancement and deployment of AI systems have created an urgent need for standard safety-evaluation frameworks. This paper introduces AILuminate v1.0, the first comprehensive industry-standard benchmark for assessing AI-product risk and reliability. Its development employed an open process that included participants from multiple fields. The benchmark evaluates an AI system's resistance to prompts designed to elicit dangerous, illegal, or undesirable behavior in 12 hazard categories, including violent crimes, nonviolent crimes, sex-related crimes, child sexual exploitation, indiscriminate weapons, suicide and self-harm, intellectual property, privacy, defamation, hate, sexual content, and specialized advice (election, financial, health, legal). Our method incorporates a complete assessment standard, extensive prompt datasets, a novel evaluation framework, a grading and reporting system, and the technical as well as organizational infrastructure for long-term support and evolution. In particular, the benchmark employs an understandable five-tier grading scale (Poor to Excellent) and incorporates an innovative entropy-based system-response evaluation. In addition to unveiling the benchmark, this report also identifies limitations of our method and of building safety benchmarks generally, including evaluator uncertainty and the constraints of single-turn interactions. This work represents a crucial step toward establishing global standards for AI risk and reliability evaluation while acknowledging the need for continued development in areas such as multiturn interactions, multimodal understanding, coverage of additional languages, and emerging hazard categories. Our findings provide valuable insights for model developers, system integrators, and policymakers working to promote safer AI deployment.
Key facts. Cited by 35 papers in the map (data through 14 Oct 2026). First posted on arXiv 19 Feb 2025.
Builds on
0 of 0 references.
No references here yet.
Built on by
Citing papers per year: 2025: 12; 2026: 23.
35 papers.
Sort:
By area:
- 2025Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Modelscited by 15
- 2026Hidden Measurement Error in LLM Pipelines Distorts Annotation, Evaluation, and Benchmarkingcited by 10
- 2025MedSentry: Understanding and Mitigating Safety Risks in Medical LLM Multi-Agent Systemscited by 9
- 2025D-REX: A Benchmark for Detecting Deceptive Reasoning in Large Language Modelscited by 7
- 2026SingGuard: A Policy-Adaptive Multimodal LLM Guardrail with Dynamic Reasoningcited by 6
- 2025Reasoning over Boundaries: Enhancing Specification Alignment via Test-time Deliberationcited by 4
- 2026Evaluation Cards: An Interpretive Layer for AI Evaluation Reportingcited by 4
- 2025The Trust Fabric: Decentralized Interoperability and Economic Coordination for the Agentic Webcited by 3
- 2025Are All Prompt Components Value-Neutral? Understanding the Heterogeneous Adversarial Robustness of Dissected Prompt in Large Language Modelscited by 3
- 2025Detecting and Preventing Harmful Behaviors in AI Companions: Development and Evaluation of the SHIELD Supervisory Systemcited by 3
- 2026Adversarial Humanities Benchmark: Results on Stylistic Robustness in Frontier Model Safetycited by 3
- 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safetycited by 3
23 more
- 2025FedMM-X: A Trustworthy and Interpretable Framework for Federated Multi-Modal Learning in Dynamic Environmentscited by 2
- 2026ExpGuard: LLM Content Moderation in Specialized Domainscited by 2
- 2025Contemplative Artificial Intelligencecited by 1
- 2025Phare: A Safety Probe for Large Language Modelscited by 1
- 2025Decoding Federated Learning: The FedNAM+ Conformal Revolutioncited by 1
- 2026When No Benchmark Exists: Validating Comparative LLM Safety Scoring Without Ground-Truth Labelscited by 1
- 2026FinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-Teamingcited by 1
- 2026HarmProfile: Characterizing Harmful Distributions in Frontier LLMscited by 1
- 2025Deprecating Benchmarks: Criteria and Frameworkcited by 0
- 2026Inducing Epistemological Humility in Large Language Models: A Targeted SFT Approach to Reducing Hallucinationcited by 0
- 2026Retrieval with Multiple Query Vectors through Anomalous Pattern Detectioncited by 0
- 2026Beyond Fixed Benchmarks and Worst-Case Attacks: Dynamic Boundary Evaluation for Language Modelscited by 0
- 2026StereoTales: A Multilingual Framework for Open-Ended Stereotype Discovery in LLMscited by 0
- 2026Metaphor Is Not All Attention Needscited by 0
- 2026From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AIcited by 0
- 2026Pluralis v0.1: Towards a Multicultural, Multimodal, Multilingual Benchmark for AI Risk and Reliabilitycited by 0
- 2026The Human Utility Factor: A Computable Welfare Metric That Reframes AI Governance as a Constrained Optimisation Problemcited by 0
- 2026Fool's Gold: Defensive Deception Against Safety-Removal Attacks on Open-Weight Modelscited by 0
- 2026When Vocabulary Comprehension Fails Clinical Reasoning: Evaluating Therapy Bots' Safety Risks for Generation Alphacited by 0
- 2026ASCII Attack: Recontextualising Harmful Requests as Artistic Critique in Large Language Modelscited by 0
- 2026SafeTune: A Unified Faithful Library for Auditing and Repairing Safety Drift in Fine-Tuned LLMscited by 0
- 2026PUBG Ally: A Conversational Embodied Agent as an AI Teammatecited by 0
- 2026Almost Human, Except When It Matters: VoxParity and the Decisions a Voice Should Changecited by 0
- 2026Almost Human, Except When It Matters: VoxParity and the Decisions a Voice Should Change28 Sep 2026
- 2026PUBG Ally: A Conversational Embodied Agent as an AI Teammate24 Sep 2026
- 2026ASCII Attack: Recontextualising Harmful Requests as Artistic Critique in Large Language Models2 Sep 2026
- 2026SafeTune: A Unified Faithful Library for Auditing and Repairing Safety Drift in Fine-Tuned LLMs26 Aug 2026
- 2026Fool's Gold: Defensive Deception Against Safety-Removal Attacks on Open-Weight Models17 Aug 2026
- 2026Pluralis v0.1: Towards a Multicultural, Multimodal, Multilingual Benchmark for AI Risk and Reliability7 Jul 2026
- 2026The Human Utility Factor: A Computable Welfare Metric That Reframes AI Governance as a Constrained Optimisation Problem23 Jun 2026
- 2026SingGuard: A Policy-Adaptive Multimodal LLM Guardrail with Dynamic Reasoning22 Jun 2026
- 2026FinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-Teaming18 Jun 2026
- 2026When Vocabulary Comprehension Fails Clinical Reasoning: Evaluating Therapy Bots' Safety Risks for Generation Alpha14 Jun 2026
- 2026HarmProfile: Characterizing Harmful Distributions in Frontier LLMs11 Jun 2026
- 2026Evaluation Cards: An Interpretive Layer for AI Evaluation Reporting8 Jun 2026
23 more
- 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety21 May 2026
- 2026From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI15 May 2026
- 2026Metaphor Is Not All Attention Needs12 May 2026
- 2026StereoTales: A Multilingual Framework for Open-Ended Stereotype Discovery in LLMs11 May 2026
- 2026When No Benchmark Exists: Validating Comparative LLM Safety Scoring Without Ground-Truth Labels7 May 2026
- 2026Beyond Fixed Benchmarks and Worst-Case Attacks: Dynamic Boundary Evaluation for Language Models7 May 2026
- 2026Retrieval with Multiple Query Vectors through Anomalous Pattern Detection3 May 2026
- 2026Adversarial Humanities Benchmark: Results on Stylistic Robustness in Frontier Model Safety20 Apr 2026
- 2026Hidden Measurement Error in LLM Pipelines Distorts Annotation, Evaluation, and Benchmarking13 Apr 2026
- 2026Inducing Epistemological Humility in Large Language Models: A Targeted SFT Approach to Reducing Hallucination18 Mar 2026
- 2026ExpGuard: LLM Content Moderation in Specialized Domains3 Mar 2026
- 2025Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models19 Nov 2025
- 2025D-REX: A Benchmark for Detecting Deceptive Reasoning in Large Language Models22 Sep 2025
- 2025Reasoning over Boundaries: Enhancing Specification Alignment via Test-time Deliberation18 Sep 2025
- 2025Detecting and Preventing Harmful Behaviors in AI Companions: Development and Evaluation of the SHIELD Supervisory System8 Sep 2025
- 2025Are All Prompt Components Value-Neutral? Understanding the Heterogeneous Adversarial Robustness of Dissected Prompt in Large Language Models3 Aug 2025
- 2025The Trust Fabric: Decentralized Interoperability and Economic Coordination for the Agentic Web10 Jul 2025
- 2025Deprecating Benchmarks: Criteria and Framework8 Jul 2025
- 2025Decoding Federated Learning: The FedNAM+ Conformal Revolution22 Jun 2025
- 2025MedSentry: Understanding and Mitigating Safety Risks in Medical LLM Multi-Agent Systems27 May 2025
- 2025Phare: A Safety Probe for Large Language Models16 May 2025
- 2025Contemplative Artificial Intelligence21 Apr 2025
- 2025FedMM-X: A Trustworthy and Interpretable Framework for Federated Multi-Modal Learning in Dynamic Environments25 Mar 2025
- 2025Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Modelscited by 15
- 2026Adversarial Humanities Benchmark: Results on Stylistic Robustness in Frontier Model Safetycited by 3
- 2026ExpGuard: LLM Content Moderation in Specialized Domainscited by 2
- 2026When No Benchmark Exists: Validating Comparative LLM Safety Scoring Without Ground-Truth Labelscited by 1
- 2026FinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-Teamingcited by 1
- 2026HarmProfile: Characterizing Harmful Distributions in Frontier LLMscited by 1
- 2026Beyond Fixed Benchmarks and Worst-Case Attacks: Dynamic Boundary Evaluation for Language Modelscited by 0
- 2026Metaphor Is Not All Attention Needscited by 0
- 2026FinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-Teaming18 Jun 2026
- 2026HarmProfile: Characterizing Harmful Distributions in Frontier LLMs11 Jun 2026
- 2026Metaphor Is Not All Attention Needs12 May 2026
- 2026When No Benchmark Exists: Validating Comparative LLM Safety Scoring Without Ground-Truth Labels7 May 2026
- 2026Beyond Fixed Benchmarks and Worst-Case Attacks: Dynamic Boundary Evaluation for Language Models7 May 2026
- 2026Adversarial Humanities Benchmark: Results on Stylistic Robustness in Frontier Model Safety20 Apr 2026
- 2026ExpGuard: LLM Content Moderation in Specialized Domains3 Mar 2026
- 2025Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models19 Nov 2025
- 2025MedSentry: Understanding and Mitigating Safety Risks in Medical LLM Multi-Agent Systemscited by 9
- 2025The Trust Fabric: Decentralized Interoperability and Economic Coordination for the Agentic Webcited by 3
- 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safetycited by 3
- 2026From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AIcited by 0
- 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety21 May 2026
- 2026From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI15 May 2026
- 2025The Trust Fabric: Decentralized Interoperability and Economic Coordination for the Agentic Web10 Jul 2025
- 2025MedSentry: Understanding and Mitigating Safety Risks in Medical LLM Multi-Agent Systems27 May 2025
- 2025D-REX: A Benchmark for Detecting Deceptive Reasoning in Large Language Modelscited by 7
- 2026SingGuard: A Policy-Adaptive Multimodal LLM Guardrail with Dynamic Reasoningcited by 6
- 2025Reasoning over Boundaries: Enhancing Specification Alignment via Test-time Deliberationcited by 4
- 2026When Vocabulary Comprehension Fails Clinical Reasoning: Evaluating Therapy Bots' Safety Risks for Generation Alphacited by 0
- 2026SingGuard: A Policy-Adaptive Multimodal LLM Guardrail with Dynamic Reasoning22 Jun 2026
- 2026When Vocabulary Comprehension Fails Clinical Reasoning: Evaluating Therapy Bots' Safety Risks for Generation Alpha14 Jun 2026
- 2025D-REX: A Benchmark for Detecting Deceptive Reasoning in Large Language Models22 Sep 2025
- 2025Reasoning over Boundaries: Enhancing Specification Alignment via Test-time Deliberation18 Sep 2025
- 2026Hidden Measurement Error in LLM Pipelines Distorts Annotation, Evaluation, and Benchmarkingcited by 10
- 2026Evaluation Cards: An Interpretive Layer for AI Evaluation Reportingcited by 4
- 2025Are All Prompt Components Value-Neutral? Understanding the Heterogeneous Adversarial Robustness of Dissected Prompt in Large Language Modelscited by 3
- 2025Detecting and Preventing Harmful Behaviors in AI Companions: Development and Evaluation of the SHIELD Supervisory Systemcited by 3
- 2025FedMM-X: A Trustworthy and Interpretable Framework for Federated Multi-Modal Learning in Dynamic Environmentscited by 2
- 2025Contemplative Artificial Intelligencecited by 1
- 2025Phare: A Safety Probe for Large Language Modelscited by 1
- 2025Decoding Federated Learning: The FedNAM+ Conformal Revolutioncited by 1
- 2025Deprecating Benchmarks: Criteria and Frameworkcited by 0
- 2026Inducing Epistemological Humility in Large Language Models: A Targeted SFT Approach to Reducing Hallucinationcited by 0
- 2026Retrieval with Multiple Query Vectors through Anomalous Pattern Detectioncited by 0
- 2026StereoTales: A Multilingual Framework for Open-Ended Stereotype Discovery in LLMscited by 0
12 most cited of 16 All 16 (JSON)
- 2026Almost Human, Except When It Matters: VoxParity and the Decisions a Voice Should Change28 Sep 2026
- 2026PUBG Ally: A Conversational Embodied Agent as an AI Teammate24 Sep 2026
- 2026SafeTune: A Unified Faithful Library for Auditing and Repairing Safety Drift in Fine-Tuned LLMs26 Aug 2026
- 2026The Human Utility Factor: A Computable Welfare Metric That Reframes AI Governance as a Constrained Optimisation Problem23 Jun 2026
- 2026Evaluation Cards: An Interpretive Layer for AI Evaluation Reporting8 Jun 2026
- 2026StereoTales: A Multilingual Framework for Open-Ended Stereotype Discovery in LLMs11 May 2026
- 2026Retrieval with Multiple Query Vectors through Anomalous Pattern Detection3 May 2026
- 2026Hidden Measurement Error in LLM Pipelines Distorts Annotation, Evaluation, and Benchmarking13 Apr 2026
- 2026Inducing Epistemological Humility in Large Language Models: A Targeted SFT Approach to Reducing Hallucination18 Mar 2026
- 2025Detecting and Preventing Harmful Behaviors in AI Companions: Development and Evaluation of the SHIELD Supervisory System8 Sep 2025
- 2025Are All Prompt Components Value-Neutral? Understanding the Heterogeneous Adversarial Robustness of Dissected Prompt in Large Language Models3 Aug 2025
- 2025Deprecating Benchmarks: Criteria and Framework8 Jul 2025
12 newest of 16 All 16 (JSON)