learn-agent-launch-with-phoebe / Leader session 3 of 6
Learn Agent Launch with Phoebe · Leader track · Session 3 of 6

How to read an eval report: the questions that change the answer

Somebody puts a number in front of you and says the bot is ready. This session is about the three or four questions that decide whether that number means anything - and about the uncomfortable fact that the same models, on the same outputs, score roughly ten times better or worse depending only on how the measurer defined the word. You will leave with a grilling kit you can use in the next review, without touching a tool.

🟡 Leader track Heads of product · eng leaders · risk & compliance 45 min
0-3 · Welcome 3-25 · Three ways a number gets its shape 25-40 · Grill a report at your table 40-45 · Q&A
Part 0

You are not being lied to. You are being shown a different question's answer

Almost every misleading eval number in this session was produced honestly, by competent people, using a defensible method. That is what makes them dangerous. A leader who assumes bad faith looks for the wrong thing; the actual failure is that a number arrives without the definition, the sample and the grading rule that gave it its shape - and those three things move it further than any model upgrade ever will.

Live - presented in session Self-study - read after class Official sources covered
★ What you walk out with today The definition-sensitivity effect and roughly how large it is, three tells that a case set was picked rather than sampled, a way to read a vendor's internal benchmark without either believing it or dismissing it, the reason a leaderboard position is not a claim about your data, and a seven-question grilling kit you can run in a fifteen-minute review.
No tools on this page, on purpose The leader track is judgement mode. There is nothing here to install and nothing to run. Everything on this page is a question you can ask out loud in a meeting, and the reason the answer matters. Session a4 gives you the arithmetic that sits underneath it, and the builder track sessions b2, b4 and b6 show your team how to produce the answers.
Part 1 · definition sensitivity

The word moves the number about ten times further than the model does 8 min live

This is the headline of the whole session, and it is the one thing to remember if you remember nothing else. Hallucination rate is the clearest published example because two independent efforts have scored the same models under two different definitions, and the results do not overlap at all.

Same models. Same outputs. Two definitions of the word "hallucination". Vectara HHEM leaderboard 0.7% - 4.4% hallucination rate across current frontier models, under the leaderboard's own scoring FaithJudge re-scoring 7% - 12% the same models, re-scored under a stricter rule for what counts as unsupported The number moved by roughly 10x. Nothing about the models changed - only the definition. What a leader does with this Never compare two rates from two reports. Ask instead: what exactly counted as a hallucination here, who wrote that rule, and would our own worst answer last month have been counted? A vendor is not lying when their number is lower than yours. They may be scoring a different thing. Definition first, number second. A number without its definition is not evidence, it is decoration.
🔍 Click to zoom - one definition change, a tenfold move, and no model was harmed
LiveThe same effect, in every metric you will be shown4 min▶

Hallucination rate is the loudest case, not a special one. Every headline metric in this field hides a definitional dial, and the dial is usually set by whoever needs the number:

  • Resolution rate. Intercom publishes its definition openly and it is instructive: a hard resolution needs the customer to confirm, a soft resolution counts an exit plus 24 hours of inactivity, the resolution is reversed if the customer comes back to the thread, and a greeting-only exchange never counts. Three of those four rules are choices, and each one moves the rate. Their production range across customers runs roughly 38% to 72% (a secondary, vendor-published figure).
  • Accuracy on a query bot. Exact-string match against a single reference answer, versus running both queries and comparing the returned rows, are different metrics with the same name. The first rejects correct answers phrased differently.
  • Task success on an agent. Did one attempt succeed, or did all of them? Those are different numbers with the same label, and the gap between them is where production lives. Builder session b8 measures it.

The leader move is always the same and it is one sentence long: "read me the definition you used." If nobody in the room can, the number is not ready to be discussed yet.

Self-studyWhat honestly good looks like, so you have an anchor3 min read▶

Leaders get anchored on 99% because that is what software is like, and a bot report at 99% should worry you far more than one at 78%. Some published anchors worth carrying in your head, all measured on public benchmarks rather than on your data:

  • On BIRD, the main text-to-query benchmark, the best published systems sit around 82% execution accuracy while measured human performance is 92.96%. Humans do not get 100% either.
  • On Spider 2.0, built from enterprise-shaped workflows rather than tidy exam questions, a frontier reasoning model scored 17.0% - against 91.2% on the older, simpler Spider 1.0. Same class of model, same task name, a completely different difficulty of set.
  • For support chatbots, a mature containment rate of 70-90% is a strong result and a well-configured retrieval chatbot commonly lands at 40-65% (Gartner-attributed, reaching you through third parties rather than from a primary study).

Session a2 covers this ground properly. The point to hold here: when a report shows a number far above these anchors, the most likely explanation is not that your team is exceptional. It is that the set was easier.

Part 2 · whose set, whose scaffolding

Internal benchmarks answer a question you did not ask 7 min live

Vendor accuracy claims are the most-quoted numbers in any buying conversation and the least transferable. The published Snowflake Cortex Analyst result is a useful teaching case precisely because the company documented what it took to get there - which is more transparency than most vendors offer, and enough to see the shape of the problem.

A vendor headline: "over 90% accuracy" on text-to-query, published by the vendor Snowflake Cortex Analyst, an internal 150-question benchmark - not independently verified 1 · An internal 150-question set, not an independent one the questions and the grading rules were both chosen in-house You cannot reproduce it, and nobody outside the vendor has. 2 · A hand-built semantic model over the schema a curated modelling layer most teams do not have on day one Your number without that layer is a different number entirely. 3 · Agentic retries, not a single attempt the system was allowed more than one try before scoring A retry budget is a cost line on your invoice, not a freebie. 4 · Lenient multi-gold scoring several different answers were accepted as correct Strictness is a dial, and this one was turned down. On the same 150 questions, single-shot GPT-4o scored 51%. Same set, same questions. The gap is scaffolding, not model quality - and that scaffolding would be yours. Internal benchmarks are not lies. They answer a question you did not ask: how well can this vendor do on their own set with their own scaffolding? Yours is: what happens on our schema.
🔍 Click to zoom - four choices behind one headline, and the 39-point gap they are worth
Real world

The honest way to use a vendor number. Do not throw it away and do not repeat it. Treat it as a ceiling under ideal conditions and ask for the four things that turn it into a forecast: was the set yours or theirs, what preparation work was assumed, how many attempts per question, and how lenient was the marking. Then ask the one question that settles the buying decision - will you run this on fifty of our own questions, in front of us, first try? Every serious vendor says yes. The answer to that pilot is the only number that belongs in your business case.

Part 3 · the answer key

Sometimes the ground truth is the thing that is wrong 6 min live

Everything so far assumed that at least the right answers were right. On the two most-cited text-to-query benchmarks in the field, an audit checked that assumption and it did not hold. This is the finding that should change how you hear the phrase "state of the art".

An audit re-checked the gold answers on two standard benchmarks. This is what it found. BIRD Mini-Dev 52.8% of gold annotations found to be in error Spider 2.0-Snow 62.8% of gold annotations found to be in error What happened when 16 agents were re-evaluated on the corrected data Scores moved between -7% and +31%. Rankings moved by up to 9 positions. Systems that looked state of the art were not, and others had been punished for answers that were actually correct. The tension you have to hold, without resolving it The 96%-plus leaderboard entries on that split and the 62.8% annotation-error audit of that same split are both true. A leaderboard position is a claim about a dataset, not about your data. Ask who wrote the right answers, and when anyone last checked them. On the two benchmarks most cited in this field, the answer was: nobody had, until someone did - and the key moved.
🔍 Click to zoom - when the answer key is audited, the ranking is not the same ranking
What this does and does not mean It does not mean benchmarks are worthless or that everyone is cheating. It means a benchmark result is a measurement made with an instrument, and this instrument had not been calibrated. Two practical consequences for you: a leaderboard gap of a few points between two vendors is inside the noise and should not decide a purchase, and any team quoting a public benchmark as evidence that their deployment will work has skipped the only step that matters - running it on your own questions.
Discussion 1 of 2

The grilling kit: seven questions, fifteen minutes ★ 12 min · everyone asks

These are the questions, in order, in the words you would actually use. None of them require you to understand the model. Every one of them changes the number if the answer is bad, and a team that can answer all seven has almost certainly done the work.

Ask thisA good answer sounds likeA worrying answer sounds like
How many cases were in this run?"Four hundred and eighty, and here is the sheet.""A good number." Or any answer under about fifty offered as launch evidence.
Where were they sampled from?"A random sample of December production traffic, in the same category proportions as live.""We wrote them." Or "the ones we use for demos."
What fraction are adversarial or unanswerable?"About fifteen percent, split between the two, and here is how they scored separately.""None - we wanted to test what it is meant to do." This is the most common answer and the most revealing.
Who or what graded them?"Rules and execution where possible, a model judge for the rest, humans on the safety cases.""The model checked its own answers." Or a judge doing work a rule could do.
Was the judge calibrated, and against how many human labels?"Against a hundred and twenty human-labelled cases, and we report where it disagrees.""We wrote a good prompt for it." An uncalibrated judge reports its own opinion as accuracy.
What is the interval around that number?"The 95% lower bound is 88.1%." Session a4 is entirely about this answer."It is ninety percent." A point estimate offered as though it were a floor.
Was the threshold set before or after the run?"Before, in the tier document, dated and signed.""We felt this was a reasonable bar." Nobody has ever failed a gate they set after seeing the result.
How to use it without becoming the person nobody invites Ask them as curiosity, not as cross-examination, and ask them of a report you expect to be good rather than one you already distrust. The purpose is to establish that these are the standing questions in your organisation, so that the next report arrives with the answers already in it. Within two cycles the kit stops being something you ask and becomes the shape of the template your teams write to - which was the point.
★ The one-sentence version, if you only get to ask one thing

"Walk me through how a single case was chosen and how it was marked right or wrong - pick any case, I do not mind which." A team with a real eval can answer this in thirty seconds and will enjoy answering it. A team without one will answer with an average.

Discussion 2 of 2

Spot the picked set ★ 10 min · at your table

Cherry-picking is almost never deliberate. It happens because the cases that are easiest to write down are the ones the team already knows the bot handles, and because a failing case is unpleasant to add to your own test suite. Here are the tells, in the order you will notice them.

The pass rate is suspiciously round and suspiciously high. Real evals produce numbers like 87.3% on sets with awkward sizes. A clean 95% on exactly 20 cases is a demo, and a 100% pass rate means the set is too easy to be informative - the practitioner rule of thumb is that a perfect score is a problem with the eval, not a property of the bot.

There is no unanswerable category. Take the report's category list and look for the row where the correct behaviour is to refuse or escalate. If it is missing, the set cannot detect a bot that never says "I do not know" - and that is the bot that invents a refund policy in week one.

Every category passes at about the same rate. Real bots are lumpy: strong on lookups, weak on multi-turn, terrible on questions that need arithmetic. Uniform performance across genuinely different categories usually means the categories are not genuinely different.

The set has not changed in six months. A golden set that never grows is a set nobody is adding failures to, which means production incidents are not flowing back into it. Ask when the last case was added and what incident it came from.

Now do it for real. Take the most recent eval summary from your own organisation - or a vendor's published claim if you do not have one yet - and run the seven questions and these five tells against it. Write down the two answers you could not get. Those two are your next conversation, and they are more useful than any request for a higher number.

The tell that outranks all the others Ask whether the number has ever gone down between two reports. A measurement system that only ever produces improvements is not measuring; it is reporting. Real evals get worse when the set gets more honest, and the sessions where the number fell are the ones where the team learned something. If nobody can remember a report that went backwards, you are looking at a marketing artifact with a technical vocabulary.
Homework

Try it yourself - this week ◐ 40 min total

Source material

Official sources covered

Every figure on this page traces to a primary source catalogued in this course's source map, dated 2026-08-13. Vendor claims are labelled as vendor claims. This page covers:

✓Definition sensitivity: 0.7%-4.4% on the Vectara HHEM leaderboard vs 7-12% under FaithJudge re-scoringPart 1 · the ~10x headline · metric mechanics in b2
✓Snowflake Cortex Analyst 90%+ - internal 150-question set, semantic model, agentic retries, lenient multi-gold; single-shot GPT-4o 51% on the same setPart 2 · vendor-published, not independently verified
✓Gold-annotation audit: 52.8% error on BIRD Mini-Dev, 62.8% on Spider 2.0-Snow; 16 agents re-evaluated shifted -7% to +31% and up to 9 ranking positionsPart 3 · the leaderboard tension
✓Difficulty anchors: BIRD SOTA ~82% vs measured human 92.96%; Spider 2.0 o1-preview 17.0% vs 91.2% on Spider 1.0Part 1 self-study · archetype detail in a2
◐Intercom Fin resolution definition and its 38-72% production rangeNamed here as a definition example · vendor-published, secondary · full treatment in a2 and b5
◐Judge calibration against 100+ human labels, and the LLM-judge bias taxonomyAsked about here · measured and mitigated in b4
◐The interval behind "what is the error bar on that number"Question 6 of the grilling kit · answered in full in a4
◐Execution accuracy vs exact-set-match as the text-to-query grading standardMentioned as a definition dial · derived in b6
Check yourself

Three questions before you go 🎯 ◐ 90 seconds

1 · Two reports give hallucination rates for the same models: one says 0.7%-4.4%, the other says 7-12%. Which one is wrong?

This is the single most useful fact on the page. The Vectara HHEM leaderboard and the stricter FaithJudge re-scoring evaluate the same models on the same kind of task and land an order of magnitude apart, because they draw the line between "supported" and "unsupported" in different places. The consequence for you is a rule, not a fact: never compare two rates from two reports, and always ask for the definition before you react to the number.

2 · A vendor's published benchmark shows over 90% accuracy on text-to-query. What is the most useful next question?

The documented case shows why. That 90%-plus figure came from an internal 150-question set, with a hand-built semantic model over the schema, agentic retries rather than one attempt, and lenient multi-gold scoring - and on the same set, single-shot GPT-4o scored 51%. The 39-point gap is scaffolding you would have to build and pay for. None of that makes the vendor dishonest; it makes their number an answer to a question about their conditions, not yours. The live pilot is the only number that belongs in a business case.

3 · Your team wants to buy the tool sitting three places higher on a public text-to-query leaderboard. What should you say?

The instrument had not been calibrated. When the answer keys themselves were audited and corrected, re-evaluating sixteen agents moved rankings by up to nine positions - which is more movement than the gap you were about to spend money on. The correct posture is neither belief nor dismissal: a leaderboard result is a claim about a dataset, useful for ruling systems out and useless as a forecast of what happens on your schema. Answer B overcorrects into a different mistake, and a refresh does not fix an unaudited key.

Leader session 3 cheat sheet · pin this

Definition before numberSame models, same outputs: 0.7-4.4% or 7-12% hallucination depending only on the rule. The word moves it ~10x.
"Read me the definition you used"One sentence that works on every metric. If nobody in the room can, the number is not ready to discuss.
100% means the set is too easyReal evals are lumpy and produce awkward numbers. A perfect score is a finding about the eval, not the bot.
Look for the missing categoryNo unanswerable and no adversarial rows means the set cannot catch a bot that never says "I do not know".
Internal beats independent, on paperA vendor's 90%+ came with a semantic model, retries and lenient marking. Single-shot on the same set: 51%.
Scaffolding is yours to buildThe gap between a vendor demo and your result is preparation, retries and tolerance - all of them cost lines.
The answer key can be wrong52.8% and 62.8% gold-error audits moved 16 agents by -7% to +31% and up to 9 ranks. A few places is noise.
Has the number ever gone down?A measurement that only ever improves is reporting, not measuring. The reports that fell are the honest ones.