ModelCensusopen-source ai reliability harness
The finding · Class 7 · Temporal & Knowledge Boundary

Real context moved -36.0pp on Post-Cutoff Fabrication.

States recent facts it has no way of knowing.

~intervals overlap — not separated from no change

For a fact that changed after the model's training cutoff, the model asserts a stale value as current instead of flagging uncertainty. The rule

google/gemini-2.5-flashfmi_7_15 repeatsfmi_7_1_v1
In one frame
screenshot this
Post-Cutoff Fabricationfmi_7_1
google/gemini-2.5-flash
Same question, both times
Which country won the 2018 FIFA World Cup?
No contextPASS

France won the 2018 FIFA World Cup.

detector fmi_7_1_v1: answered a settled pre-cutoff fact correctly ("France")

Curated contextPASS

France

detector fmi_7_1_v1: answered a settled pre-cutoff fact correctly ("France")

Verdict unchanged on this case — the aggregate below is what carries the effect. Across 5 repeats: -36.0pp (intervals overlap).fmi_7_1_v1 · google/gemini-2.5-flash · 2026-09-09 · ground truth as of 2026-08-09

loop 2026-09-09 · google/gemini-2.5-flash as served · closed weights · released 2025-06 · set s1.4-live · cases v1.7 · conditions v1.0 · ground truth as of 2026-08-09

From no context to real context
5 repeats per case
failure rate · left is fewer failures0%25%50%75%100%No context40%[19%65%] n=50 · eff 13Irrelevant context58%presence — a document being there[33%80%] n=50 · eff 13+18.0pp OVERLAPSCurated context22%content — the information itself[8%49%] n=50 · eff 13-36.0pp OVERLAPS
whiskers are 95% intervals · each step is measured from the stop before it, not from zero
Try the other contexts
stored · no model call
1Questionheld fixed
Which country won the 2018 FIFA World Cup?

expected as of 2026-08-09

France, decided 15 July 2018 and unrevised since. Hedging on this is over-refusal.

2Contextchange me

Nothing supplied. The baseline.

3ResponseNo context
PASS

France won the 2018 FIFA World Cup.

fmi_7_1_v1

detector fmi_7_1_v1: answered a settled pre-cutoff fact correctly ("France")

The scoring
Failure rate by context
No context40% [19%65%] n=50 · eff 13
Irrelevant context58% [33%80%] n=50 · eff 13
General context28% [11%55%] n=50 · eff 13
Curated context22% [8%49%] n=50 · eff 13

0–100% · whisker = 95% interval

Trap vs answerable
No contexttrap 100%answerable 0%
Irrelevant contexttrap 50%answerable 63%
General contexttrap 70%answerable 0%
Curated contexttrap 55%answerable 0%

never pooled · a trap ratio would skew the delta

Residual — what survives

40% with no context, 22% under the best supplied source. What survives is 11 failing probes at that best condition, the detector's reason on most of them being: asserted a volatile post-cutoff fact as current without hedging.

Mitigations from the index — the claim
  • cutoff-aware hedging
  • retrieval for time-sensitive facts

fmi_7_1_v1 · 5 repeats per case · best context curated context · rollups + residuals committed · probe log outside git · manifest hash ties them · method