Paddock

Methodology

What a row is

Each row in results/ is one cell: one graded attempt of one task by one harness configuration and one model. It records the suite, task and task_version; the harness name, version and configuration hash; the model's provider id; the verdict and partial-credit score; tokens (fresh input, cache reads, output); wall time; the run id and the Paddock commit it ran at; and its cost.

What is scored

Statistics

Pass rate is passed / n with a 95% Wilson score interval (z = 1.96). Mean is partial credit, the fraction of a task's sub-checks passed, averaged over scored attempts that report one. Boards rank by pass rate, then by the interval's lower bound. Most cells are small (n of 4 to 18): overlapping intervals are not a ranking.

Tokens and cost

Price table 2026-10-10

Per-token rates in USD per million tokens: input is fresh (uncached) input, cache is cache-read input, output includes reasoning tokens. Cache writes count as input at the input rate, so a provider's cache-write premium (Anthropic: 1.25x for 5-minute writes) is not included. A model absent from this table, or with source unknown, is priced unknown, never zero. Rates are what an API customer would pay; a run on a subscription plan is still priced at these API-equivalent rates. Proxy or gateway cost estimates are never a source.

modelinputcache readoutputsourceas ofreference
anthropic/claude-haiku-4-510.15published-rate2026-09-29https://docs.anthropic.com/en/docs/about-claude/pricing
anthropic/claude-opus-5-540.220published-rate2026-09-29https://docs.anthropic.com/en/docs/about-claude/pricing
anthropic/claude-sonnet-520.210published-rate2026-09-29https://docs.anthropic.com/en/docs/about-claude/pricing
baseten/glm-5.3-flash0.150.030.5published-rate2026-09-20Baseten /v1/models pricing for zai-org/GLM-5.3-Flash
fireworks/kimi-k330.315published-rate2026-09-26https://fireworks.ai/models/fireworks/kimi-k3
fireworks/qwen3.8-27bunknownunknown2026-10-05Fireworks dedicated BF16 deployment
A dedicated deployment bills per GPU-hour, not per token, so no per-token price exists.
fireworks/qwen3.8-max20.256published-rate2026-09-28https://fireworks.ai/models/fireworks/qwen3p8-max
Fireworks bills cached input at the cached rate; a proxy that billed it at the full input rate overstated cost about 3x (LITELLMPRICE-01).
local/qwen3-coder-next-80b-a3b-6bitunknownunknown2026-09-30Self-hosted on local hardware
Self-hosted: no per-token price. Hardware and power cost are not measured.
moonshot/kimi-k330.315published-rate2026-09-21Moonshot first-party published rate for Kimi K3
openai/gpt-6.1-sol20.110published-rate2026-09-29https://developers.openai.com/api/docs/models/gpt-6.1-sol
Short-context rate; long-context pricing above 272K prompt tokens is not modelled.
together/deepseek-v4.1-flash0.30.31.2published-rate2026-09-20Together /v1/models pricing for deepseek-ai/DeepSeek-V4.1-Flash
Together discloses no cached-input rate, so cache reads are priced at the input rate.
zai/glm-5.21.40.264.4published-rate2026-10-10https://docs.z.ai/guides/overview/pricing
Published rates, not yet reconciled against a Z.ai invoice. An earlier reading that Z.ai bills cache reads at the input rate was retracted (ZAIPRICE-02).

Price table 2026-10-18

Per-token rates in USD per million tokens: input is fresh (uncached) input, cache is cache-read input, output includes reasoning tokens. Cache writes count as input at the input rate, so a provider's cache-write premium (Anthropic: 1.25x for 5-minute writes) is not included. A model absent from this table, or with source unknown, is priced unknown, never zero. Rates are what an API customer would pay; a run on a subscription plan is still priced at these API-equivalent rates. Proxy or gateway cost estimates are never a source.

modelinputcache readoutputsourceas ofreference
anthropic/claude-haiku-4-510.15published-rate2026-09-29https://docs.anthropic.com/en/docs/about-claude/pricing
anthropic/claude-opus-5-540.220published-rate2026-09-29https://docs.anthropic.com/en/docs/about-claude/pricing
anthropic/claude-sonnet-520.210published-rate2026-09-29https://docs.anthropic.com/en/docs/about-claude/pricing
anthropic/claude-sonnet-5-520.110published-rate2026-10-10https://docs.anthropic.com/en/docs/about-claude/pricing
baseten/glm-5.3-flash0.150.030.5published-rate2026-09-20Baseten /v1/models pricing for zai-org/GLM-5.3-Flash
fireworks/kimi-k330.315published-rate2026-09-26https://fireworks.ai/models/fireworks/kimi-k3
fireworks/qwen3.8-27bunknownunknown2026-10-05Fireworks dedicated BF16 deployment
A dedicated deployment bills per GPU-hour, not per token, so no per-token price exists.
fireworks/qwen3.8-max20.256published-rate2026-09-28https://fireworks.ai/models/fireworks/qwen3p8-max
Fireworks bills cached input at the cached rate; a proxy that billed it at the full input rate overstated cost about 3x (LITELLMPRICE-01).
google/gemini-3.1-prounknownunknown2026-10-18No published rate recorded
google/gemini-3.8-flash0.750.0753.75published-rate2026-10-12https://ai.google.dev/gemini-api/docs/pricing
Introductory rate through 2026-12-31.
google/gemini-4-argon20.110published-rate2026-10-14https://ai.google.dev/gemini-api/docs/pricing
Introductory rate through 2026-11-30.
local/qwen3-coder-next-80b-a3b-6bitunknownunknown2026-09-30Self-hosted on local hardware
Self-hosted: no per-token price. Hardware and power cost are not measured.
moonshot/kimi-k330.315published-rate2026-09-21Moonshot first-party published rate for Kimi K3
openai/gpt-5.6-luna0.20.021.2published-rate2026-09-25https://developers.openai.com/api/docs/pricing
openai/gpt-5.6-sol40.420published-rate2026-09-25https://developers.openai.com/api/docs/pricing
Promotional rate.
openai/gpt-5.6-terra20.212published-rate2026-09-25https://developers.openai.com/api/docs/pricing
openai/gpt-6-astra10150published-rate2026-09-25https://developers.openai.com/api/docs/pricing
openai/gpt-6-luna0.10.010.5published-rate2026-09-25https://developers.openai.com/api/docs/pricing
openai/gpt-6-sol20.210published-rate2026-09-25https://developers.openai.com/api/docs/pricing
openai/gpt-6.1-sol20.110published-rate2026-09-29https://developers.openai.com/api/docs/models/gpt-6.1-sol
Short-context rate; long-context pricing above 272K prompt tokens is not modelled.
together/deepseek-v4.1-flash0.30.31.2published-rate2026-09-20Together /v1/models pricing for deepseek-ai/DeepSeek-V4.1-Flash
Together discloses no cached-input rate, so cache reads are priced at the input rate.
together/qwen3.8-flashunknownunknown2026-10-18No published rate recorded
zai/glm-5.21.40.264.4published-rate2026-10-10https://docs.z.ai/guides/overview/pricing
Published rates, not yet reconciled against a Z.ai invoice. An earlier reading that Z.ai bills cache reads at the input rate was retracted (ZAIPRICE-02).

Price table 2026-10-25

Per-token rates in USD per million tokens: input is fresh (uncached) input, cache is cache-read input, output includes reasoning tokens. Cache writes count as input at the input rate, so a provider's cache-write premium (Anthropic: 1.25x for 5-minute writes) is not included. A model absent from this table, or with source unknown, is priced unknown, never zero. Rates are what an API customer would pay; a run on a subscription plan is still priced at these API-equivalent rates. Proxy or gateway cost estimates are never a source.

modelinputcache readoutputsourceas ofreference
anthropic/claude-haiku-4-510.15published-rate2026-09-29https://docs.anthropic.com/en/docs/about-claude/pricing
anthropic/claude-haiku-5-50.10.010.5published-rate2026-10-25https://www.anthropic.com/claude-haiku-5-5
Published short-prompt rates; prompts over 100,000 tokens cost five times these rates, so such runs record below their true cost.
anthropic/claude-opus-5-540.220published-rate2026-09-29https://docs.anthropic.com/en/docs/about-claude/pricing
anthropic/claude-sonnet-520.210published-rate2026-09-29https://docs.anthropic.com/en/docs/about-claude/pricing
anthropic/claude-sonnet-5-520.110published-rate2026-10-10https://docs.anthropic.com/en/docs/about-claude/pricing
baseten/glm-5.3-flash0.150.030.5published-rate2026-09-20Baseten /v1/models pricing for zai-org/GLM-5.3-Flash
fireworks/kimi-k330.315published-rate2026-09-26https://fireworks.ai/models/fireworks/kimi-k3
fireworks/qwen3.8-27bunknownunknown2026-10-05Fireworks dedicated BF16 deployment
A dedicated deployment bills per GPU-hour, not per token, so no per-token price exists.
fireworks/qwen3.8-max20.256published-rate2026-09-28https://fireworks.ai/models/fireworks/qwen3p8-max
Fireworks bills cached input at the cached rate; a proxy that billed it at the full input rate overstated cost about 3x (LITELLMPRICE-01).
google/gemini-3.1-prounknownunknown2026-10-18No published rate recorded
google/gemini-3.8-flash0.750.0753.75published-rate2026-10-12https://ai.google.dev/gemini-api/docs/pricing
Introductory rate through 2026-12-31.
google/gemini-4-argon20.110published-rate2026-10-14https://ai.google.dev/gemini-api/docs/pricing
Introductory rate through 2026-11-30.
local/qwen3-coder-next-80b-a3b-6bitunknownunknown2026-09-30Self-hosted on local hardware
Self-hosted: no per-token price. Hardware and power cost are not measured.
moonshot/kimi-k330.315published-rate2026-09-21Moonshot first-party published rate for Kimi K3
openai/gpt-5.6-luna0.20.021.2published-rate2026-09-25https://developers.openai.com/api/docs/pricing
openai/gpt-5.6-sol40.420published-rate2026-09-25https://developers.openai.com/api/docs/pricing
Promotional rate.
openai/gpt-5.6-terra20.212published-rate2026-09-25https://developers.openai.com/api/docs/pricing
openai/gpt-6-astra10150published-rate2026-09-25https://developers.openai.com/api/docs/pricing
openai/gpt-6-luna0.10.010.5published-rate2026-09-25https://developers.openai.com/api/docs/pricing
openai/gpt-6-sol20.210published-rate2026-09-25https://developers.openai.com/api/docs/pricing
openai/gpt-6.1-sol20.110published-rate2026-09-29https://developers.openai.com/api/docs/models/gpt-6.1-sol
Short-context rate; long-context pricing above 272K prompt tokens is not modelled.
together/deepseek-v4.1-flash0.30.31.2published-rate2026-09-20Together /v1/models pricing for deepseek-ai/DeepSeek-V4.1-Flash
Together discloses no cached-input rate, so cache reads are priced at the input rate.
together/qwen3.8-flashunknownunknown2026-10-18No published rate recorded
zai/glm-5.21.40.264.4published-rate2026-10-10https://docs.z.ai/guides/overview/pricing
Published rates, not yet reconciled against a Z.ai invoice. An earlier reading that Z.ai bills cache reads at the input rate was retracted (ZAIPRICE-02).

Harness fairness

Before results are published, every harness's tool and permission configuration is audited against its vendor defaults with this checklist, and the audit is recorded here.

Each finding is pass, fail or not-verifiable. An audited harness has evidence for every check passing; it remains provisional until a maintainer signs off. A pending harness has unresolved checks. The audit date records the evidence review, not sign-off. Vendor documentation describes the defaults on that date; without a recorded CLI version it cannot establish historical defaults. Current runner code does not establish how an imported run executed.

  1. tools: The harness exposes its vendor-default tool set: no tool removed, none added, and native web access left at the vendor default and recorded.
  2. permissions: The harness runs in its vendor's non-interactive mode with equivalent authority; the sandbox boundary is the container, the same for every harness.
  3. model: The model the harness actually ran, read from its own telemetry, is the one recorded (CCMODEL-01).
  4. reasoning: The reasoning or effort level is recorded, and is the vendor default or the same named level across compared rows.
  5. prompt: Every harness gets the same task prompt and no harness-specific instructions beyond its vendor default system prompt.
  6. limits: Wall-clock timeout, container CPU and memory, and turn or token limits are the same for every harness, or the vendor default and recorded.
  7. telemetry: The harness's tool-call record is captured whole, never truncated, so a read-evidence check cannot fail on capture (OCEXPORT-01).
  8. transport: When a model is reached through a proxy or gateway, any request rewriting it does is part of the recorded configuration (KIMIEMPTY-01).
  9. provenance: Harness CLI version and configuration hash are recorded with every result.
harnessauditdatenotes maintainer sign-off
antigravitypending2026-10-20Scope: all 55 imported records in 2 committed bundles, covering 1 configuration hash. Vendor documentation consulted 2026-10-20 is a current baseline, not proof of unknown historical CLI defaults. Pending: provenance fail; remaining checks are not verifiable. Current standalone findings are identified separately from historical fleet evidence. Maintainer sign-off is empty.—
claude-codepending2026-10-20Scope: all 279 imported records in 4 committed bundles, covering 2 configuration hashes. Vendor documentation consulted 2026-10-20 is a current baseline, not proof of unknown historical CLI defaults. Pending: reasoning, transport, provenance fail; remaining checks are not verifiable. Current standalone findings are identified separately from historical fleet evidence. Maintainer sign-off is empty.—
codexpending2026-10-20Scope: all 109 imported records in 4 committed bundles, covering 3 configuration hashes. Vendor documentation consulted 2026-10-20 is a current baseline, not proof of unknown historical CLI defaults. Pending: reasoning, transport, provenance fail; remaining checks are not verifiable. Current standalone findings are identified separately from historical fleet evidence. Maintainer sign-off is empty.—
opencodepending2026-10-20Scope: all 78 imported records in 3 committed bundles, covering 1 configuration hash. Vendor documentation consulted 2026-10-20 is a current baseline, not proof of unknown historical CLI defaults. Pending: reasoning, telemetry, transport, provenance fail; remaining checks are not verifiable. Current standalone findings are identified separately from historical fleet evidence. Maintainer sign-off is empty.—
pipending2026-10-20Scope: all 54 imported records in 2 committed bundles, covering 1 configuration hash. Vendor documentation consulted 2026-10-20 is a current baseline, not proof of unknown historical CLI defaults. Pending: reasoning, telemetry, transport, provenance fail; remaining checks are not verifiable. Current standalone findings are identified separately from historical fleet evidence. Maintainer sign-off is empty.—

antigravity: checklist evidence

checkfindingevidence
toolsnot-verifiableVendor settings expose browser integration and MCP customizations. The gemini lock records only bash:safe, read and write; it is a registry declaration, not a native tool inventory. Antigravity has no standalone adapter here. No historical native tool list, web setting or extension inventory is recorded.
permissionsnot-verifiableVendor settings distinguish review and unattended authority. The local gemini class maps to Antigravity, but the fleet launcher and its effective permissions are not in this checkout. No historical permission or container settings are recorded; the four-harness standalone container cannot establish Antigravity containment.
modelnot-verifiableThe 55 records contain imported model labels (google/gemini-3.1-pro: 55). The importer maps labels to provider ids, not native execution telemetry. No per-run native model event or resolved-model proof is committed, so CCMODEL-01 cannot be verified; no model mismatch is inferred.
reasoningnot-verifiableAll 55 rows record high, derived from the imported model-label mapping. Vendor effort is model-dependent and selectable; native resolved effort and the historical CLI version are absent. Other compared harness rows have null effort, so equivalence across comparisons is not established.
promptnot-verifiableThe current shared staging function constructs one task prompt plus the same workspace guard without a harness branch. Antigravity has no standalone argv here; its historical launcher is external. Imported bundles contain neither the delivered prompt/hash nor effective system, project or persona instructions; historical prompt parity is not verifiable.
limitsnot-verifiableCurrent standalone defaults are 3600 seconds, 2 CPUs, 2048 MiB and 256 processes, shared by its four adapters; no per-harness turn or token cap is supplied in their argv. These are benchmark limits, not vendor defaults. Historical fleet descriptors omit timeout, CPU, memory and turn/token limits, and wall_seconds is null. Battery admission budgets do not establish per-run resource parity.
telemetrynot-verifiableThe repository parses native harness events, but imported bundles retain verdict summaries without tool-call records or completeness evidence. Standalone output overflow is rejected before grading, which does not establish historical fleet capture. Whole-record OCEXPORT-01 compliance cannot be verified from these results.
transportnot-verifiableThe only imported descriptor labels transport as vendor. The external launcher and effective endpoint/route are not recorded, so the absence of a proxy or gateway cannot be verified. No private endpoint is needed for this audit; a sanitized route and rewrite description would suffice.
provenancefailAll 55 records have harness.version=null. Each record does have a config_hash with a matching descriptor, but the CLI version requirement fails. A descriptor hash does not recover the missing native version or the omitted settings.

claude-code: checklist evidence

checkfindingevidence
toolsnot-verifiableThe vendor CLI supports its default built-in tools and separate MCP configuration. The standalone argv supplies no tool filters. The locks contain only registry capabilities, and imported descriptors omit the native tool inventory, web access and MCP settings; native default parity is not verifiable.
permissionsnot-verifiableVendor -p is non-interactive. The current standalone argv selects bypassPermissions inside the common Docker boundary. Imported runs instead name the fleet runner and omit its effective permission and container settings; historical authority equivalence cannot be established.
modelnot-verifiableThe 279 records contain imported model labels (anthropic/claude-haiku-4-5: 12; anthropic/claude-opus-5-5: 36; anthropic/claude-sonnet-5: 18; anthropic/claude-sonnet-5-5: 30; baseten/glm-5.3-flash: 7; fireworks/kimi-k3: 7; fireworks/qwen3.8-27b: 6; fireworks/qwen3.8-max: 81; local/qwen3-coder-next-80b-a3b-6bit: 12; moonshot/kimi-k3: 7; together/deepseek-v4.1-flash: 7; zai/glm-5.2: 56). The importer maps labels to provider ids, not native execution telemetry. No per-run native model event or resolved-model proof is committed, so CCMODEL-01 cannot be verified; no model mismatch is inferred.
reasoningfailAll 279 rows have model.reasoning=null. The resolved level is therefore unrecorded, rather than evidence of a vendor default. Vendor effort defaults depend on model; current argv can set --effort and pilot batteries request high, neither of which proves historical effort.
promptnot-verifiableThe current shared staging function constructs one task prompt plus the same workspace guard without a harness branch. The standalone argv adds no system-prompt override. Imported bundles contain neither the delivered prompt/hash nor effective system, project or persona instructions; historical prompt parity is not verifiable.
limitsnot-verifiableCurrent standalone defaults are 3600 seconds, 2 CPUs, 2048 MiB and 256 processes, shared by its four adapters; no per-harness turn or token cap is supplied in their argv. These are benchmark limits, not vendor defaults. Historical fleet descriptors omit timeout, CPU, memory and turn/token limits, and wall_seconds is null. Battery admission budgets do not establish per-run resource parity.
telemetrynot-verifiableThe repository parses native harness events, but imported bundles retain verdict summaries without tool-call records or completeness evidence. Standalone output overflow is rejected before grading, which does not establish historical fleet capture. Whole-record OCEXPORT-01 compliance cannot be verified from these results.
transportfailImported proxy configurations record model_transport=openai-compatible-proxy but no gateway version, effective rewrite rules or explicit no-rewriting statement. The required behavior is missing from the recorded configuration; a route type alone does not pass KIMIEMPTY-01.
provenancefailAll 279 records have harness.version=null. Each record does have a config_hash with a matching descriptor, but the CLI version requirement fails. A descriptor hash does not recover the missing native version or the omitted settings.

codex: checklist evidence

checkfindingevidence
toolsnot-verifiableVendor configuration controls web search and additional tools. The standalone argv leaves those settings unspecified. The locks contain only registry capabilities; imported descriptors record neither native tools nor the resolved web-search mode, so default parity is not verifiable.
permissionsnot-verifiableVendor exec supports non-interactive execution and bypassing inner approvals and sandboxing inside isolation. Current standalone uses that mode in Docker. The imported fleet descriptors omit effective permissions and containment; current standalone code cannot establish historical authority equivalence.
modelnot-verifiableThe 109 records contain imported model labels (baseten/glm-5.3-flash: 7; fireworks/kimi-k3: 7; fireworks/qwen3.8-max: 7; local/qwen3-coder-next-80b-a3b-6bit: 12; moonshot/kimi-k3: 14; openai/gpt-6.1-sol: 48; together/deepseek-v4.1-flash: 7; zai/glm-5.2: 7). The importer maps labels to provider ids, not native execution telemetry. No per-run native model event or resolved-model proof is committed, so CCMODEL-01 cannot be verified; no model mismatch is inferred.
reasoningfailAll 109 rows have model.reasoning=null. The resolved level is therefore unrecorded, rather than evidence of a vendor default. Vendor model_reasoning_effort is configurable; current argv and pilot batteries can request explicit levels, neither of which proves historical effort.
promptnot-verifiableThe current shared staging function constructs one task prompt plus the same workspace guard without a harness branch. The standalone argv adds no system-prompt override. Imported bundles contain neither the delivered prompt/hash nor effective system, project or persona instructions; historical prompt parity is not verifiable.
limitsnot-verifiableCurrent standalone defaults are 3600 seconds, 2 CPUs, 2048 MiB and 256 processes, shared by its four adapters; no per-harness turn or token cap is supplied in their argv. These are benchmark limits, not vendor defaults. Historical fleet descriptors omit timeout, CPU, memory and turn/token limits, and wall_seconds is null. Battery admission budgets do not establish per-run resource parity.
telemetrynot-verifiableThe repository parses native harness events, but imported bundles retain verdict summaries without tool-call records or completeness evidence. Standalone output overflow is rejected before grading, which does not establish historical fleet capture. Whole-record OCEXPORT-01 compliance cannot be verified from these results.
transportfailImported proxy configurations record model_transport=openai-compatible-proxy but no gateway version, effective rewrite rules or explicit no-rewriting statement. One Codex descriptor additionally names KIMIEMPTY-01, which identifies a boundary but not the request transformation. The required behavior is missing from the recorded configuration; a route type alone does not pass KIMIEMPTY-01.
provenancefailAll 109 records have harness.version=null. Each record does have a config_hash with a matching descriptor, but the CLI version requirement fails. A descriptor hash does not recover the missing native version or the omitted settings.

opencode: checklist evidence

checkfindingevidence
toolsnot-verifiableVendor tools include webfetch; websearch availability depends on provider or environment. Standalone supplies no tool filter, but the registry lock is not a native tool inventory. Imported descriptors omit native tool, web-search and extension settings.
permissionsnot-verifiableVendor run is non-interactive, but default permissions still ask for external-directory and repeated-call approval. Standalone sets no permission override. Neither effective historical permissions nor container boundaries are recorded, so equivalent unattended authority cannot be established.
modelnot-verifiableThe 78 records contain imported model labels (baseten/glm-5.3-flash: 7; fireworks/kimi-k3: 7; fireworks/qwen3.8-max: 7; local/qwen3-coder-next-80b-a3b-6bit: 12; moonshot/kimi-k3: 7; together/deepseek-v4.1-flash: 31; zai/glm-5.2: 7). The importer maps labels to provider ids, not native execution telemetry. No per-run native model event or resolved-model proof is committed, so CCMODEL-01 cannot be verified; no model mismatch is inferred.
reasoningfailAll 78 rows have model.reasoning=null. The resolved level is therefore unrecorded, rather than evidence of a vendor default. Vendor model variants carry reasoning settings. Standalone rejects reasoning overrides and the imported descriptors do not record a resolved variant.
promptnot-verifiableThe current shared staging function constructs one task prompt plus the same workspace guard without a harness branch. The standalone argv adds no system-prompt override. Imported bundles contain neither the delivered prompt/hash nor effective system, project or persona instructions; historical prompt parity is not verifiable.
limitsnot-verifiableCurrent standalone defaults are 3600 seconds, 2 CPUs, 2048 MiB and 256 processes, shared by its four adapters; no per-harness turn or token cap is supplied in their argv. These are benchmark limits, not vendor defaults. Historical fleet descriptors omit timeout, CPU, memory and turn/token limits, and wall_seconds is null. Battery admission budgets do not establish per-run resource parity.
telemetryfailThe current standalone adapter truncates every tool-argument string longer than 2000 characters after parsing, violating whole-record capture. Output-stream overflow is separately rejected before grading. Imported fleet bundles contain no whole tool-call record or completeness proof, so historical OCEXPORT-01 compliance is also unverified; the current adapter defect is not attributed to those historical runs.
transportfailImported proxy configurations record model_transport=openai-compatible-proxy but no gateway version, effective rewrite rules or explicit no-rewriting statement. The required behavior is missing from the recorded configuration; a route type alone does not pass KIMIEMPTY-01.
provenancefailAll 78 records have harness.version=null. Each record does have a config_hash with a matching descriptor, but the CLI version requirement fails. A descriptor hash does not recover the missing native version or the omitted settings.

pi: checklist evidence

checkfindingevidence
toolsnot-verifiableVendor CLI defaults enable read, bash, edit and write; extensions can add tools. Standalone supplies no tool filter. Imported descriptors and the registry lock do not establish the native tool inventory, extension state or native web-access default for the unknown historical version.
permissionsnot-verifiableVendor JSON/print mode is non-interactive and tools use process authority; an external container can bound it. Standalone uses JSON/print mode in the common Docker boundary. The imported fleet settings do not record historical authority or containment.
modelnot-verifiableThe 54 records contain imported model labels (baseten/glm-5.3-flash: 7; fireworks/kimi-k3: 7; fireworks/qwen3.8-max: 7; local/qwen3-coder-next-80b-a3b-6bit: 12; moonshot/kimi-k3: 7; together/deepseek-v4.1-flash: 7; zai/glm-5.2: 7). The importer maps labels to provider ids, not native execution telemetry. No per-run native model event or resolved-model proof is committed, so CCMODEL-01 cannot be verified; no model mismatch is inferred.
reasoningfailAll 54 rows have model.reasoning=null. The resolved level is therefore unrecorded, rather than evidence of a vendor default. Current vendor settings default thinking to medium, with model-specific resolution. Standalone can set --thinking; null imported telemetry cannot establish that default for an unknown historical version.
promptnot-verifiableThe current shared staging function constructs one task prompt plus the same workspace guard without a harness branch. The standalone argv adds no system-prompt override. Imported bundles contain neither the delivered prompt/hash nor effective system, project or persona instructions; historical prompt parity is not verifiable.
limitsnot-verifiableCurrent standalone defaults are 3600 seconds, 2 CPUs, 2048 MiB and 256 processes, shared by its four adapters; no per-harness turn or token cap is supplied in their argv. These are benchmark limits, not vendor defaults. Historical fleet descriptors omit timeout, CPU, memory and turn/token limits, and wall_seconds is null. Battery admission budgets do not establish per-run resource parity.
telemetryfailThe current standalone adapter truncates every tool-argument string longer than 2000 characters after parsing, violating whole-record capture. Output-stream overflow is separately rejected before grading. Imported fleet bundles contain no whole tool-call record or completeness proof, so historical OCEXPORT-01 compliance is also unverified; the current adapter defect is not attributed to those historical runs.
transportfailImported proxy configurations record model_transport=openai-compatible-proxy but no gateway version, effective rewrite rules or explicit no-rewriting statement. The required behavior is missing from the recorded configuration; a route type alone does not pass KIMIEMPTY-01.
provenancefailAll 54 records have harness.version=null. Each record does have a config_hash with a matching descriptor, but the CLI version requirement fails. A descriptor hash does not recover the missing native version or the omitted settings.

Harness configurations

A row's configuration hash is the SHA-256 of this canonical JSON descriptor.

hashdescriptor
034ed3a1{"harness":"antigravity","model_transport":"vendor","runner":"agent-os-fleet","worker_class":"gemini"}
3437a9e6{"harness":"codex","model_transport":"openai-compatible-proxy","runner":"agent-os-fleet","worker_class":"oss-codex"}
357da891{"harness":"opencode","model_transport":"openai-compatible-proxy","runner":"agent-os-fleet","worker_class":"oss-opencode"}
b2396403{"harness":"codex","model_transport":"vendor","runner":"agent-os-fleet","worker_class":"codex"}
c32a950b{"harness":"claude-code","model_transport":"vendor","runner":"agent-os-fleet","worker_class":"claude-code"}
cb391ae9{"harness":"codex","model_transport":"openai-compatible-proxy","proxy_fix":"KIMIEMPTY-01","runner":"agent-os-fleet","worker_class":"oss-codex"}
da41c66e{"harness":"pi","model_transport":"openai-compatible-proxy","runner":"agent-os-fleet","worker_class":"oss-pi"}
ecb67e4e{"harness":"claude-code","model_transport":"openai-compatible-proxy","runner":"agent-os-fleet","worker_class":"oss-claude-code"}

Sources

The first results were imported from the eval bench that preceded Paddock, keeping each source's exclusions. Those rows carry no token or wall-time measurements and no harness version, so their tokens and cost read "not measured" and "unknown". Published aggregates with no per-attempt rows are not imported: only rows can be recomputed.

filekindrows source
2026-09-29-ossharn-04-coding-matrix.jsonimport175Open-weight breadth: the coding suite (7 tasks, n=1 per cell) in four open-weight harness configurations x six hosted routes, plus the post-fix rerun of codex x moonshot/kimi-k3 under its own configuration hash. Verifiers stop at the first wrong field and record no partial-credit score.
Evidence: REPORT-ossharn-04-gym-matrix-2026-09-29.raw.json (cell summaries and ledger-sourced per-run verdicts)
2026-09-30-omt-08-local-coding.jsonimport48Local model: the coding suite (12 tasks, n=1) on a self-hosted Qwen3-Coder-Next 80B (6-bit) in the four open-weight harness configurations, after the local backend's tool-call fixes (OMBPARSE-01).
Evidence: REPORT-omt-08-local-80b-gym-rows-2026-09-30.raw.json (per-run verdicts; the superseded first run is not included)
2026-10-06-rfd-calibration.jsonimport262RFD calibration: review, fix and docs suites across frontier and open-weight harness x model combinations, run on the Agent OS fleet at low priority. Comparability gates: docs after GYMDOCS-01, Gemini review after GYMAGY-02, fix-corrupt-refresh-checkpoint after RFDFIX-01.
Evidence: REPORT-rfd-calibration-2026-10-06.raw.json (sanitized per-attempt rows; no submissions or hidden cases)
2026-10-07-hrf-calibration.jsonimport90HRF calibration: hard-review and hard-fix suites on five harness x model combinations (no Claude rows: provider quota was exhausted). Rows the report excluded through its infrastructure list carry infra:source_infra_list.
Evidence: REPORT-hrf-calibration-2026-10-07.raw.json (sanitized per-attempt rows; no submissions or hidden cases)
2026-10-29-eval-bench.jsonimport6964Per-attempt eval-bench gradings with task versions, measured tokens and wall time.
Evidence: REPORT-eval-bench-2026-10-29.raw.json.gz (sanitized per-attempt rows; no submissions or hidden cases)

Reproduce this site

git clone https://github.com/laceyenterprises/agentpaddock
cd agentpaddock
python3 scripts/leaderboard.py validate
python3 scripts/build_site.py

To submit results or a vendor correction, see CONTRIBUTING.