Benchmark Review

WeirdML v2

Reviewed: Aug. 10, 2026

Benchmark creator: Håvard Tveit Ihle

Verdict: Verified

WeirdML v2 does a good job of measuring whether a model can write PyTorch code to solve an unfamiliar, well-specified ML problem under a fixed compute budget in a non-agentic setting.1

The tasks were designed to be novel and require careful thinking. Public tasks include shape recognition, digit classification, other image tasks, and predicting chess game outcomes. The benchmark claims to test four capabilities: understanding, implementation, feedback use, and compute efficiency. However, the leaderboard most directly measures implementation. 13 of the 17 tasks are hidden and a majority of the datasets are novel, making this a contamination-resistant benchmark. The capability-cost frontier is highlighted, and includes cost, token, code-length, execution-time, and longitudinal analyses. Repeated runs with published uncertainty make the leaderboard’s statistical noise unusually visible.

Interpretation

WeirdML tests rapid ML engineering on a novel problem formulation, executed under a 120-second, single-GPU compute ceiling, with feedback across five attempts, scored on the best attempt. The benchmark uses an unusual non-agentic setting, and separate analysis of two models showed significant score increases with a conventional agentic setup. A high scorer can be trusted to: understand a stated data/problem description, select and implement a reasonable PyTorch architecture, and achieve high accuracy under a tight and disclosed compute budget with multiple attempts for a problem type whose exact formulation it hasn’t seen before. The benchmark does not assess whether this capability extends to general adaptive ML engineering on unfamiliar problems and datasets.

Potential confounds

  • Best-of-five scoring: Score reflects the best of five attempts, not a solution the model committed to as being the best. This inflates the score relative to any deployment where a model must commit to one answer.
  • Ambiguous system prompt: The system prompt is ambiguous, stating “you have several iterations” instead of clarifying that the limit is five. This biases results against models that assume they will have more time to explore. The behavior is most common in the undisclosed task “number_patterns”.

Task Analysis

We were able to inspect all prompts and data for all 192 of the tasks (including those that are normally kept private). The prompt and a small subset of the training data are publicly available for the four disclosed tasks3. The remaining 13 tasks are identified only by name (e.g. Splash Hard). Our review will focus on the public tasks, with any findings in the private set kept abstract to minimize contamination risk.

‘Weird’ primarily describes the task formulations rather than the underlying ML methods. The four disclosed tasks are largely bespoke versions of familiar ML problem classes:

  • Shapes (Easy/Hard) is permutation-invariant classification over point sets
  • Digits is semi-supervised classification with class imbalance
  • Chess predicts game outcomes from real game move sequences (beginners with Elo <1300)

Hard variants mainly remove shortcuts rather than adding conceptual novelty. The datasets used are a mixture of known and novel, not exclusively novel as described by the benchmark. Some disclosed tasks (e.g., Shapes Easy) are saturated among frontier models.

Performance Ceilings/Floors

  • Task ceiling: The known per-task upper bound is 94.78% (the average, over the 17 tasks, of the best score any model has ever achieved on each task). We estimate the per task ceiling ranges from 80% to 100% across the 17 tasks, with an average of around 95%.
  • Task floors:
    • Shapes (Easy/Hard/Variable) = 20%
    • Chess = 50%
    • Digits Unsupervised = 16.7% uniform, though class imbalance could make a majority-class guess stronger4
    • Kolmogorov Shuffle = 20%
    • Classify Sentences = 10%
    • Classify Shuffled = 20%
    • Insert Patches = 8%
    • Blunders (Easy/Hard) = 20%
    • Digits Generalize = 10%
    • XOR (Easy/Hard) = 10%
    • Splash (Easy/Hard) = 10%
    • Number Patterns = 20%
  • Human baseline: None.

Elicitation and Scaffolding

  • Coverage: 152 models present in the public results file at time of review; updated regularly with new models.
  • Elicitation setup: 5 submissions per run; model receives terminal output + evaluation feedback after each of the first 4 submissions; each submission executes in a Docker container on a fixed TITAN V GPU (12GB) with a 120-second timeout (down from 600s in v1); ~5 runs/model in v2 (only 2 for several expensive models), vs. 15 runs/model in v1 (5 for o1-preview). Approximate run cost is tracked.
  • Scaffold variants: The standard leaderboard uses one shared scaffold. A separate Agentic WeirdML experiment is the only scaffold variant discussed. In it, GPT-5.5 and Claude Opus 4.7 were evaluated using codex_cli and claude_code, respectively, inside the Inspect AI framework in a Docker sandbox with no internet access and a budget of 20M total tokens per task. The scaffold improved performance compared to the non-agentic baseline: Claude Opus 4.7 improved from 76.4% to 87.9% and GPT-5.5 went from 84.9% to 88.3%.

Limitations

The write-up describes 6 public tasks and 13 new tasks, but scoring covers 17 tasks. Shuffle (Easy/Hard), which are image-patch jigsaw/permutation tasks on Fashion-MNIST/Imagenette, were dropped due to prompt issues, as described on X5.

Shuffle Easy, which was dropped due to prompt issues, has a documented shortcut: individual patches often reveal their position without solving the intended cross-patch reasoning problem. Of the hidden tasks, two have known shortcuts, which GPT 6 Astra (max) is able to exploit6.

In the agentic experiment, frontier models discovered they could train outside the timed grading harness entirely and submit only pre-computed weights for inference within the 120-second window. This complicates cross-model comparison in that setting, but does not affect the standard (non-agentic) leaderboard.

Two of the four stated goals of the benchmark are not explicitly tested:

  • “Understanding the data” (Goal 1) is not separately measured; several disclosed tasks (Shapes Hard, Shuffle Hard, Digits) explicitly tell the model the properties it is nominally supposed to discover, so the score partly tests acting on stated properties rather than independent discovery. A subset of tasks are prone to shortcuts or generic solutions that achieve reasonable results without a deep understanding of the data.
  • “Improve from feedback” (Goal 3) is not separately measured; because the final score is the best of five submissions, additional attempts can improve scores even without using feedback. The removal of v1’s max@k decomposition means the benchmark cannot quantify how much improvement comes from feedback versus variation across independent attempts.

Additional Results

Our analysis of the public results found a correlation of r=0.88 between log median submission execution time and accuracy across the 17 tasks. The correlation is ambiguous since we can’t distinguish between more accurate models using more compute and more accurate models calibrating their budget to the available compute.7

Scatter plot titled “Models whose code runs longer score higher on WeirdML v2”: mean accuracy across 17 tasks vs. median execution time of submitted code (log scale, capped at 120 seconds), one point per model configuration (n = 152), r = 0.88.

Rubric

1. Reviewability

LevelMeaningStatus
FullAll tasks and scoring logic inspectable*, and harness/API settings used for each model (reasoning effort, token/time limits, tool access, system prompts) are fully disclosed [proceed to 2]
PartialA representative sample of tasks and scoring logic inspectable, with full harness/API settings disclosed [proceed to 2]
InadequateLimited, biased, or no inspectable tasks or scoring logic, harness/API settings undisclosed [stop → NEI]

* Either publicly or privately to reviewers.

2. Scoring

This is the minimum standard required to be Verified; failing any of these items results in a Flawed verdict.

Scoring
Examples
  • Essentially impossible to correctly answer as written (e.g. underspecified task, hidden requirement, missing file/tool)
  • False Negative (e.g. overly strict scorer, stale/incorrect ground truth, dependent on live external state that can drift, sandbox failure independent of the agent)
  • False Positive (e.g. lax scorer, reward-hackable environment, stated skill can be bypassed via a shortcut such as exploiting an error in the scoring logic or retrieving the answer from the harness/web)
  • Task egregiously doesn’t measure the claimed capability
Default threshold for Flawed≥20% of inspected sample† contains errors or there is an issue that corrupts grading at scale
Status
Pass Flag [stop → Flawed] Not reviewed
Notes
Benchmark Consistency
Examples
  • Scorer, instructions, or ground truth changed without a version bump
Default threshold for FlawedLeaderboard has incomparable results from different versions
Status
Pass Flag [stop → Flawed] Not reviewed
Notes
Elicitation
Examples

Model elicitation is extremely constraining and is not the focus of the benchmark:

  • Under-resourced relative to task size (token/turn/time limit, sandbox resources)
  • Poor context management
  • Lack of agentic environment where it would be natural to provide one
  • Excessive non-voluntary termination for agentic benchmarks
Default threshold for FlawedSubstantially reduced performance compared to reasonable alternatives for the tasks
Status
Pass Flag [stop → Flawed] Not reviewed
Notes
Bias in Evaluation Setup
Examples
  • Uneven compute/token budgets
  • Unfair scaffold choice (e.g. only a subset of models optimized)
Default threshold for FlawedMaterial model-specific advantage found
Status
Pass Flag [stop → Flawed] Not reviewed
Notes

† For benchmarks with >50 available tasks, we will sample a random set of 50 (stratified by category, when present). If the observed error rate is 15–25%, we will expand the sample to 100. For benchmarks with ≤50 available tasks, all available tasks will be assessed.

3. Evaluation Quality

This is the standard we would like all benchmarks to meet, but it is not necessarily disqualifying to omit or fail these items.

QuestionStatusNotes
Elicitation and resource adequacy: Are the resources given to models (reasoning token/turn budget, tool access, etc.) sufficient for them to perform near their ceiling?
Sufficient Constraining Unreasonably constraining Unknown Not reviewed
Scaffold fairness: What scaffold does the leaderboard report?
Shared common scaffold Mix of model-specific and common scaffolds Model-specific scaffolds Not reviewed
See “Scaffold variants” in the Elicitation and Scaffolding section.
Is there evidence/risk of contamination?
As of Aug. 10, 2026: 23.5% of tasks public, 0% of solutions public Not reviewed
Has human completability been assessed?
All tasks Representative set of tasks Poor implementation (Unrepresentative set of tasks, unreasonable set of participants) Not established Not reviewed
Score range (if possible to estimate)
8-50% floor, 80-100% ceiling Not reviewed
Statistical adequacy: how many runs/model (≥ 5 recommended for error bars)
5* runs/model Unknown Not reviewed
*Due to the high cost, o3-pro, Claude-4-opus, and Gpt-4.5 only had 2 runs/task
Construct Validity
Measures stated capabilities Partially measures stated capabilities Does not measure stated capabilities Not reviewed
See the Limitations section.

Disclaimer

The developer declined to respond.

Notes
  1. This review was written prior to 8/10/2026, with later minor edits. After it was written, Epoch AI hired Håvard Tveit Ihle, the benchmark creator. Return

  2. The 19 tasks include the 17 tasks on the leaderboard and Shuffle Easy/Hard, which were dropped for prompt issues. Return

  3. 8/1,000 samples for Shapes Easy/Hard; 3/1,000 samples for Shuffle Easy/Hard; 8/1,000 samples for Chess; 6/15,962 samples for Digits Return

  4. Format-exploitable floor: Because scoring keeps the best of five submissions, an unskilled strategy submitting several different uniform guesses can outperform naive random chance; the effective floor exceeds the naive floor by an unquantified (from public info) margin. Return

  5. https://x.com/htihle/status/1991136135586693335?s=20 Return

  6. https://x.com/htihle/status/2097608212228772023?s=20 Return

  7. It’s interesting to note that v2 lowered the execution time cap from 600 seconds to 120 seconds. Return

About Benchmark Reviews

Epoch AI’s Benchmark Reviews are independent reviews of external AI benchmarks. Our documentation describes the rubric behind this verdict, how we choose which benchmarks to review, and answers frequently asked questions.

View benchmarkRead the documentation and FAQs