Hallucination benchmark — 2026-07-03
Public scorecard, methodology, and raw data for Noesis's measured hallucination rate against a reference methodology from the legal NLP literature.
Head-to-head against the model we wrap
The figure above compares Noesis to published numbers for other systems on another corpus. The more demanding test is against the frontier model Noesis sits on top of, on identical questions, graded by the same judge. We ran it on TruthfulQA (Lin et al. 2021, arXiv:2109.07958), 300 paired questions, zero failed rows.
| Arm | Accuracy | Hallucination rate | Declined |
|---|---|---|---|
| Frontier model alone | 0.843 | 10.6% | 17 |
| Noesis, 4 lineages | 0.817 | 9.6% | 29 |
| Noesis, 1 lineage | 0.763 | 14.2% | 33 |
The difference between Noesis and the model it wraps is not statistically significant — 9.6% against 10.6%, McNemar exact on paired wrong answers p=0.6358. Noesis declines more often (29 against 17) and makes fewer wrong answers in raw count, but neither gap survives the paired test at this sample size.
What is established: going from one model lineage to four improves accuracy (p=0.0402) and reduces wrong answers (p=0.0290), and one lineage inside the full pipeline is significantly worse than the frontier model alone (p=0.0018). The panel is what brings Noesis up to parity. It is not what takes it past.
These three arms are comparable to each other and not to
any published TruthfulQA leaderboard score, which is predominantly
multiple-choice while these are free-text answers graded by an LLM judge.
Method and every paired test: docs/benchmarks/REGISTRY.md,
entry G20.
Per-domain scorecard
| Domain | Verified | Halluc. | Misattr. | Classified n | Halluc. rate | 95% CI |
|---|---|---|---|---|---|---|
| Legal (50 probes) | 163 | 0 | 14 | 177 | 7.9% | [4.8%, 12.8%] |
| Medical (50 probes) | 57 | 1 | 9 | 67 | 14.9% | [8.3%, 25.3%] |
| Overall (100 probes) | 220 | 1 | 23 | 244 | 9.8% | [6.7%, 14.2%] |
"Misattributed" = the cited source exists but doesn't support the specific claim it was cited for. "Hallucinated" = the cited source doesn't exist. Both count against Noesis in the rate, matching Magesh et al. "Unverifiable" citations (14 of 258) are excluded from the denominator, also matching Magesh — not swept under a rug: they're in the raw JSON.
Methodology
Probe set
- 100 probes total — 50 legal + 50 medical.
- Legal probes cover: US Supreme Court doctrine (Miranda, Marbury, Chevron/Loper Bright), federal statute lookup, FRCP procedural rules, agency regulation (SEC, EPA), circuit-split identification.
- Medical probes cover: FDA label indications, contraindications, drug–drug interactions, guideline recommendations (ACC/AHA, ADA, USPSTF), clinical-trial primary-endpoint attribution.
- All probes were curated to have verifiable ground truth (a specific citable source exists). Adversarial red-teaming probes are out of scope for this run — the point is measuring baseline factual grounding on realistic professional queries, not stress-testing edge cases.
Scoring — LLM-as-judge (matching Magesh 2024)
- Each Noesis response was passed to an LLM-as-judge (single call, Sonnet-class) with the same taxonomy Magesh et al. use: verified, hallucinated, misattributed, unverifiable.
- Hallucination rate = (hallucinated + misattributed) / (verified + hallucinated + misattributed). Unverifiable excluded from denominator, exactly as in Magesh.
- 95% confidence intervals are computed using the Wilson score interval for a binomial proportion — the standard choice for rates near 0 or 1 where the normal approximation is unreliable.
- 10 of 100 probes returned no citations at all (the Noesis panel declined to cite a specific source when it wasn't confident). These are counted in
n_probes_no_citationsbut not in the hallucination denominator — they don't help the rate, they just aren't hallucinations.
Honest limitations
- Not human-graded. Magesh 2024 used trained legal-research analysts. We used LLM-as-judge, which is faster and reproducible but has its own failure modes on subtle misattribution. A human-grader replication is on the backlog.
- Not adversarial. The probe set was curated to have verifiable ground truth. It does not attempt to elicit hallucination through trick phrasings, non-existent-precedent traps, or jailbreak vectors. Those live in a separate probe set.
- Not a claim about all queries. This is a measured rate on legal + medical fact-recall probes with citations. It doesn't generalize to conversational queries, opinion, mathematics, coding, or other domains not sampled here.
- Single benchmark run, and run-to-run variance is now measured. Re-running the identical pipeline over the identical 60 items changed the outcome category on 13.3% of them. Pinning sampling temperature to 0 stabilised which lineages answered but left answers differing at 0.56-0.68 pairwise similarity: frontier APIs are not reproducible at temperature 0. The n=100 CI reflects sampling uncertainty only. This variance is additional, and it means differences smaller than roughly 15 points at n=60 are not resolvable.
- The judge is itself an LLM. If the judge and the panel share failure modes, the rate could be biased downward. Magesh 2024 has the same concern for human graders on subtle misattribution; we make it explicit.
The 9.8% above is a citation hallucination rate on legal and medical probes. Through September and October 2026 we measured the architecture against public corpora on answer correctness, and published the results whether or not they favoured us. They largely did not.
- Against a frontier model given the same sources, the layer
matches it rather than beating it. HotpotQA, evidence supplied,
300 paired items, LLM-judged, zero errors in any arm:
The baseline is a current frontier model from a major lab, used through its standard API with the same documents supplied in the same prompt. It is named, with the full configuration, in the benchmark registry.
McNemar, 4 lineages vs the frontier model: 22/26 discordant, p=0.666 — indistinguishable. Wrong-answer counts are identical (14 each; paired error test 12/12, p=1.000). Over 300 turns the panel costs $4.08 more, avoids zero errors, and loses 4 correct answers — 70% more per correct answer.arm accuracy (95% CI) wrong $ per correct answer Frontier model alone 0.860 [0.816, 0.895] 4.7% $0.0233 Noesis, 4 lineages 0.847 [0.802, 0.883] 4.7% $0.0397 Noesis, 1 lineage 0.710 [0.656, 0.758] 5.3% $0.0249 - A hallucination detector can be built, and still cannot carry a gate. Per-claim entailment against the supplied sources scores AUC 0.735 [0.687, 0.774] on RAGTruth (n=300, human span-level labels), beating every cheaper signal we tested. But it was validated at 50% error prevalence and would deploy at ~5%, where positive predictive value falls to 0.133 — roughly six correct answers destroyed per error caught. The binding constraint is prevalence, not tuning.
- Convergence itself is real, and large. One lineage to four moves accuracy 0.710 → 0.847 (n=300, p<0.0001) — the biggest effect we have measured. But it is what reaches parity with a single frontier model, not what passes it: one lineage plus our full pipeline is significantly worse than the frontier model alone (p<0.0001).
What this means: a verification layer needs errors to prevent. When the evidence is already in front of the model, a frontier system errs rarely enough that the layer matches its accuracy rather than improving on it, and an abstention gate at that error rate removes more correct answers than it catches wrong ones. Method, confidence intervals, pre-registered thresholds and the reversals of our own earlier claims are all in the benchmark registry.
Reproducibility
- Raw scorecard:
/data/hallucination_bench_v0_1_judge_n100.json— 100 probe results with per-citation verdicts, judge reasoning, and durations. - Bench harness:
scripts/hallucination_benchmark_v0_1_judge.pyin the Noesis repo. - Probe set source:
scripts/data/hallucination_probes_v0_1.json. - Run environment: Noesis chat handler on Hetzner CX22 production tier, 2026-07-03.
How to read this vs. the reference baselines
| System | Domain | Hallucination | Source |
|---|---|---|---|
| Raw LLMs (GPT-4, Llama 2) | Federal court queries | 58% - 88% | Dahl 2024 arXiv:2401.01301 |
| Foundation LLMs (11 models, median) | Medical hallucination tasks | 23.4% | Kim 2025 arXiv:2503.05777 |
| Lexis+ AI · Westlaw AI-Assisted Research | Legal research | 17% - 33% | Magesh 2024 arXiv:2405.20362 |
| Noesis (this run) | Legal + medical fact-recall probes | 9.8% [6.7%, 14.2%] | This page, 2026-07-03 |
On 177 classified legal citations, Noesis's combined
hallucination + misattribution rate is 7.9%
[4.8%, 12.8%], with
zero outright fabrications — all 14 failures are
misattributions. Magesh et al. reported 17–33% for two retail
legal-research products on their own corpus, using this same
(hallucinated + misattributed) taxonomy.
These two figures are context for each other, not a comparison. Different corpora, different task types (our probes are legal fact-recall; Magesh tested legal research queries), and different graders — ours is an LLM judge, and the human-grader replication listed below is still outstanding. We have not run Noesis on Magesh's corpus, nor those products on ours, so no claim of statistical superiority over them is made here.
What we're publishing next
- Human-grader replication. Re-score a random 20-probe subsample with legal + medical professionals; report agreement rate with the LLM-judge.
- Adversarial probe set. Ship a separate n=50 red-team probe set (non-existent-precedent traps, misleading phrasings, subtle misattribution) and report the rate there too.
- Rolling re-runs. Weekly re-run on the same probe set to catch LLM-provider drift; publish the drift chart alongside this page.
- Per-verifier attribution. Break down which of the 7 verification layers (grounding gate, citation verifier, PubMed/EDGAR/EUR-Lex adapters, HFV, ISP, C3, VigilantAI) caught which class of would-be hallucination.