All posts
ResearchEngineering9 min readApril 9, 2026

Evaluating Systems That Act in the Real World

RAI

Robert Anspach III

Co-Founder & Researcher

Evaluating Systems That Act in the Real World

A benchmark score tells you how a model does on a fixed test. It tells you almost nothing about how a system will behave inside a live operation. Here is how we think about evaluation when the output is an action, not an answer.

Benchmarks are useful for what they measure: how a model performs on a fixed, known distribution of inputs with a clear notion of correct. The trouble starts when a benchmark score is read as a prediction of how a system will behave once it is embedded in a real operation, deciding things and sometimes acting on them. Those are different questions, and the gap between them is where a lot of confident systems quietly fail.

A Score Is Not a Behavior

A model can score well on a reasoning benchmark and still be the wrong component for an operation, because the benchmark holds constant everything that makes the real setting hard. Real inputs are noisy and out of distribution. The cost of different errors is not symmetric. The same wrong answer can be harmless in one context and expensive in another. None of that is captured by a single aggregate number on a curated test set.

When we evaluate a system that is going to live inside an operation, the question is not "how accurate is the model" but "what is the distribution of outcomes when this system meets the real inputs it will actually see, including the rare ones that matter most." Those are not the same measurement, and treating them as if they were is the most common evaluation mistake we see.

Evaluate the System, Not the Model

The model is one component. The system is the model plus its tools, its retrieval, its validation, its retries, its escalation paths, and the boundary that says what it is allowed to do on its own. A weak model inside a well-designed system can be more reliable than a strong model wired up naively, because most production failures happen at the seams, not inside the model.

So we evaluate the whole loop. When a tool returns garbage, does the system recover or propagate it? When the model picks the wrong action, does validation catch it before anything happens? When confidence is low, does the system escalate or guess? A benchmark cannot ask any of those questions, because a benchmark has no tools, no seams, and no consequences.

Weight Errors by What They Cost

In an operation, not all errors are equal. A system that misses a real fault and a system that raises a false one have failed in completely different ways, and the operation cares about the difference enormously. Evaluation that collapses both into a single accuracy figure throws away the most important information.

The right question is rarely "how often is it right." It is "when it is wrong, how wrong, how recoverable, and who finds out." An evaluation that cannot answer that is not measuring the thing the operation cares about.

We build evaluation sets that are weighted toward the cases that carry real cost, including the rare and ambiguous ones, precisely because those are underrepresented in any naturally collected dataset and overrepresented in the incidents that actually hurt.

The Hardest Part: Acting

Evaluating a system that answers is hard. Evaluating one that acts is harder, because the action changes the world and you cannot always replay it. A wrong sentence can be retracted. A diverted unit or a triggered control action cannot. So part of our evaluation is not about accuracy at all. It is about the guardrails: can the system act only where its confidence justifies it, escalate cleanly where it does not, and produce a verifiable record of every action so a person can stand behind it after the fact.

That last property, verifiability, is itself something we evaluate. A system that takes the right action but cannot explain what it did has failed an operation's real requirement, even if its accuracy is perfect, because the people responsible for the operation cannot account for it.

What We Actually Trust

We do not trust a system because it scored well. We trust it because we have watched its full distribution of behavior on real inputs, weighted by what the errors cost, with the action boundary and the audit trail evaluated alongside the accuracy. A number on a benchmark is where evaluation starts. For a system that is going to act in the real world, it is nowhere near where it ends.

Keep reading the work.

This is one of a series of field notes and essays on building systems that understand and act in real operations. Nexus is where the ideas get tested.