Your Judge Is a Model, Not an Oracle
An LLM judge is an untested classifier until it has been scored against a human-labeled golden set; because a systematically wrong judge produces stable, low-variance scores, metric consistency is actively misleading evidence of correctness and calibration must precede gating.
AngleTreat the judge as the system under test: per-class agreement, degenerate-predictor detection, and the XML-delimiter flip as a case study in silent total failure.
Source video ↗Stop Paying an LLM to Check Your JSON
Most eval suites route assertions to the wrong mechanism; partitioning by decidability — deterministic checks first, judges only on outputs that survive — cuts suite cost and runtime by orders of magnitude while increasing semantic coverage where it actually matters.
AngleBuild the eval suite as a test pyramid with an explicit routing rule per assertion, and show where exact matching silently misgrades semantic quality.
Source video ↗The Prompt Diff Is the Release Gate
Once eval prompts are versioned like code and acceptance metrics gate CI, the hardest remaining problem is statistical rather than editorial: non-deterministic scores plus a small golden set make every threshold a choice between flaky builds and undetected regressions.
AngleFrame CI gating as a statistical policy decision — repeated runs, pass@k versus pass^k, threshold selection — and treat golden-dataset refresh as roadmap-critical maintenance.
Source video ↗Depth in Layers, Not Accuracy in One Metric
For open-ended agent failure surfaces, coverage comes from heterogeneous detectors with uncorrelated blind spots — automated evals, human review, production monitoring — not from optimizing a single eval to exhaustion.
AngleReframe the design question from 'how do we write a good eval' to 'what does each layer catch that the others don't', and justify paying for redundant coverage.
Source video ↗Judge Certifier
beyond-evalsFor a given judge and task, precision/recall estimated from a human-labeled golden set of N examples converges tightly enough at a specific N to support a build gate, and a constant-label judge will be detected by per-class agreement even though its run-to-run variance is near zero.
Proof of conceptTake 100 traces from a real agent, hand-label them, then sweep golden-set size (10, 20, 40, 80) and measure variance in judge precision/recall estimates. Include a deliberately degenerate judge that always returns 'pass' as a control to confirm the variance-based heuristic misses it while per-class agreement flags it.
MeasurementConfidence-interval width on precision/recall versus golden-set size; detection rate of the constant-label control judge; false-certification rate at each set size.
Source video ↗Judge Perturbation Fuzzer
beyond-evalsNon-semantic perturbations to a judge prompt (delimiter style, few-shot ordering, few-shot count, whitespace) cause classification flips on a labeled golden set at a measurable rate, and that flip rate varies more across perturbations than across repeated runs of a single prompt.
Proof of conceptGenerate a matrix of judge-prompt variants around one task, run each against a fixed labeled set, and score agreement with human labels. Report per-perturbation deltas to rank which formatting dimensions are the real regression surface.
MeasurementPer-perturbation accuracy delta and flip rate versus human labels; ratio of perturbation-induced variance to sampling variance across repeated identical runs.
Source video ↗Gate Policy Bench
gatehouseFor the same agent and golden set, pass^k with a moderate threshold strictly dominates single-run scoring on regression escape rate per CI dollar, and the dominant cost driver is repeated sampling rather than judge pricing.
Proof of conceptInject a known set of quality regressions into an agent, then run three gate configurations — single-run threshold, pass@k, pass^k — in CI against the same golden dataset and record which regressions each gate catches and which good builds it blocks.
MeasurementFalse-alarm rate, regression escape rate, CI wall-clock time, and API spend per gate configuration per injected regression.
Source video ↗Agent Trace Triage
newA coding agent reading structured OpenInference spans agrees with human reviewers on labeled traces at a rate high enough to substitute for manual transcript reading, but exhibits a measurable rate of confidently wrong diagnoses that must be reported rather than hidden.
Proof of conceptAssemble a labeled trace set containing known-bad and known-good agent runs, have both a human reviewer and an agent-driven triage harness diagnose each trace, and compare diagnoses against the ground-truth labels.
MeasurementDetection rate on known-bad traces, false-positive rate on good traces, confident-but-wrong diagnosis rate, and cost per trace compared to human review time.
Source video ↗