Risk · R-079 · Model Performance & Reliability
Evaluation contamination and overstated performance
Test data overlaps with training data, or benchmarks do not reflect real use, so reported performance is better than the system will deliver.
- Severity
- Medium
- Audience
- Practitioner
- Frameworks
- Article 15 · MEASURE 1 · MEASURE 2 · Principle 4
- Responsible AI domain
- Lifecycle stage
- Reviewed
- 2026-11-10
What it is
Evaluation is meant to estimate how a model will perform on cases it has not seen. That estimate is inflated when the test cases were in fact seen during training, when the test set was used repeatedly to tune the model, or when the benchmark measures something easier than the real task. For large pre-trained models the problem is acute: public benchmarks are likely to be in the training data.
How it happens
- The same records appear in training and test sets.
- Information from the future, or from the outcome, leaks into the inputs.
- A model is tuned against the test set until the score improves.
- A supplier quotes results on public benchmarks the model may have memorised.
Why it matters
Approval, pricing of risk and the choice between models all rest on evaluation results. Overstated results lead to deploying a model that then underperforms, and the gap is discovered only in production.
Warning signs
- Test performance is markedly better than early production performance.
- No held-out dataset is reserved for final evaluation.
- Evaluation data was assembled after the model was built, by the same team.
- Benchmark scores are the only evidence offered.
Mitigating controls
Primary controls
- Independent model validation Detective
- Independent validation uses data the developers have not seen. A function independent of the developers tests each model's conceptual soundness, data, performance and limitations before approval and periodically afterwards, to a depth set by the model's tier.
Supporting controls
- Evaluation suite and regression testing Detective
- Maintains a held-out test set. A maintained set of test cases with expected results is run on every change to model, prompt, data or tools, and the results are compared with the approved baseline.
- Staged rollout Preventive
- Real-use results expose overstated benchmarks. New AI systems and material changes are released first to a limited population under close monitoring, and extended only when defined criteria are met.
Framework and clause references
| Framework | Clause | Title |
|---|---|---|
| EU AI Act | Article 15 | Accuracy, robustness and cybersecurity Declared accuracy must be real. |
| NIST AI Risk Management Framework (AI RMF 1.0) | MEASURE 1 | Appropriate methods and metrics are identified and applied Sound metrics. |
| NIST AI Risk Management Framework (AI RMF 1.0) | MEASURE 2 | Systems are evaluated for trustworthy characteristics Evaluation. |
| SS1/23: Model Risk Management Principles for Banks | Principle 4 | Independent model validation Independent validation. |
Sources
- EU AI Act: Regulation (EU) 2024/1689 European Union (EUR-Lex) · official text
- SS1/23: Model Risk Management Principles for Banks Bank of England PRA · official text
- NIST AI Risk Management Framework (AI RMF 1.0) NIST · framework
Related terms
How to cite
Axiom Verity (2026). Evaluation contamination and overstated performance. Reference Library, R-079. https://axiom-verity.com/risks/evaluation-contamination-and-overstated-performance. Reviewed 2026-11-10.
Found an error or a better source? Report a correction.