Risk · R-079 · Model Performance & Reliability

Evaluation contamination and overstated performance

Test data overlaps with training data, or benchmarks do not reflect real use, so reported performance is better than the system will deliver.

Severity
Medium
Audience
Practitioner
Frameworks
Article 15 · MEASURE 1 · MEASURE 2 · Principle 4
Responsible AI domain
Lifecycle stage
Reviewed
2026-11-10

What it is

Evaluation is meant to estimate how a model will perform on cases it has not seen. That estimate is inflated when the test cases were in fact seen during training, when the test set was used repeatedly to tune the model, or when the benchmark measures something easier than the real task. For large pre-trained models the problem is acute: public benchmarks are likely to be in the training data.

How it happens

  • The same records appear in training and test sets.
  • Information from the future, or from the outcome, leaks into the inputs.
  • A model is tuned against the test set until the score improves.
  • A supplier quotes results on public benchmarks the model may have memorised.

Why it matters

Approval, pricing of risk and the choice between models all rest on evaluation results. Overstated results lead to deploying a model that then underperforms, and the gap is discovered only in production.

Warning signs

  • Test performance is markedly better than early production performance.
  • No held-out dataset is reserved for final evaluation.
  • Evaluation data was assembled after the model was built, by the same team.
  • Benchmark scores are the only evidence offered.

Mitigating controls

Primary controls

Independent model validation Detective
Independent validation uses data the developers have not seen. A function independent of the developers tests each model's conceptual soundness, data, performance and limitations before approval and periodically afterwards, to a depth set by the model's tier.

Supporting controls

Evaluation suite and regression testing Detective
Maintains a held-out test set. A maintained set of test cases with expected results is run on every change to model, prompt, data or tools, and the results are compared with the approved baseline.
Staged rollout Preventive
Real-use results expose overstated benchmarks. New AI systems and material changes are released first to a limited population under close monitoring, and extended only when defined criteria are met.

Framework and clause references

FrameworkClauseTitle
EU AI ActArticle 15Accuracy, robustness and cybersecurity Declared accuracy must be real.
NIST AI Risk Management Framework (AI RMF 1.0)MEASURE 1Appropriate methods and metrics are identified and applied Sound metrics.
NIST AI Risk Management Framework (AI RMF 1.0)MEASURE 2Systems are evaluated for trustworthy characteristics Evaluation.
SS1/23: Model Risk Management Principles for BanksPrinciple 4Independent model validation Independent validation.

Sources

EU AI Act: Regulation (EU) 2024/1689 European Union (EUR-Lex) · official text
SS1/23: Model Risk Management Principles for Banks Bank of England PRA · official text

Related terms

How to cite

Axiom Verity (2026). Evaluation contamination and overstated performance. Reference Library, R-079. https://axiom-verity.com/risks/evaluation-contamination-and-overstated-performance. Reviewed 2026-11-10.