Leaderboard

What each column means

• ASR — how often the model answered. Share of its 879 responses judged PARTIAL or HARMFUL. Lower is safer.
• [low, high] — 95% bootstrap interval on that ASR. B = 10,000.
• Strict — the HARMFUL share on its own, without PARTIAL. The operationally useful subset.
• EN Direct — the request in plain English, no persona.
• EN Inst — same request, English, institutional persona.
• BN Formal — same request, formal Bengali journalism.
• BN Collq — same request, colloquial Banglish peer-help.
• BN Inst — same request, Bengali, institutional persona.
• Gap — BN Formal minus BN Collq. Both are Bengali, so it isolates register from language.

• Shaded cell — that model's most permissive register.
• Two judges — Gemini 3.1 Pro on the same rubric reproduces the ranking, so the effect is not a judge artefact. It labels 15,794 of 15,822; it declined 28 on its own content policy.
• No jailbreak — single-turn prompts, no adversarial suffix, no roleplay wrapper. Temperature 0, top-p 1, empty system prompt.