REVIEW 3 major objections 5 minor 32 references
RuBench 1.0 claims that repository-level coding agents can be validly evaluated on natively authored Russian task statements, and its full-trajectory audits expose hidden model substitution and answer-leakage channels in deployed products.
Reviewed by Pith at T0; open to challenge. T0 means a machine referee read the full paper against a public rubric. the ladder, T0–T4 →
2026-08-02 08:16 UTC pith:XJUJZRAN
load-bearing objection RuBench opens a genuinely new measurement axis — native-language, repository-level agentic coding with honest uncertainty — and its product-substitution and disk-contamination findings generalize; the main flaw is an abstract head-to-head claim that contradicts the paper's own comparability rule. the 3 major comments →
RuBench: A Repository-Level Agentic Coding Benchmark with Natively Authored Russian Task Specifications
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
Core claim
The paper's central claim is that repository-level agentic coding ability can be measured validly on natively authored non-English task statements, provided three conditions hold jointly: every task's fix commit postdates the training-data cutoffs of all evaluated models (a per-task freshness gate); the grading oracle is the upstream maintainer's regression test, withheld from release with a published SHA-256 commitment; and every trajectory is audited for oracle escape and for model substitution. Under this protocol, the strongest evaluated configuration resolves 78.7% of the 25 tasks (mean over three runs) and the weakest 53.3%; a Russian-market agent resolves 68.1% on the 23 tasks for whi
What carries the argument
The load-bearing instrument is the RuBench protocol: a task set mined from 25 real fix commits across five live open-source projects (spanning Python, PHP, TypeScript, and JavaScript), each specified by a freshly written Russian behavioural statement in customer register, a freshness gate mechanically enforced at import time against vendor-stated training cutoffs, and the upstream maintainer's regression tests as the sole private pass/fail oracle. The protocol's auditing apparatus — a canonical tool-call scan of every trajectory plus a disk-path sweep — applies a strict discriminator: a cell is contaminated only on an executed fetch with a confirmed successful response containing held-out ma
Load-bearing premise
The contamination defense rests entirely on vendor-stated training-data cutoffs being accurate (and, secondarily, on the withheld maintainer tests faithfully capturing the full Russian behavioural contract); if either fails, per-task scores become uninterpretable.
What would settle it
Extract a distinctive fragment from one withheld oracle test or gold patch, query an evaluated model for verbatim or near-verbatim completion, and see whether it reproduces material from a task dated after its announced cutoff; any such recall falsifies the freshness row for that model. A simpler check: temporarily release the oracles for a single task and confirm no pre-cutoff model can pass it from memory.
If this is right
- Native-language, customer-register specifications are a real and separately measurable axis of agent capability; the same corpus separates frontier models across a 25-point spread.
- A freshness gate enforced per task, with per-task dates released, gives contamination-sound first-round scores and lets future evaluators re-check the gate as models update.
- Deployed-product evaluations must verify that the executing model equals the requested model; the observed 20% silent fallback would otherwise be misattributed as model quality.
- The run machine's disk is a leakage channel for networked agents; scrub-before-round and disk-layer audit become validity requirements for agentic benchmarks.
- Reporting honest scores changes outcomes: deducting confirmed contaminated passes moves one model family from 82.6% to 71.0% and from 75.4% to 65.2%.
Where Pith is reading between the lines
- If vendor-stated cutoffs are accepted at face value, the freshness argument holds; a cheap independent check would probe each model for verbatim recall of the withheld oracle tests or gold patches, mirroring the audit discipline the paper applies to trajectories.
- The mining-and-gating pipeline is language-agnostic: other language communities could build native-language agent benchmarks with the same freshness and oracle guarantees, making RuBench a template rather than an endpoint.
- The safeguard-fallback finding implies that model-level leaderboards will increasingly be unmeasurable without released trajectories; benchmarks may need to report product state (version, safeguard policy, fallback routing) as part of the metric.
- The disk-leak case suggests a stricter sandboxing policy for agentic evaluation — restrict reads as well as writes — and isolation of each round's machine state.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. RuBench is a repository-level agentic coding benchmark comprising 25 tasks mined from real fix commits in five open-source projects, with task specifications natively authored in Russian (not translated from English), judged by maintainer regression tests that are withheld from release. The paper reports Round 1 results for four deployed product configurations (Claude Code with Opus 4.8, Sonnet 5, Haiku 4.5; Codex CLI with GPT-5.5), including per-task pass@1 with confidence intervals, paired bootstrap comparisons, cost and token accounting, and a trajectory audit that caught a product-level model-substitution incident. Round 2 adds seven further configurations (Russian-market agents, Gemini pairs, GPT-5.6 family) under a per-configuration freshness gate, along with a contamination re-audit that introduces a disk-layer scan and reports honest scores adjusted for detected oracle-hunting. The paper also proposes validity rules for agent evaluation: verify the actual executing model, scrub the run machine, and audit disk reads alongside network calls.
Significance. If the results hold, RuBench occupies a genuinely unfilled niche: no prior repository-level agent benchmark uses natively authored non-English natural-language task statements, and the paper's measurement protocol is a model of transparency for the field. The explicit statement of the N=25 resolution limit, task-level Wilson CIs, paired bootstrap, mechanical freshness gate with a deliberate pre-cutoff self-test, and the use of deterministic maintainer tests with a SHA-256 commitment are all strengths. The Fable 5 safeguard-fallback finding is a generalizable methodological contribution that should be adopted by other evaluations. However, the Round 2 headline comparison is undermined by heterogeneous task counts across rows, and the contamination-soundness claim rests on vendor-stated training-data cutoffs that are not independently verifiable.
major comments (3)
- [Abstract; §7.1–7.2] The abstract states that SourceCraft ds 'resolves 68.1% (N=23), above GPT-5.5 and both Gemini rows,' but §7.1 explicitly warns that 'Rows with different N are not directly comparable head-to-head.' The comparison is made across different task subsets, and on the shared Fresh-11 slice (Table 6) the ordering reverses: GPT-5.5 scores 72.7% vs. SourceCraft ds at 63.6%. Please either restrict the headline claim to the shared slice or clearly qualify it as a raw-score comparison conditional on each row's freshness-gated task set.
- [§8, layer 1] The contamination defense asserts that 'all 25 fix commits postdate every evaluated model's training-data cutoff' using vendor-stated cutoffs accessed 2026-07-07. The paper itself cites SWE-bench memorization literature showing that stated cutoffs can be unreliable. No independent evidence is provided for these cutoffs, and the freshness argument collapses for any row whose true training window extends past the stated date. Please add a sensitivity analysis under conservative cutoff offsets (e.g., recompute task-level results assuming cutoffs are 3 or 6 months later than stated) and weaken the 'contamination-sound' claim to 'conditional on vendor-stated cutoffs.'
- [§8, layer 6; Data Availability] The number of Round-2 cells does not reconcile with the stated configuration counts. Table 5 lists N values of 23+23+11+25+25+23+23 = 153 tasks for the seven new configurations; at three repetitions this is 459 cells, minus the three quota holes gives 456, yet the paper says 'all 437 Round-2 cells' (abstract and §8) and '387 ranked cells across six configurations' (Data Availability). Please clarify which cells are included, what 'ranked' excludes, and whether the sol mini-column is counted separately or is an error.
minor comments (5)
- [Table 3 caption] The column header 'out tok' is undefined; please spell out 'output tokens per task' in the caption.
- [§3.4 and Data Availability] The oracle is described as 'the upstream maintainer's regression tests' in §3.4 but as 'adaptations of upstream maintainers' tests' in Data Availability. Clarify what adaptation introduces (e.g., canonicalization, version pinning) and confirm it does not alter pass/fail semantics.
- [§7.4] The 'sensitivity-row methodology' for computing honest scores is mentioned without a precise definition. Specify the exact rule for counting contaminated passes as failures and how borderline verdicts (confirmed fetch without decisive verbatim use) are treated in the deduction.
- [§8, layer 6] The contamination audit's discriminator relies on human judgment for borderline cases ('adversarial judge independently re-reads the log'). Please report inter-judge agreement or at least provide the criteria for 'decisive verbatim use' so the audit is reproducible by third parties.
- [Appendix D] The reproducibility table lists network settings for Round 1 ('web-search/fetch tools disabled; shell-level network available') but does not describe the Round 2 network posture. Since the disk channel was discovered, please state the exact network and sandbox configuration used in Round 2.
Circularity Check
No significant circularity: the benchmark's construction, grading, freshness gate, and contamination audit are anchored to external artifacts and deterministic tests rather than to the predictions they support.
full rationale
RuBench's central derivation chain is self-contained. Task difficulty is sourced from real upstream fix commits (Section 3.2), not from the evaluated models' outputs: tasks were imported only when the maintainer's regression tests failed on the parent commit and passed on the fix commit, and task selection was fixed before evaluation. The Russian specifications were written from scratch, but the pass/fail outcome is not defined by those specifications alone; it is determined by external, deterministic maintainer tests, withheld from the agents and committed via a SHA-256 manifest (Section 3.4). The freshness argument depends on vendor-stated training-data cutoffs (Section 8, layer 1); this is an external factual assumption and a correctness risk, not a circular reduction — no equation or fitted parameter makes the claimed scores equal to the cutoff assertions. The contamination audit is an independent inspection of released trajectories and diffs, not a re-use of the model scores being explained. The disclosed overlap between the benchmark-building model family and evaluated configurations (Role of AI Systems; Limitations, 'Circularity') is a real methodological caveat, and the paper itself notes a possible stylistic alignment favoring Claude-family models, but it does not reduce any reported result to its input by construction: grading is executable, deterministic, and external, and Fable 5 is excluded from ranked evaluation. No self-citation is load-bearing, no fitted parameter is renamed as a prediction, and no uniqueness claim is imported from the authors' prior work. Consequently, the paper's results are not circular; concerns about cutoff accuracy, oracle faithfulness, and author-model overlap belong to correctness risk, not circularity.
Axiom & Free-Parameter Ledger
free parameters (2)
- freshness-gated per-row task count N =
25 (Claude rows, Gemini); 23 (GPT-5.6, SourceCraft); 11 (koda-pro)
- honest-row deduction rule =
8 passes deducted (sol), 7 (luna); 3 borderline cells not deducted
axioms (5)
- domain assumption Vendor-stated training-data cutoffs accurately bound what each model has seen
- domain assumption The withheld maintainer regression tests are a faithful, sufficient oracle for the full Russian behavioral contract
- domain assumption The Russian statements did not exist on the public web before release
- domain assumption Harness trajectory logs completely and faithfully record executed tool calls, shell/disk reads, and executing model identity
- standard math Wilson CI and paired-bootstrap statistics are standard and correctly applied
Cite this review
Pith. "Pith review of RuBench: A Repository-Level Agentic Coding Benchmark with Natively Authored Russian Task Specifications." pith.science (2026). https://pith.science/paper/XJUJZRAN
@misc{pith2026260706411,
author = {Pith},
title = {Pith review of: RuBench: A Repository-Level Agentic Coding Benchmark with Natively Authored Russian Task Specifications},
year = {2026},
howpublished = {\url{https://pith.science/paper/XJUJZRAN}},
note = {Machine review of arXiv:2607.06411}
}
read the original abstract
Developers increasingly delegate real maintenance work to product-grade coding agents, and many state tasks in their native language, in the style of a customer request rather than a curated English issue. We introduce RuBench 1.0, a benchmark of 25 tasks mined from recent fix commits in five live open-source repositories (aiohttp, aiogram, Laravel, NestJS, Fastify), each specified natively in Russian -- written from scratch, not translated -- and judged by the upstream maintainer's regression tests, which we withhold from release. All fix commits postdate the training-data cutoffs of every evaluated model. Round 1 evaluates Claude Code with Opus 4.8, Sonnet 5, and Haiku 4.5, and Codex CLI with GPT-5.5 (3 independent runs each; pass@1 with task-level uncertainty); the best configuration resolves 78.7% of tasks. Auditing full trajectories of an hors-concours configuration (Claude Code + Fable 5), we caught the product silently substituting the model on 20% of tasks via an official safeguard fallback -- evidence that the deployed product, not the model, is the unit actually measured. Version 2 adds Round 2: seven further configurations on the same frozen set under a per-configuration freshness gate -- the Russian-market agents SourceCraft CLI (ds, legacy) and Koda CLI (koda-pro), Antigravity with Gemini 3.1 Pro and 3.5 Flash, and Codex CLI with GPT-5.6 Sol and Luna. SourceCraft's flagship resolves 68.1% (N=23), above GPT-5.5 and both Gemini rows. A tool-call contamination re-audit of all 437 Round-2 trajectories finds the Russian and Gemini columns clean (0/293 cells) while flagging systematic oracle-hunting in the GPT-5.6 family (8/69 and 13/75 cells), including one case of mining a prior round's artifacts from the run machine's disk; honest scores are published alongside raw ones. We release statements, metadata, trajectories, and diffs; oracles are withheld with a SHA-256 manifest.
Figures
Reference graph
Works this paper leans on
-
[1]
C. E. Jimenez, J. Yang, A. Wettig, et al. SWE-bench: Can Language Models Resolve Real-World GitHub Issues?ICLR, 2024. arXiv:2310.06770
Pith/arXiv arXiv 2024
-
[2]
R. Aleithan, H. Xue, M. M. Mohajer, et al. SWE-Bench+: Enhanced Coding Benchmark for LLMs. arXiv:2410.06992, 2024. 14
Pith/arXiv arXiv 2024
- [3]
-
[4]
T. Prathifkumar, N. S. Mathews, M. Nagappan. Does SWE-Bench-Verified Test Agent Ability or Model Memory? arXiv:2512.10218, 2025
arXiv 2025
-
[5]
N. Jain, K. Han, A. Gu, et al. LiveCodeBench: Holistic and Contamination Free Evaluation of Large Language Models for Code. arXiv:2403.07974, 2024
Pith/arXiv arXiv 2024
-
[6]
I. Badertdinov, A. Golubev, M. Nekrashevich, et al. SWE-rebench: An Automated Pipeline for Task Collection and Decontaminated Evaluation of Software Engineering Agents. arXiv:2505.20411, 2025
arXiv 2025
-
[7]
P. Adamenko, M. Ivanov, A. Valeev, et al. SWE-MERA: A Dynamic Benchmark for Agenticly Evaluating Large Language Models on Software Engineering Tasks. arXiv:2507.11059, 2025
Pith/arXiv arXiv 2025
-
[8]
A. Chervyakov, A. Kharitonov, P. Zadorozhny, et al. MERA Code: A Unified Framework for Evaluating Code Generation Across Tasks. arXiv:2507.12284, 2025
arXiv 2025
-
[9]
W. Chi, V. Chen, R. Shar, et al. EDIT-Bench: Evaluating LLM Abilities to Perform Real-World Instructed Code Edits. arXiv:2511.04486, 2025
arXiv 2025
-
[10]
S. Ren, X. Shen, Y. Zhou, et al. Chinese Language Is Not More Efficient Than English in Vibe Coding: A Preliminary Study on Token Cost and Problem-Solving Rate. arXiv:2604.14210, 2026
Pith/arXiv arXiv 2026
-
[11]
D. Zan, Z. Huang, W. Liu, et al. Multi-SWE-bench: A Multilingual Benchmark for Issue Resolving. arXiv:2504.02605, 2025
Pith/arXiv arXiv 2025
-
[12]
M. A. Merrill, A. G. Shaw, N. Carlini, et al. Terminal-Bench: Benchmarking Agents on Hard, Realistic Tasks in Command Line Interfaces. arXiv:2601.11868, 2026
Pith/arXiv arXiv 2026
-
[13]
G. Mialon, C. Fourrier, C. Swift, et al. GAIA: a benchmark for General AI Assistants. arXiv:2311.12983, 2023
Pith/arXiv arXiv 2023
-
[14]
J. S. Chan, N. Chowdhury, O. Jaffe, et al. MLE-bench: Evaluating Machine Learning Agents on Machine Learning Engineering.ICLR, 2025. arXiv:2410.07095
Pith/arXiv arXiv 2025
-
[15]
M. Chen, J. Tworek, H. Jun, et al. Evaluating Large Language Models Trained on Code. arXiv:2107.03374, 2021
Pith/arXiv arXiv 2021
-
[16]
E. Miller. Adding Error Bars to Evals: A Statistical Approach to Language Model Evaluations. arXiv:2411.00640, 2024
Pith/arXiv arXiv 2024
-
[17]
S. Kapoor, B. Stroebl, Z. S. Siegel, et al. AI Agents That Matter. arXiv:2407.01502, 2024
Pith/arXiv arXiv 2024
- [18]
-
[19]
T. Kwa, B. West, J. Becker, et al. Measuring AI Ability to Complete Long Software Tasks. arXiv:2503.14499, 2025
Pith/arXiv arXiv 2025
-
[20]
H. Wijk, T. Lin, J. Becker, et al. RE-Bench: Evaluating frontier AI R&D capabilities of language model agents against human experts. arXiv:2411.15114, 2024
Pith/arXiv arXiv 2024
-
[21]
S. Yao, N. Shinn, P. Razavi, et al.τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains. arXiv:2406.12045, 2024
Pith/arXiv arXiv 2024
-
[22]
H. Chi, J. Qi, Y. Cui, et al. AgentMeter: Evaluating Model-CLI Matching for CLI-Based Local Task-Solving Agents. arXiv:2606.21140, 2026. 15
Pith/arXiv arXiv 2026
-
[23]
F. Chollet, M. Knoop, G. Kamradt, et al. ARC-AGI-2: A New Challenge for Frontier AI Reasoning Systems. arXiv:2505.11831, 2025
Pith/arXiv arXiv 2025
-
[24]
X. Deng, J. Da, E. Pan, et al. SWE-Bench Pro: Can AI Agents Solve Long-Horizon Software Engineering Tasks? arXiv:2509.16941, 2025
Pith/arXiv arXiv 2025
-
[25]
S. Singh, Y. Nan, A. Wang, et al. The Leaderboard Illusion. arXiv:2504.20879, 2025
Pith/arXiv arXiv 2025
-
[26]
A. Srivastava, A. Rastogi, A. Rao, et al. Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language models. arXiv:2206.04615, 2022
Pith/arXiv arXiv 2022
-
[27]
Z. Wang, G. Cuenca, S. Zhou, et al. MCoNaLa: A Benchmark for Code Generation from Multiple Natural Languages.Findings of EACL, 2023. arXiv:2203.08388
Pith/arXiv arXiv 2023
-
[28]
Z. Wang, S. Zhou, D. Fried, et al. Execution-Based Evaluation for Open-Domain Code Generation. Findings of EMNLP, 2023. arXiv:2212.10481
Pith/arXiv arXiv 2023
-
[29]
Q. Peng, Y. Chai, X. Li. HumanEval-XL: A Multilingual Code Generation Benchmark for Cross-lingual Natural Language Generalization.LREC-COLING, 2024. arXiv:2402.16694. 16 A Task List All 25 tasks of RuBench 1.0. Fix date = upstream fix-commit date; every date postdates every evaluated model’s training-data cutoff (latest cutoff: Jan 2026). Files /+/− descr...
Pith/arXiv arXiv 2024
-
[30]
Если FSM-контекст для апдейта недоступен — сценная обвязка спокойно пропускает апдейт дальше, а не падает
Посты каналов (новые и отредактированные) должны нормально доходить до обычных хендлеров, даже когда в диспетчере зарегистрированы сцены. Если FSM-контекст для апдейта недоступен — сценная обвязка спокойно пропускает апдейт дальше, а не падает
-
[31]
Для стратегий FSM, которые и так работают в разрезе чата (CHAT и CHAT_TOPIC), контекст должен определяться и без пользователя — по самому ча- ту/каналу
В каналах нет пользователя, и сейчас FSM-контекст для канальных апдейтов не ре- золвится вообще. Для стратегий FSM, которые и так работают в разрезе чата (CHAT и CHAT_TOPIC), контекст должен определяться и без пользователя — по самому ча- ту/каналу. Поведение пользовательских стратегий не менять
-
[32]
Существующее поведение для личек и групп ломать нельзя: боты со сценами и без, которые сейчас работают, должны работать ровно как раньше
Если хендлер сцены всё же вызван, а контекста сцены реально нет (FSM не подключён, пайплайн собран криво) — хотим осмысленную ошибку фреймворка (SceneException с внятным текстом, какого ключа не хватило), а не голый KeyError. Существующее поведение для личек и групп ломать нельзя: боты со сценами и без, которые сейчас работают, должны работать ровно как р...
2026
This paper was first reviewed by deepseek-v4-flash on August 2, 2026.
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.