A system that answers a question only when it can certify the answer, and otherwise returns an honest miss, is not a competitor on a benchmark. It is an auditor of one. Run across the text-only portion of Humanity’s Last Exam (Phan et al., 2025), deriving every answer before the key is read, it certified 43 answers. Of these, 41 reached an auditable key verdict: 36 confirm their keys and 5 convict them. The remaining 2 certificates are retained here as certified-but-unclassified: this paper does not carry a visible key verdict for either, so both are excluded from the audit result rather than classified on credit. No banked conviction was withdrawn; one separate pre-banking flag was retracted after re-derivation located a sign error in the system rather than in the key. The five convictions are set out with their diagnoses. Certificate coverage is 1.8%; auditable-verdict coverage is 1.7%. Both figures use the same 2,370-question text-only snapshot. Neither is a result about how much the system can answer; the result is what certified answering makes visible when it is pointed at the key rather than at the score.
This is arithmetic and not an accusation, and stating it first prevents the rest reading as one.
A benchmark of some 2,500 research-grade questions is authored at the pointy end of every field it covers, which is exactly where its reviewers stand at the edge of their own knowledge. At any plausible post-review error rate the expected number of wrong keys exceeds one. The instrument built to test reasoning is bound by the same arithmetic of error rates as everything else, and a benchmark with no wrong keys would be the surprising object, not this.
What follows is therefore not a complaint about the benchmark, which is a serious piece of work whose difficulty is the reason it is useful here. It is an argument that a certain kind of answering system is the right instrument for finding the errors any such benchmark must have.
The system, and the standing of what is claimed. The system is the substrate described in Graphic Equalisation, run with its general faculties: no per-question code, no answers baked in, and nothing added to it for this benchmark. The derivations, the certificates, and the running dossier they are recorded in are this programme’s own pre-registered implementation record, which is likewise not circulated with these papers, and it is a claim a reader may decline to credit on exactly the terms Graphic Equalisation’s Section 1 sets out. What is different here, and it is the reason this paper can be short, is that the five diagnoses below are stated fully enough to be re-derived from this page: a kernel rank, a sudden-approximation argument, a basis-function count, the parity of a theorem, and a grammar with its enumeration. A reader who declines to credit the record entirely can still check every conviction drawn from it.
What was audited. The public split of Humanity’s Last Exam (Phan et al., 2025), which the benchmark’s own paper gives as 2,500 questions and which is accompanied by a private held-out set not touched here. The run covered the text-only portion of that split, which numbered 2,370 questions in the snapshot audited. That count is this programme’s own count of the snapshot and not a figure the benchmark publishes: the benchmark states that around 14% of its questions require an image, which would put the text-only portion lower. The dataset revision is not recorded in the dossier, and the public dataset repository has been modified since the run, so nothing here establishes that these five keys stand in the current revision — a conviction against a since-corrected key is a different finding from one against a standing key, and this paper cannot tell a reader which of the two it holds. Each conviction below carries the benchmark’s own public identifier for the question, so the question and its key can be located directly.
The arrangement. The system answers only where it can derive the answer under an independent certificate — a second derivation by a structurally different route, a held-exact computation, or a conservation or limiting case forced by the stem. Where it cannot, it returns a miss. The key is read only afterwards, and only to compare.
That ordering is what makes the arrangement an audit. Every certificate for which the audited snapshot and key state are retained puts one key on trial and returns one of two verdicts: it confirms the key, or it convicts it. The two certified-but-unclassified answers reported in the abstract are not counted as either verdict. A conviction is banked only when the derivation is certified sound, the key’s error is demonstrable, and no reading of the stem rescues the key — the last checked adversarially, by trying to rescue it.
Remark 2.1 (Zero false accusations is the whole of the value). An audit claiming three convictions with airtight proofs of each is worth more than one claiming thirty. The discipline is therefore asymmetric on purpose: a disagreement is not a conviction, and a sound-but-rescuable disagreement is recorded and not banked (Section 4).
The system also retracts against itself. One earlier physics flag was withdrawn when re-derivation located a sign error in the system rather than in the key. An auditor that has never withdrawn anything has not been audited, and the withdrawal is reported here for that reason rather than omitted as untidy.
Each is stated as: what the key says, what was certified, and where the key’s reasoning goes wrong. The diagnosis matters more than the disagreement — a conviction that cannot say why the key is wrong is only a second opinion.
Mathematics — rank of a Hurewicz kernel (66f407a066abc59ffb9a82ae; key 28, certified 95). For Y = X1#X2#X3 with π1(Y ) = ℤ∕5 ∗ℤ∕8 ∗ℤ∕2, the kernel of abelianisation is free by Kurosh, and its rank is 95 by three independent routes: an orbifold Euler characteristic (χ(K) = 80 ⋅ (−47∕40) = −94, rank = 1 − χ(K)), a Schreier deficiency count, and an explicit degree-80 cover (V = 80, E = 240, F = 66). The key computed ∏ (ni − 1) = 28, which is the correct kernel rank only for two free factors — verified against [5,8] → 28, and against a divergent control [2,2,2] where the construction gives the correct 5 and the key’s formula gives 1.
Physics — sudden expansion of an infinite well (671cb3074d6192736975115b; key 4.03%, certified 0%). The ground state of a well of width L with the right wall moved instantaneously to 3L. Under a sudden change the state vector does not have time to evolve, so the expectation of the energy is unchanged. A decrease of 4.03% requires ⟨E⟩ to change, which the word “instantaneous” in the stem forbids.
Chemistry — contracted basis functions for toluene, 6-31G (67213cb9043b1e724244a1c6; key 54, certified 79). The item is filed in the benchmark under Physics. Counting per atom under 6-31G gives 9 for carbon and 2 for hydrogen, so 7 ⋅ 9 + 8 ⋅ 2 = 79. The key’s 54 corresponds to no coherent count — it matches none of the standard countings of the same basis.
Mathematics — domino tilings of an Aztec diamond (6724eed8b60e229bf3eecbbf; key 6, certified 8). The tiling count of an Aztec diamond of order n is 2n(n+1)∕2 (Elkies et al., 1992), so it is a power of two for every n: 2, 8, 64, 1024, and so on. Six is not a power of two. The certified answer of 8 is the order-two count, obtained by two independent routes. This is the cleanest of the five, because refuting the key requires only the parity of a theorem and no recomputation of the question at all.
Computer science — true boolean expressions of length five (66ebb1e8709fbb756c1f7b74; key 44, certified 47). Alone among the five this one is not checkable without its grammar, so the grammar is given. Terminals are quoted and ∣ separates alternatives; E is the start symbol.
| Σ | = | T F ! & | ( ) |
| E | → | E ’|’ A ∣ A |
| A | → | A ’&’ U ∣ U |
| U | → | ’!’ U ∣ ’(’ E ’)’ ∣ ’T’ ∣ ’F’ |
That is: & binds tighter than |, ! is prefix, and both binary operators associate to the left — the standard convention, and the only structural freedom is which of the two binary operators binds tighter. Two structurally independent routes over it — filtering all 75 strings through a recursive-descent parser, and generating bottom-up from the productions — both yield 90 valid expressions of length five, of which 47 are true, on the identical string set. The key is self-refuting: the setter’s own enumeration of its 44 includes two expressions that evaluate to false while filed as true, and omits five genuinely true expressions of equal standing.
| Expression | Value | In the key’s enumeration |
| !(!F) | false | listed as true |
| (!!F) | false | listed as true |
| !!(T) | true | omitted |
| !!F|T | true | omitted |
| !(!T) | true | omitted |
| (!!T) | true | omitted |
| T|!!F | true | omitted |
so that 44 = 47 − 5 + 2, which is a hand-enumeration error and not a different convention. The enumeration retains both redundant parentheses — ((T)) — and repeated negation — !!!!T — so no consistent grammar excludes what it excludes, and no precedence convention yields 44: the standard one gives 47, and the opposite one — | binding tighter than & — gives 43 over the same 90 valid strings.
Six further questions produced a sound internal value disagreeing with the key, and none was banked, because in each case a reading of the stem rescues the key. These are the cases that make the five above worth anything.
They include an underdetermined projectile problem where the explosion energy is unspecified, a liquid-mirror exponent that is regime-dependent on an unstated rest depth, an α-range question reproducible under one range law but not the textbook one, and two convention- or rounding-dependent values.
The sharpest is a graph-theoretic fixed-point count where an exhaustive search over the standard atlas finds seven against the key’s six, and the sole difference is the single-vertex graph K1 — which is connected, and is a fixed point, and which the setter’s own code excludes by filtering degree-zero vertices. That exclusion is defensible, so no conviction was recorded, even though the literal reading of the stem gives seven. An audit willing to accuse here would be worth less everywhere.
Coverage is 43 questions of 2,370, which is 1.8%. The system declines the overwhelming majority of the benchmark, and nothing here should be read as a claim about how much of it can be answered. A benchmark score and a certified audit are different measurements and the second is not a weak version of the first.
Nor is any of it a claim about the reasoning of systems in general. The faculties are general rather than per-question — no hand-coding, no answer-baking, no reverse-engineering from keys — but the sample that reaches certification is selected precisely by being certifiable, which is a strong and non-random condition. The right reading is that certified coverage doubles as audit at no additional cost, and the audit is what is reported.
Each commitment below is marked [shape] or [detail], in the sense of Graphic Equalisation’s Section 19. A [detail] failing is a revision: the account survives with that mechanism replaced. A [shape] failing costs range rather than a mechanism, because what fails is something the substrate is claimed to require or to permit — so the account does not hold where it claimed to, which is the more serious of the two and is still a boundary rather than an annihilation.
Scope note (not a falsifier). Coverage is not the claim. This paper commits to the negative: no statement about benchmark performance is made or implied, and a reader who extracts one has found an error rather than a result.
Noam Elkies, Greg Kuperberg, Michael Larsen, and James Propp. Alternating-sign matrices and domino tilings, Parts I and II. Journal of Algebraic Combinatorics, 1(2):111–132 and 1(3):219–234, 1992. The tiling formula is proved across both parts.
Long Phan, Alice Gatti, Ziwen Han, Nathaniel Li, Josephina Hu, et al. Humanity’s Last Exam. arXiv:2501.14249, 2025 (v1, 6 September 2026; v11, 6 September 2026). Dataset (public split, 2,500 questions): https://huggingface.co/datasets/cais/hle; that repository’s last recorded modification is 6 September 2026.