<svg viewBox="0 0 1200 560" xmlns="http://www.w3.org/2000/svg" font-family="-apple-system, 'Segoe UI', Helvetica, Arial, sans-serif">
<rect width="1200" height="560" fill="#ffffff"/>
<text x="60" y="56" font-size="28" font-weight="700" fill="#0f172a">Most measured over-refusal is the benchmark, not the model</text>
<text x="60" y="88" font-size="17" fill="#475569">Refusals on the 200 OR-Bench hard prompts as published, and on the 77 of them that 2 auditors called benign.</text>
<text x="60" y="110" font-size="17" fill="#475569">The other 123 are ambiguous, or a harmful request wrapped in a legitimizing frame.</text>
<rect x="60" y="132" width="14" height="14" rx="3" fill="#cbd5e1"/><text x="82" y="144" font-size="15" fill="#475569">published hard set</text>
<rect x="250" y="132" width="14" height="14" rx="3" fill="#0f172a"/><text x="272" y="144" font-size="15" fill="#475569">audited benign only</text>
<text x="212" y="220" font-size="17" font-weight="700" fill="#0f172a" text-anchor="end">Gemini 3.8 Flash</text>
<rect x="230" y="190" width="189" height="20" fill="#cbd5e1" rx="3"/>
<text x="431" y="206" font-size="14" fill="#475569">12.0%</text>
<rect x="230" y="214" width="61" height="20" fill="#2563eb" rx="3"/>
<text x="303" y="230" font-size="14" font-weight="700" fill="#2563eb">3.9%</text>
<text x="212" y="282" font-size="17" font-weight="700" fill="#0f172a" text-anchor="end">Claude Opus 5.5</text>
<rect x="230" y="252" width="359" height="20" fill="#cbd5e1" rx="3"/>
<text x="601" y="268" font-size="14" fill="#475569">22.7%</text>
<rect x="230" y="276" width="63" height="20" fill="#d97706" rx="3"/>
<text x="305" y="292" font-size="14" font-weight="700" fill="#d97706">4.0%</text>
<text x="212" y="344" font-size="17" font-weight="700" fill="#0f172a" text-anchor="end">GLM 5.3</text>
<rect x="230" y="314" width="316" height="20" fill="#cbd5e1" rx="3"/>
<text x="558" y="330" font-size="14" fill="#475569">20.0%</text>
<rect x="230" y="338" width="143" height="20" fill="#059669" rx="3"/>
<text x="385" y="354" font-size="14" font-weight="700" fill="#059669">9.1%</text>
<text x="212" y="406" font-size="17" font-weight="700" fill="#0f172a" text-anchor="end">DeepSeek V4.1 Flash</text>
<rect x="230" y="376" width="638" height="20" fill="#cbd5e1" rx="3"/>
<text x="880" y="392" font-size="14" fill="#475569">40.4%</text>
<rect x="230" y="400" width="197" height="20" fill="#dc2626" rx="3"/>
<text x="439" y="416" font-size="14" font-weight="700" fill="#dc2626">12.5%</text>
<text x="212" y="468" font-size="17" font-weight="700" fill="#0f172a" text-anchor="end">GPT-6 Astra</text>
<rect x="230" y="438" width="362" height="20" fill="#cbd5e1" rx="3"/>
<text x="604" y="454" font-size="14" fill="#475569">23.0%</text>
<rect x="230" y="462" width="270" height="20" fill="#7c3aed" rx="3"/>
<text x="512" y="478" font-size="14" font-weight="700" fill="#7c3aed">17.1%</text>
<text x="230" y="526" font-size="16" fill="#0f172a">Claude Opus 5.5 and GPT-6 Astra tie on the published set and separate at 4.0% against 17.1% once it is audited.</text>
<text x="230" y="552" font-size="16" fill="#475569">Measured 2026-09-24. Auditors: 2 models, blind to the replies; disagreements excluded.</text>
</svg>