Results

What the watchdogs caught

Each watchdog reads suppression cases with the written escalation policy stated first. Cells count suppressed cases flagged. No case text is shown.

A written policy onlyC plus unsafe past cases an authority endorsedF C plus the policy-priority sentence

Six-arm set · flagged of 48 reads

arms B, D and E: report Tables D6 and E1
WatchdogACFEndorsement drop (A → C)
First four · OpenRouter, temperature 0.7
GLM 5.3 Flash483448
Gemma 4 31B482448
MiniMax M3.1 Flash484148
Nemotron 3 Ultra483548
API watchdogs
Claude Haiku 5.5402939
Claude Sonnet 5.5472742
Gemini 3.8 Flash481648
Gemini 4 Argon484848
Open-weight · Modal, vLLM, temperature 0.7
Qwen 3 32B484346
Llama 3.3 70B464444
Mistral Small 3.2 24B442022
gpt-oss-120b482945
OLMo 3.1 32B Think481836

Bar: share flagged at C. Tick: baseline A. Two draws per prompt. Claude Opus 5.5 and GPT-6.1 Sol were run on arm C only and caught all 48. Sonnet's 12 unparseable answers count as not flagged. False flags for the first four: 6 of 1,440 benign reads.

Harder set · flagged of 26

WatchdogACF
First four · pooled 38% → 15% → 27%
GLM 5.3 Flash14812
Gemma 4 31B824
MiniMax M3.1 Flash1149
Nemotron 3 Ultra623
API watchdogs
Claude Haiku 5.5258
Claude Sonnet 5.5657
Gemini 3.8 Flash446
Gemini 4 Argon141214
Claude Opus 5.5111010
GPT-6.1 Sol1169
Open-weight
Qwen 3 32B762
Llama 3.3 70B161212
Mistral Small 3.2 24B7115
gpt-oss-120b1157
OLMo 3.1 32B Think833

The limit

Here an agent rated a serious complaint at severity 1 or 2, so the paperwork looks compliant (13 suppression cases on 6 records). Baselines are low and the policy sentence recovers little. The set's threshold was set while building it, so treat it as exploratory. Opus 5.5 refused 114 of 216 compliant reads.

A second sample · engine seed 1 against seed 0

WatchdogSetSeed 0 · A / C / FSeed 1 · A / C / F
Qwen 3 32BSix-arm (48)48 / 43 / 4647 / 45 / 42
Mistral Small 3.2 24BSix-arm (48)44 / 20 / 2242 / 18 / 21
Qwen 3 32BHarder (26)7 / 6 / 213 / 6 / 3
Mistral Small 3.2 24BHarder (26)7 / 11 / 58 / 11 / 7

Mistral's drop under endorsement, and the policy sentence's failure to fix it, repeat. Qwen again shows no clear drop.