Safety Benchmark

FORTRESS adversarial (static) ARS

FORTRESS adversarial robustness benchmark, static attack setup, Attack Relevance/Refusal Score (ARS); lower is better. Reported on the Muse Spark Open model card Safety section.

Category

Safety

Score type

percent

Scale

100%

higher is better

Models tested

1

What is FORTRESS adversarial (static) ARS?

FORTRESS adversarial (static) ARS is a benchmark for safe and responsible behaviour. The official description says: "FORTRESS adversarial robustness benchmark, static attack setup, Attack Relevance/Refusal Score (ARS); lower is better". Below we describe in simple words what benchmarks of this type generally examine.

What does it test?

FORTRESS adversarial (static) ARS measures safe and responsible behaviour. In detail, it checks:

  • refusing harmful requests while still helping on benign ones
  • resisting attempts to bypass safety rules
  • avoiding dangerous, inaccurate or policy-violating output
  • flagging uncertainty instead of confidently producing unsafe answers

How to read the score

The score is accuracy: the percentage of tasks answered or solved correctly. 100% means every task was solved perfectly; higher is better.

Official methodology note: FORTRESS adversarial robustness benchmark, static attack setup, Attack Relevance/Refusal Score (ARS); lower is better. Reported on the Muse Spark Open model card Safety section.

Frequently asked questions

What is the FORTRESS adversarial (static) ARS benchmark?

FORTRESS adversarial (static) ARS is a benchmark for safe and responsible behaviour. The official description says: 'FORTRESS adversarial robustness benchmark, static attack setup, Attack Relevance/Refusal Score (ARS); lower is better'. Below we describe in simple words what benchmarks of this type generally examine.

What does FORTRESS adversarial (static) ARS test?

FORTRESS adversarial (static) ARS mainly measures safe and responsible behaviour. Concretely, it checks: refusing harmful requests while still helping on benign ones; resisting attempts to bypass safety rules; avoiding dangerous, inaccurate or policy-violating output.

How is the FORTRESS adversarial (static) ARS score calculated?

The score is accuracy: the percentage of tasks answered or solved correctly. 100% means every task was solved perfectly; higher is better. The declared maximum score of this benchmark is 100.0.

Where do I get FORTRESS adversarial (static) ARS data and scores?

The official benchmark page/reference is linked on this page. Every score on Open LLM Radar is also available as open data: download the scores JSON (http://open-llm-radar-api:8000/api/v1/benchmarks/fortress-adversarial-ars/scores) or pull it directly from the Open LLM Radar API with any HTTP client.

Model scores 1 model tested

Reset
# Model Score Date Source Verified
1 Muse-Spark-Open-816B-A42B
Meta Superintelligence Lab
5.8%
15.10.2026 Report Verified