The eight-step playbook for building eval suites from scratch — collecting tasks, designing graders, maintaining them long-term, and the Swiss-cheese model of how evals fit with everything else.
Start Small
20–50 tasks from real failures is enough. Waiting for hundreds means waiting forever — and means reverse-engineering success later instead of designing it.
Read the Transcripts
A score you don't understand isn't a signal. Open the actual run record before believing any number.
Combine Methods
Automated evals plus production monitoring plus A/B tests plus user feedback plus human review. No single layer catches every issue.
Collect Tasks: Steps 0–3
The first hard problem is filling the suite with the right tasks. Anthropic's playbook compresses to four steps before you even think about graders.
Step 0 — Start early. Teams delay evals waiting for hundreds of tasks. The reality: 20–50 simple tasks from real failures work well. Early agent development shows clear impact from small samples; mature agents need larger suites. Take the 80/20 approach.
Step 1 — Start with manual checks. Begin with behaviors you already verify by hand before each release. Already in production? Mine the bug tracker and support queue. Converting real failures into test cases ensures the suite reflects actual usage.
Step 2 — Write unambiguous tasks with reference solutions. A good task is one two domain experts can independently grade pass/fail and agree. Could you pass the task yourself? If not, the spec needs work. Build a reference solution — a known working output that passes every grader. This proves the task is solvable and that your graders are wired correctly.
A 0% pass rate across many trials means the agent is too weak. With frontier models, it usually means a broken task or a misconfigured grader. Re-check the spec before re-training the model.
Step 3 — Build balanced problem sets. Test cases where behavior should happen and cases where it shouldn't. Only testing the positive case creates overtriggering. Claude.ai web search took many rounds to balance: queries that need search (weather) plus queries that don't (Apple founder).
Design Harness and Graders: Steps 4–5
Step 4 — Build a robust harness with a stable environment. The agent should run roughly like production. The environment shouldn't introduce noise. Each trial starts clean — no shared state, no leftover files, no cached data. Shared state can artificially inflate performance: in internal evals, Claude once gained an unfair advantage by reading git history from previous trials.
Step 5 — Design graders thoughtfully. Choose deterministic graders where possible, model-based where necessary for flexibility, human graders judiciously for validation.
Don't rigidly check tool-call order. Agents find valid unanticipated paths. Grade what they produced, not the trail they took.
Build in partial credit. A support agent that identified the problem and verified the customer but failed the refund is meaningfully better than one that failed immediately. Score the success continuum.
Calibrate model judges to humans. Compare LLM judge scores to a small expert-labeled set. Give the judge an out — "return Unknown if insufficient information." Score rubric dimensions separately rather than all at once.
Resist bypasses. Tasks should require actually solving the problem, not exploiting loopholes.
Subtle grader bugs cause apparent agent failures. CORE-Bench scored Opus 4.5 at 42% until researchers found rigid grading (penalizing "96.12" when "96.124991…" was expected), ambiguous specs, and unreproducible tasks. After fixes, scores jumped to 95%. Double-check the eval before doubting the model.
Transcripts and Saturation: Steps 6–7
Step 6 — Read the transcripts. You can't know whether graders work without reading actual run records. When tasks fail, transcripts reveal whether the agent made a real mistake or the grader rejected a valid solution. Failures should feel fair: clear what the agent got wrong and why. When scores stop climbing, confirm it's the agent — not the eval — that's stuck.
Anthropic invested in transcript-viewing tooling and reads them regularly. This is the highest-leverage habit in eval work. Don't take any score at face value without understanding the underlying transcripts.
Step 7 — Watch for eval saturation.Eval saturation happens when agents pass every solvable task. Evals at 100% protect against regressions but provide no improvement signal. SWE-Bench Verified started this year around 30%; frontier models now sit above 80% saturation. As evals saturate, big capability jumps look like small score gains.
Qodo was initially unimpressed by Opus 4.5 because their one-shot coding evals couldn't capture the longer, more complex task gains. They built new agentic eval frameworks and the real picture came back into focus. When your suite saturates, build a harder one — don't accept the score at face value.
Eval-Driven Development: Step 8
Step 8 — Keep suites healthy long-term. Eval suites are living artifacts that need ongoing attention and clear ownership. Anthropic's most effective pattern: a dedicated evals team owning core infrastructure while domain experts and product teams contribute tasks and run evaluations.
For AI product teams, owning evals should be as routine as maintaining unit tests. Teams waste weeks on features that "work" in early testing but fail unstated expectations. Well-designed evals surface those expectations before launch. Defining tasks stress-tests whether requirements are concrete enough to build.
The strongest practice is eval-driven development: write the eval defining a planned capability before the agent can fulfill it. Iterate until pass rates climb. Build features that are bets on future model capabilities — low-pass capability evals make those bets visible. When new models drop, your suite reveals which bets paid off.
PMs, customer-success managers, and salespeople are closest to user requirements. With Claude Code, they can contribute eval tasks as PRs directly. Enable them — don't make eval ownership the engineering team's problem alone.
Swiss Cheese Coverage
Automated evaluations run thousands of tasks before any user sees a deployment. But automated evals are only one slice of the picture. Complete coverage stacks several methods, each catching what the others miss.
Automated evals — fast iteration, fully reproducible, no user impact, run on every commit. Risk: false confidence if they don't match real usage.
Production monitoring — reveals real user behavior at scale and catches issues synthetic evals miss. Risk: reactive; problems reach users first.
A/B testing — measures actual user outcomes like retention or task completion. Risk: slow to reach significance; needs traffic.
User feedback — surfaces unanticipated problems with real examples. Risk: sparse, self-selected, severity-skewed.
Systematic human studies — gold-standard grading by trained raters. Risk: expensive and slow; reserve for calibration.
The Swiss-cheese analogy from safety engineering: any single layer has holes, but stacked layers stop most failures. Most effective teams combine automated evals for fast iteration, production monitoring for ground truth, and periodic human review for calibration.
Several frameworks help teams skip the build-from-scratch work: Harbor for containerized agent environments and trial scaling (Terminal-Bench 2.0 ships through Harbor); Braintrust for offline eval plus observability plus experiment tracking; LangSmith for tracing and dataset management in the LangChain ecosystem; Langfuse as the open-source self-hosted alternative; Arize Phoenix (open-source) and AX (SaaS) for LLM tracing and online/offline evals. Frameworks accelerate the plumbing — they're only as good as the tasks and graders you run through them.
Read the transcripts. Start with 20 tasks. Build for the model you'll have, not just the one you have now. The rest is mechanics.
Flashcards — Guide 03
Tap any card to reveal the definition. Or open the full deck to filter and shuffle across all guides.
03 · Advanced
Reference solution
tap to reveal →
A known working output that passes all graders. Proves the task is solvable and verifies the graders are wired correctly.
← tap to flip back
03 · Advanced
Balanced problem set
tap to reveal →
An eval suite covering cases where a behavior should occur and cases where it shouldn't. Prevents one-sided over- or under-triggering.
← tap to flip back
03 · Advanced
Robust eval harness
tap to reveal →
A harness that runs the agent production-like with a clean environment per trial — no shared state, no leftover files, no infrastructure flakiness.
← tap to flip back
03 · Advanced
Partial credit grading
tap to reveal →
Scoring multi-step tasks on a success continuum rather than pass/fail. Distinguishes "did three steps right, failed the fourth" from "failed immediately."
← tap to flip back
03 · Advanced
Transcript review
tap to reveal →
Reading actual run records to verify what the agent did and whether graders rejected valid work. The highest-leverage habit in eval maintenance.
← tap to flip back
02 · Applied03 · Advanced
Eval saturation
tap to reveal →
When agents pass nearly every solvable task. Large capability jumps look like small score gains; time to graduate this eval and write a harder one.
← tap to flip back
03 · Advanced
Eval-driven development
tap to reveal →
Writing the eval that defines a planned capability before the agent can pass it. Makes future-model bets visible and falsifiable.
← tap to flip back
03 · Advanced
Swiss cheese model
tap to reveal →
Stacking multiple eval methods so failures slipping through one layer are caught by another. From safety engineering — no single layer is enough.
← tap to flip back
03 · Advanced
Production monitoring
tap to reveal →
Tracking metrics and errors in live systems. Ground truth on real user behavior, but reactive — problems reach users first.
← tap to flip back
03 · Advanced
A/B testing
tap to reveal →
Comparing variants with real user traffic. Measures actual outcomes (retention, completion) but slow to reach significance and needs traffic.
← tap to flip back
03 · Advanced
Systematic human study
tap to reveal →
Structured grading by trained raters across many examples. Gold standard for subjective tasks; reserve for calibrating LLM judges or final-call evaluation.
← tap to flip back
03 · Advanced
Eval framework
tap to reveal →
Off-the-shelf tooling that runs evals, manages datasets, and tracks results. Examples: Harbor, Braintrust, LangSmith, Langfuse, Arize Phoenix / AX.