Cloud baseline
Hy4, single model via OpenRouter
tencent/hy4 · scorer forge-2.0
- Overall
- 0.4532
- Benchmark
- Forge 2.0
- Model build
- 58m 45s
Recorded inference cost
$1.59
From the saved OpenRouter generation billing summary (192 recorded requests). Whether auxiliary model calls were included was not retained. Scoring reuses the saved build; this amount describes the original inference spend.
Token usage
Tokens: 49.8M in · 219k out · 49.1M cached (exact, OpenRouter records)
50,058,724 tokens over 192 model calls: every call of the run, the model's own and the harness's helper calls, counted from OpenRouter records. Reasoning tokens as the provider reports them: 144,409 (not added to the total).
tencent/hy4
In 49.8M · Out 219k · Cached 49.1M · Reasoning 144k · 191 calls
google/gemini-2.5-flash
In 1.4k · Out 6 · Cached 0 · Reasoning 0 · 1 call
Tier breakdown
Each bar is the tier's mean, from 0 to 1 (for E, its mean × the excellence gate). The percentage is the tier's share of the score. Mean × share, added over all tiers, is the tests earned figure below.
Scoring detail
How this score was built
Per-test scorer output, as posted by the app. Expand a section to inspect its tests.
Correctness combines the lowest score for each test across the scoring fixtures; economy measurements use their mean. The combined result can therefore be lower than every individual fixture’s final score. Critical defects reduce the weighted result, followed by the reliability multiplier, before any score cap applies.
The rules behind these numbers: Forge 2.0 requirements, weights and score caps.
The score, step by step
0.8752 tests earned × 1.0000 critical defects × 0.5178 reliability = 0.4532 final score
tests earned = 0.15 × 0.9045 v1 + 0.7396 v2 (out of 0.85)
v1 = 0.88 × 0.9194 tiers L–A + 0.12 × 0.9529 gate × 0.8343 excellence
Reliability: every tier in the breakdown above, except Excellence, is a group of tests. Each group of tests multiplies the score by 1 − 0.10 × the shortfall of its worst test: by 0.90 when that test fails completely, by 0.95 when it scores 0.5.
- T Event pipeline: worst test
t_reestimate_followed, score 0.5 × 0.9500Already counted in this group: t_trigger_handoff, t_out_of_order
- R Reconcile: worst test
r_idempotent_rerun, score 0 × 0.9000 - B Resolvers and permissions: worst test
b_comment_adf_as_user, score 0.5 × 0.9500 - U UI function: worst test
u_widget_numbers, score 0.75 × 0.9750Already counted in this group: u_widget_chart, u_ledger_table, u_ledger_sort, u_llm_explain
- A Rovo: worst test
a_action_result, score 0 × 0.9000Already counted in this group: a_action_permissions
- R1 Migration: worst test
r1_progress_visible, score 0 × 0.9000 - R2 Dosing: worst test
r2_person_never_quota_refused, score 0 × 0.9000Already counted in this group: r2_rate_limit_reaction
- R4 Changing world: worst test
r4_field_switch, score 0.9848 × 0.9985 - R7 Custom field: worst test
r7_values_fresh, score 0.9803 × 0.9980 - R10 Native JQL: worst test
r10_empty_and_closed, score 0 × 0.9000Already counted in this group: r10_precomputation_refresh, r10_shared_permissions
v1 is this run's score on the tests carried over from Forge 1.0: 15% of the total. v2 is the requirements R1–R10, each at its share of the score: the other 85%. Critical defects multiply the whole score, and so does each group of tests, by 1 − 0.10 × the shortfall of its worst test.
Excellence gate 0.9529: the average of the 18 conditions below, each counted at the value shown. Green is met in full; red is not, and lowers the gate. The 3 excellence tests are paid in proportion to the gate; together they are 1.8% of the total.
Earned score 0.4532 · No cap applies · Final score 0.4532
Under a cap the final score is min(earned, cap − 0.05 × (1 − earned)): always below the cap, and closer to it the more the run earned. With no cap it is the earned score. Avoiding a cap adds no points.
Forge's own linter reports no errors (warnings cost points), every manifest function bundles and loads, packages resolve at the kit's pins, the manifest rules the linter misses, and only the scopes the app's calls need.
l deployable
1.00lint: 0 errors, every stage reached
l bundles load
1.008/8 functions bundle, load and export their handler
l lint warnings
1.000 distinct lint warning(s): []
l real packages
1.008/8 bundles resolve @forge/* at the kit pins only
l manifest rules
1.006/6 manifest rules met:
l scopes
1.00scopes: missing [], extra []
Current modules and APIs: dashboards:widget with its edit API, the rovo:skill and rovo:mcp wiring, a Forge LLM model the platform lists as active, no /rest/api/3/search, no @forge/api storage, a nodejs22.x or nodejs24.x runtime, the consumer shape, the declared KVS entity, and deploy readiness: a manifest and permissions real Forge would accept and no code predicted to fail there.
k dashboard widget
1.00dashboards:widget 2/2: {'custom_ui_resource': True, 'edit_resource': True}
k widget edit bridge
1.004/4 board picks reached the dashboard through the widget edit API (updateConfig/onProductSave)
k rovo skill
1.00rovo:skill 7/7:
k current apis
1.00current APIs 5/5:
k consumer shape
1.00consumer shape 3/3
k entity declared
1.00entities with a sprint-partitioned, ranged index: ['scope-change', 'scope-ledger', 'sprint-issue']
k v2 surfacesdiagnostic, no weight
1.00v2 surfaces declared: ['jira:adminPage', 'webtrigger', 'scope-ledger']
k rovo mcp
1.00rovo:mcp 4/4:
k llm model current
1.0013 LLM call(s); model ids list() does not return: []; llm module with claude: True
k manifest semantics
1.00deploy readiness, manifest + permissions: 17 rules checked, none failing here
k runtime risks
1.00deploy readiness, predicted runtime failures: 12 rules checked, none failing here
Issue updates flow trigger to queue to consumer: one ledger row per change under duplicate, reordered, dropped and concurrent deliveries, multi-sprint changelog values, re-estimates followed, Retry-After honoured, no user context in background work.
t trigger handoff
0.8384worst of 3 scoring sites (seed 3aaa6d6b73d37669): 835/996 deliveries handed off correctly; ['1484087: jira 0, pushes 1', '1484265: jira 0, pushes 1', '1484374: jira 0, pushes 1']
t event rows
1.00event rows: 170/170 exact (precision 1.00, recall 1.00)
t no double count
1.00every change holds at most one ledger row in every phase (duplicated deliveries included)
t out of order
0.8571worst of 3 scoring sites (seed d031c3ee22136508): permuted deliveries: 11/11 rows exact, 1/3 sprints with oracle numbers
t multi sprint parse
1.00123/123 multi-id Sprint changes recorded exactly
t reestimate followed
0.50worst of 3 scoring sites (seed 3aaa6d6b73d37669): 3/6 re-estimated sprints show the oracle numbers
t retry after honoured
1.00InvocationError retryAfter 30s >= 30s
t no user in async
1.00background work is asApp only
The first scheduled run starts the backfill of every change since each active sprint started, removals included; later runs heal what the event stream missed and a run with nothing new writes nothing; they page through results in each endpoint's own style, never retry before Retry-After and finish inside the module timeout, queue continuations included.
r backfill complete
1.00130/130 historical changes v1 never recorded, recorded one virtual hour after the upgrade (the backfill is dosed; v1 rows are R1's, at 2 h)
r removals found
1.0024/24 removed-to-backlog changes found
r heal dropped
1.004/4 dropped changes healed exactly once; 0 other row(s) added
r pagination
1.0079/79 reads the site served in two or more pages walked to their end through the cursors the site offered (/rest/agile/1.0/board 16/16, /rest/agile/1.0/board/{id}/sprint 39/39, /rest/api/3/changelog/bulkfetch 16/16, /res
r rate limit
1.00run 1 (backfill) request 2: waited 2.5 virtual s in-invocation; run 1 (backfill) continuation page: waited 2.5 virtual s in-invocation; run 2 (hour-1) request 2: waited 2.5 virtual s in-invocation
r as app
1.00209/209 Jira calls of the scheduled runs and their queue continuations asApp (consumer 209)
r completes in timeout
1.0029/29 invocations of the scheduled runs and their queue continuations inside their module timeout (consumer 21, scheduled 8)
r idempotent rerun
0.00187 ledger write(s) (scope-ledger) on a no-change run over 363 rows
Forge KVS with the storage scope, ledger reads through the declared entity index in change-time order, no KVS limit errors.
s storage scope
1.00KVS used, no 403 from the KVS proxy
s entity index used
1.002151/2151 ledger reads are entity queries on a declared index
s index order
1.006/6 tables list changes in change-time order
s limits
1.00no KVS limit errors
Every invoked resolver exists and answers structured errors, nobody sees changes to issues they cannot browse (not on screen, not in an LLM prompt, not in a Realtime payload), the hidden-change count is right, and each click posts exactly one ADF comment as the viewer.
b invoke contract
1.0057/57 invokes returned a defined, structured result; a Jira 500 on sprintLedger's read: handled
b no permission leak
1.00no hidden key, summary or change id reached a person
b hidden count
1.0018/18 hidden counts equal the oracle
b comment adf as user
0.50worst of 3 scoring sites (seed 3aaa6d6b73d37669): 6/12 comments are ADF as the viewer naming key, sprint and creep; ['25740 status 201 via user', '24977 status 201 via user', '24606 status 201 via user']
b comment exactly once
1.0012 click/double-click gesture(s), none posted more than one comment
b realtime payload clean
1.00210/210 realtime payloads hold sprint ids only
The dashboard widget's numbers and chart, its board choice saved through the host, live updates through Forge Realtime, the sprint action's ledger table, sorting, issue links, comment flow, the Forge LLM explanation, close and not-started states.
u widget loadsdiagnostic, no weight
1.006/8 configured widget views render a sprint with its numbers
u widget numbers
0.75widget numbers: 6.00/8 views exact (sprints by startDate, four §1 numbers each)
u widget chart
0.756/8 charts on one linear scale within 1px; ['worst bar off its linear scale by 6.42px', 'worst bar off its linear scale by 6.42px']
u widget edit config
1.00edit/config 10/10:
u ledger table
0.9024worst of 3 scoring sites (seed d031c3ee22136508): ledger tables: 5.41/6 exact (rows, cells, default order)
u ledger sort
0.8333worst of 3 scoring sites (seed 3aaa6d6b73d37669): 10/12 at-toggle states ordered with aria-sort
u issue router
1.006/6 issue keys open /browse/<KEY> through the Forge router
u comment flow
1.0032/32 comment-flow steps right (select, one comment and a success flag per click and double click, forbidden error flag, modal works)
u modal close
1.006/6 close clicks reached bridge close
u not started
1.00future sprint shows not-started only
u widget live
1.00moved sprints showing the new numbers live 1/1; 0 idle invoke(s)
u llm explain
0.8235worst of 3 scoring sites (seed 3aaa6d6b73d37669): explain 14/17 over 5 scripted answers: 1:digits:every_number_is_a_ledger_number, 3:malformed:one_llm_call_answered_malformed, 4:error:one_llm_call_answered_error
Atlassian design tokens with 4.5:1 contrast in light and dark, a painted surface, no Content Security Policy violations or console errors, and the widget readable at 380 px wide.
v theme tokens
1.0031/31 surfaces themed with --ds-text* at >= 4.5:1
v dark mode
1.0031/31 surfaces paint a --ds-surface* background in their mode
v csp clean
1.000 CSP violation(s), 0 failed asset request(s)
v console clean
1.000 console/page error(s) on nominal scenarios: []
v widget sizes
1.006/6 widget sizes without horizontal overflow, every sprint visible, no number clipped
The get-sprint-scope action returns exact numbers and the visible changes for the invoking person, returns errors instead of throwing, and the skill's SKILL.md tells the agent how to use it.
a action result
0.00worst of 3 scoring sites (seed 3c04f61f28a4a511): 0/5 active sprints answered exactly
a action errors
1.002/2 bad sprintId inputs return {error} without throwing
a action permissions
0.8333worst of 3 scoring sites (seed 3aaa6d6b73d37669): 10/12 per-person answers list exactly what that person may browse
a skill instructions
1.00SKILL.md body 5/5: result fields named ['sprintName', 'committed', 'added', 'removed', 'creepPercent', 'hiddenChanges', 'changes']
Few Jira requests in the first scheduled run and per relevant change in triggers and consumers, and surfaces that paint after one round trip — paid only in proportion to the excellence gate.
e reconcile economy
1.00mean over 3 scoring sites: backfill 31 background Jira calls (by lineage, every phase) / optimum 20 (incl. 2 forced 429 repeat(s)) = 1.55x; 1.0 at <= 2.45x; 10 2.0 call(s) not counted (field-value writes, person-facing,
e event economy
0.503mean over 3 scoring sites: 1167 Jira calls (by lineage, every phase) / baseline 214 (213 delivered relevant change(s) x 1 read + 1 forced 429 repeat; a normalizer, not a reachable optimum) = 5.45x; 1.0 at <= 2.86x; 141 f
e ui round trips
1.00mean over 3 scoring sites: round trips before first paint: {'widget-view': 0, 'widget-edit': 1, 'sprint-action': 1}
Every v1 row moves to the new scope-ledger entity exactly once, with its change id and time, while events keep flowing and across invocation limits, within 2 virtual hours of the upgrade, with its progress in the admin panel; v1's entity stays intact.
r1 v1 rows migrated
1.00h2: 59 of 59 v1 rows in scope-ledger with the source attributes recorded by the probe
r1 v1 rows intact
1.00all 59 v1 source rows intact; 59 final copies preserve recorded v1 attributes at every observed checkpoint
r1 events during migration
1.0048 of 48 changes made while the migration ran are in scope-ledger at the end
r1 progress visible
0.000 of 6 panel reads show the migration right (total 59; complete after the h2 read); h1: 'Migrated 0 of 0 v1 rows', h2: 'Migrated 0 of 0 v1 rows' (+4)
On a site of about 1,000 issues, background work stays inside its share of the 2,400-point hour, no person-facing request meets a quota 429, and Retry-After and RateLimit-Reason (quota, burst, per-issue write) decide every retry; the backfill still completes.
r2 background share
1.0010 of 10 hours kept background within 70 % (1680 points; the contract default; the probe recorded no change); busiest hour 1605; mandatory field-write lower bound 7 (reads additional)
r2 person never quota refused
0.00worst of 3 scoring sites (seed 3aaa6d6b73d37669): 1 of 964 person-facing requests refused for quota (e.g. /rest/agile/1.0/sprint/{sprintId})
r2 rate limit reaction
0.3333worst of 3 scoring sites (seed 3c04f61f28a4a511): 6 of 18 429s answered by their reason (quota: all background paused; burst: the endpoint; per-issue: the issue); broken: jira-burst-based at 1793282420373 ms: 12 request(
r2 backfill complete
1.00130 of 130 pre-upgrade changes v1 never recorded are in scope-ledger, right
Work longer than one invocation continues in the next, no function waits past its limit (a long Retry-After is handed back, not waited out), and a killed invocation leaves no duplicate.
r3 never killed
1.008 of 8 functions never exceeded their limit
r3 long retry after deferred
1.001 of 1 invocations handed a Retry-After longer than their limit stopped and resumed later (results: retry)
r3 no duplicate rows
1.00every (changeId, sprintId) appears once at each of 7 checkpoints
Sprints close, issues move to another board's sprint, a board's estimation field changes, issues are deleted and a person loses browse permission while the app runs; the ledger and every view come out right.
r4 sprint close final
1.001 of 1 closed sprints kept exactly their final ledger
r4 move new board
1.0017 of 17 cross-board moves recorded with the new board's estimate
r4 field switch
0.9848worst of 3 scoring sites (seed d031c3ee22136508): 34 of 35 rows after the switch use the new field; 31 of 31 earlier rows keep their estimate; wrong after: ('1357398', '924')
r4 deleted history
1.002 of 2 rows of deleted issues kept as history with deleted: true
r4 permission revoked
1.004 answer(s) after a browse revoke showed ledger data and none of the newly hidden issues
A jira:adminPage built in UI Kit with the contract's controls, and every admin resolver checking Jira's ADMINISTER permission on the server, never trusting the payload.
r5 panel labels
1.008 of 8 §2.6 controls found by label; new secret shown once: yes; then masked ••••<last4>: yes
r5 admin actions apply
1.002 of 2 admin-page invokes of the admin's save and rotate applied
r5 nonadmin refused
1.004 non-admin/forged admin actions landed no attempted effect in storage
Signed deployment events: a missing or wrong signature, a tampered body or a stale timestamp is refused with no effect, a replay applies once, a valid event records the deployment, and the secret is never disclosed.
r6 unsigned no effect
1.005 invalid events (bad-signature, stale, stale-future, tampered, unsigned) had no effect
r6 replay once
1.001 sequential replay(s) and one concurrent pair had one acceptance and no duplicate Jira/deployment effect at any checkpoint; bookkeeping writes 1
r6 status codes
1.0010 of 10 cases answered with their status
r6 valid applies
1.003 of 3 validly signed events accepted (202) and recorded as `Deployed to <env>` on every ledger row of the issues they name
r6 secret never disclosed
1.00the CI secret (panel) never appeared outside its one-time display
The read-only scope-status field holds committed or added +points for an issue in an active sprint, removed for one that has left an active sprint since that sprint started, and nothing for any other issue, written in bulk through Jira's app field-value API and fresh within the virtual hour.
r7 values fresh
0.9803worst of 3 scoring sites (seed d031c3ee22136508): mean over 7 checkpoints; worst h5: 277 of 285 issues right; CORE-498 'added +13' (want added +3); CORE-622 'added +0' (want added +8)
r7 writes accepted
1.00156 of 156 bulk field writes accepted
Tool calls validated against the viewer's sprint scope, back-off on a 429 without Retry-After, answers with no finish reason refused, a 10-minute cache, and the admin's kill switch and daily token budget enforced on the server.
r8 tool call scope
1.002 of 2 manipulated calls respected function and visible sprint scope
r8 failure handling
1.002 of 2 LLM failures handled
r8 cost controls
1.003 of 3 cache/kill-switch/budget cases met their full outcome
The widget and the sprint action each make at most one invoke and load at most 150 KB before their first data paint, with no external origin; the admin page renders after one invoke.
r9 widget boot
1.00widget-view: 1 invoke(s) before first paint (<= 1), 102688 bytes of JS+CSS (<= 153600), 0 external request(s)
r9 sprint boot
1.00sprint-modal: 1 invoke(s) before first paint (<= 1), 106770 bytes of JS+CSS (<= 153600), 0 external request(s)
r9 admin boot
1.00admin-page: 1 invoke(s) before first paint (<= 1)
scopeChanged(sprintId) is a jira:jqlFunction returning native issue predicates from the ledger. Jira shares its precomputed expansion across users, applies each viewer's browse permissions, and keeps the same cached mapping fresh through the documented precomputation update API after changes and reconciliation. Empty, future and closed sprints, IN and NOT IN, and invalid arguments are checked by running actual native JQL.
r10 manifest
1.00scopeChanged manifest declares issue IN/NOT IN, required sprintId, and bound function
r10 initial membership
1.0024/24 initial_membership cases correct
r10 precomputation refresh
0.6667worst of 3 scoring sites (seed 3aaa6d6b73d37669): 16/24 precomputation_refresh cases correct; refresh: missing=['24769'], extra=[], invoked=0; refresh: missing=[], extra=['24769'], invoked=0
r10 shared permissions
0.8056worst of 3 scoring sites (seed 3aaa6d6b73d37669): JQL disclosure not observed: 58/72 shared_permissions cases correct; shared-user: missing=['24769'], extra=[], invoked=0; shared-user: missing=['24769'], extra=[], invoke
r10 empty and closed
0.00worst of 3 scoring sites (seed 3aaa6d6b73d37669): 0/4 empty_and_closed cases correct; empty: missing=[], extra=[], invoked=1; empty: missing=['24397', '24407', '24413'], extra=[], invoked=1
r10 invalid arguments
1.004/4 invalid_arguments cases correct
Run notes and corrections
Scoring load: this build was scored once, with the 1-minute load reaching 10.3, above the limit of 8 we normally score under. Its result was not re-checked at a lower load; the other build of this pair was scored twice (peaks 24.3 and 8.7) with all 105 check scores identical.
Graded browser recording
Loading duration…Watch the full graded browser recording at its original speed: the dashboard widget, the sprint action, the not-started sprint and the Forge LLM cases, as the scorer drove them on the run's own seed, the first of the three scoring sites. The test results and screenshots on this page provide the wider evidence. Pause or scrub to inspect a view.
The UI Kit admin panel is not in the recording: it is graded from its component tree.
Drag the timeline to seek. Keyboard: arrow keys move 5 seconds; Home and End jump to the start and end.
SHA-256: b93cc837310338473d30f161b7bac637eaa29161eddb43db774e75e985b1bc7b
Screenshots
Pictures from one of the three scoring sites, the one on the run's own seed. The dashboard widget and the sprint action are captured from the built app in a browser during grading. The admin panel picture is drawn by the benchmark from the app's component tree, not by Jira, and nothing is graded from that picture. A test keeps the score of its worst site (the excellence measurements keep their mean), so a test can fail on a site these pictures do not show. A detail that opens "worst of …" names the seed of the site the test scored worst on, which can be the pictured one.
Run details
- Model
- tencent/hy4
- Engine events
- 0
- Repair rounds
- 0
- Started
- Nov 12, 2026, 04:52 AM
- Finished
- Nov 12, 2026, 06:15 AM
- Call budget
- With wrap-up nudge, version 2: as the call budget ran low, the agent harness told the model to start no new work and finish