An AI system is ready for production when it meets a standard that was written down before anyone saw the results. The Written Accuracy Bar is that standard: the metric, the threshold, the sample, the confidence level, the severity rules, and the people who sign. This page explains how to set each element and provides a complete template.
Why the bar must be written first
When the threshold is set after the results arrive, it tends to settle wherever the results happen to be. A bar written in advance protects the business owner, the delivery team, and the people affected by the system from that drift. It also turns evaluation from opinion into evidence. OpenAI's evaluation guidance names "vibe-based evals," using "it seems like it's working" as a strategy, as an anti-pattern, and recommends task-specific evals that reflect real-world distributions.1 Anthropic's guidance asks for success criteria that are specific, measurable, achievable, and relevant, and offers a model of a measurable criterion: "less than 0.1% of outputs out of 10,000 trials flagged for toxicity."2
The stakes are practical. In McKinsey's 2026 State of AI survey, inaccuracy was the most commonly experienced AI-related risk among respondent organizations.3 Regulation points the same way: for high-risk systems, the EU AI Act requires an "appropriate level of accuracy" and requires that "the levels of accuracy and the relevant accuracy metrics" be declared in the instructions for use.4 The NIST AI Risk Management Framework places measurement at the center of its Measure function, and its Generative AI Profile (NIST AI 600-1) identifies confabulation, the confident generation of false content, as a risk specific to generative systems.56
A written accuracy bar has seven parts: the metric, the threshold, the severity rules, the sample and confidence level, the human baseline, the exception route, and the sign-off. Missing any one of them leaves room for a later argument.
Step 1: Choose metrics that fit the task
Different tasks fail in different ways, so they need different metrics. Choose one primary metric that decides pass or fail, and a small number of secondary metrics that you monitor.
| Task type | Primary metric options | Secondary metrics | Typical grading method |
|---|---|---|---|
| Classification (routing, triage, intent) | Accuracy; precision and recall per class; macro F1 when classes are imbalanced | Confusion matrix on high-cost classes; calibration of confidence scores | Code-graded against labeled gold set |
| Extraction (fields from documents) | Field-level exact match; document-level "fully correct" rate | Per-field accuracy; null-handling accuracy; normalization errors | Code-graded with normalization rules |
| Generation (drafts, summaries, replies) | Rubric pass rate (factual accuracy, completeness, policy compliance, tone) | Edit distance from human final; reviewer acceptance rate | Human graders, or a model grader calibrated against human graders |
| Retrieval-augmented generation (RAG) | Answer correctness and groundedness (claims supported by retrieved sources) | Retrieval recall at k; citation accuracy; correct refusal when the answer is not in the corpus | Mixed: code-graded retrieval, rubric-graded answers |
| Agents and tool use | Task success rate end to end | Correct tool selection; argument validity; unsafe or unauthorized actions; steps and cost per task | Scenario tests in a sandbox with state checks |
Prefer automated grading where it is reliable. Anthropic's guidance ranks code-based grading as fastest and most reliable, model-based grading as flexible and scalable, and human grading as the highest quality but slowest.2 When a model is used as a grader, calibrate it against human judgments before relying on it; OpenAI lists failing to do so as an anti-pattern.1
Step 2: Classify errors by severity
A single accuracy number treats every error as equal. In practice, a misspelled supplier name and a wrong bank account number are not the same event. Define severity tiers and set a separate threshold for each.
| Severity | Definition | Examples | Typical bar |
|---|---|---|---|
| S1 Critical | Could cause financial loss, legal or regulatory breach, safety harm, or disclosure of sensitive data | Wrong payment details; leaked personal data; unauthorized action by an agent | Near-zero ceiling with a statistically supported upper bound; S1-prone cases routed to people by design |
| S2 Major | Wrong outcome that a downstream check may not catch | Wrong amount; wrong classification into a high-cost class; unsupported factual claim | Explicit ceiling, often at or below the human baseline |
| S3 Minor | Wrong but caught or easily corrected | Formatting errors; low-impact field misses | Included in the overall accuracy threshold |
| S4 Cosmetic | No effect on the outcome | Tone or style variations within policy | Tracked, not gated |
Build the severity list from the specific harms of the workflow. For generative and agentic systems, the OWASP Top 10 for LLM Applications (2025) is a useful prompt for security-related harms, including prompt injection, sensitive information disclosure, improper output handling, and excessive agency.7 Microsoft's red-teaming guidance recommends maintaining a harms list, extending it as testing uncovers new harms, and following red teaming with systematic measurement, since red teaming reveals the risk surface but does not measure prevalence.8
Step 3: Size the sample and state the confidence
An accuracy figure from 50 examples and the same figure from 2,000 examples carry very different certainty. The bar should specify both the sample size and the confidence level, and the pass rule should use the confidence interval, not only the point estimate.
Sample size for a target margin of error
For a proportion such as accuracy, the standard approximation is n = z² × p(1 − p) / E², where z is 1.96 for 95% confidence, p is the expected accuracy, and E is the desired margin of error. Using p = 0.5 gives the most conservative (largest) sample. When you expect high accuracy, the required sample is smaller, as the table shows.
| Margin of error (±) at 95% confidence | Sample size, conservative (p = 0.50) | Sample size, expected accuracy 95% (p = 0.95) |
|---|---|---|
| ±10 points | 97 | 19 |
| ±5 points | 385 | 73 |
| ±3 points | 1,068 | 203 |
| ±2 points | 2,401 | 457 |
| ±1 point | 9,604 | 1,825 |
Two practical notes. First, the normal approximation is weak near 0% or 100% and at small samples. Report intervals using the Wilson score method, which NIST's Engineering Statistics Handbook describes and which, unlike the common formula, cannot produce a lower limit below zero.9 Second, if you will report accuracy by segment (for example, by document type or language), each segment you gate on needs its own adequate sample.
Confidence intervals in practice
Suppose a system gets 470 of 500 evaluation cases correct: 94.0%. The 95% Wilson interval is approximately 91.6% to 95.8%. If the bar requires the lower bound to be at least 92%, this result does not pass yet, even though the headline figure looks strong. With 1,910 correct out of 2,000 (95.5%), the interval narrows to approximately 94.5% to 96.3%. A larger sample does not make the system better; it makes the evidence clearer.
Bounding rare, critical errors
For S1 errors, the question is usually "how confident are we that the rate is below a ceiling?" If you observe zero critical errors in n independent cases, the exact one-sided 95% upper bound on the true rate is 1 − 0.051/n, which is very close to 3/n (often called the "rule of three"). In practice:
- Zero S1 errors in 300 cases supports a rate below about 1%.
- Zero S1 errors in 600 cases supports a rate below about 0.5%.
- Zero S1 errors in 3,000 cases supports a rate below about 0.1%.
When the required ceiling demands a sample larger than you can label, that is a strong signal to route the S1-prone cases to people by design rather than attempting to prove a rate statistically.
Step 4: Compare against the human baseline
The right reference point is usually the current process, not perfection. Measure the human error rate on the same sample, with the same grading rules, before setting the threshold. Then state the comparison explicitly: for example, "the system's S2 error rate must be no higher than the human baseline, and its overall accuracy must be within two points of the baseline or better." Record who graded the human baseline and how disagreements between graders were resolved, and measure inter-grader agreement where judgment is involved. If two experts agree only 90% of the time, a 98% bar against a single grader's labels is not meaningful.
Step 5: Define the exception route
An accuracy bar applies to the cases the system handles. The exception route defines which cases it does not. Specify the routing triggers (low confidence, missing data, policy flags, S1-prone categories), the queue, the human role, and the turnaround target. Report two numbers together: the share of volume handled automatically, and the accuracy on that share. A system that handles 70% of volume at 99% accuracy can be more valuable than one that handles 100% at 93%. For high-risk systems, the EU AI Act requires that people overseeing the system can disregard, override, or reverse its output and can stop it.10
Step 6: Set the review cadence
The bar is not only a launch gate. It is the standard the system is held to in operation. Define how often a fresh production sample is graded, which signals trigger an unscheduled review (input distribution shift, a rise in exception rates, a model or prompt change, a new data source), and what happens on a breach. The EU AI Act's post-market monitoring provision describes this kind of active, systematic collection and analysis of performance data over a system's lifetime.11 OpenAI's guidance makes the same point plainly: evaluation is a continuous process.1
Step 7: Sign it
The bar is signed by the business owner, the person accountable for risk or compliance in the workflow, and the delivery lead. Changes after signature are dated amendments with a stated reason. This record supports internal governance and aligns with the documented, continually improved management system that ISO/IEC 42001 describes.12
The template
Written Accuracy Bar
| Section | Entry |
|---|---|
| System and workflow | ________________________ |
| Version and date | v___ / ____-__-__ |
| Task type | Classification / Extraction / Generation / RAG / Agent |
| Unit of evaluation | What counts as one case (document, field, conversation, task) |
| Primary metric and definition | ________________________ |
| Secondary metrics (monitored) | ________________________ |
| Grading method | Code / Model grader (calibration result: ___) / Human (number of graders: ___) |
Thresholds by severity
| Severity | Definition for this workflow | Threshold | Pass rule |
|---|---|---|---|
| Overall | Primary metric | ___% | Point estimate at least ___% and 95% lower bound at least ___% |
| S1 Critical | Below ___% | 95% upper bound below ___%, or routed to human by design | |
| S2 Major | Below ___% | No higher than human baseline | |
| S3 Minor | Included in overall |
Evaluation sample
- Source and time window
- ________________________
- Sample size and stratification
- Total n = ____; segments gated separately: ________
- Confidence level and interval method
- 95%, Wilson score (or state alternative)
- Holdout protection
- Who holds the gold set; confirmation it was not used for development
- Labeling
- Labelers, guidelines version, inter-grader agreement: ____
Human baseline
- Baseline measured on
- Same sample / comparable sample (describe)
- Baseline results
- Overall: ___% | S1: ___% | S2: ___%
- Comparison rule
- ________________________
Exception route
- Routing triggers
- ________________________
- Queue, role, turnaround
- ________________________
- Target automated share
- ___% of volume
Review cadence
- Scheduled production sampling
- Frequency: ____ Sample size: ____
- Unscheduled review triggers
- Model or prompt change; data source change; exception rate above ___%; drift signal: ____
- Action on breach
- ________________________
Sign-off
| Role | Name | Signature | Date |
|---|---|---|---|
| Business owner | |||
| Risk or compliance owner | |||
| Delivery lead |
Illustrative example
Example: inbound claims-document classification for an insurer. This example is illustrative. The organization and all figures are fictional and do not describe any Quantabase client.
| Section | Illustrative entry |
|---|---|
| Task | Classify inbound claim documents into 14 document types and route to the correct handling team. |
| Primary metric | Document-level accuracy against expert labels; macro F1 monitored for rare classes. |
| Severity rules | S1: a document containing a fraud or legal notice routed to a general queue. S2: misrouting that delays a claim by more than one day. S3: misclassification between sibling types handled by the same team. |
| Thresholds | Overall accuracy at least 95% with 95% Wilson lower bound at least 94%. S1: fraud and legal notices always reviewed by a person (routed by keyword and model flag), with zero misses on a 600-document targeted set. S2: no higher than the human baseline. |
| Sample | 2,000 documents drawn from six months of intake, stratified by type, labeled by two senior handlers with adjudication; inter-grader agreement 97%. |
| Human baseline | Measured on the same 2,000 documents: 94.8% accuracy; S2 rate 1.6%. |
| Result | 1,910 of 2,000 correct (95.5%; Wilson 95% interval approximately 94.5% to 96.3%). S2 rate 1.2%. Zero S1 misses in the 600-document targeted set, supporting an S1 miss rate below about 0.5% at 95% confidence. Bar met. |
| Exception route | Confidence below threshold or any S1 flag goes to the intake supervisor queue, 2-hour turnaround. Expected automated share: about 80%. |
| Review cadence | Weekly sample of 200 production documents; full re-evaluation on any model or prompt change, or if the exception rate moves more than 5 points. |
The example passes because it was designed to be judged: a stated sample, an interval rather than a headline number, a human baseline on the same data, and critical cases routed to people by design.
Sources
- Evaluation best practices — OpenAI, 2025
- Define success criteria and build evaluations — Anthropic, 2025
- The state of AI in 2026: On the road to ROI — McKinsey & Company, 2026
- EU AI Act, Article 15: Accuracy, Robustness and Cybersecurity — Regulation (EU) 2024/1689, 2024
- AI Risk Management Framework (AI RMF 1.0) — National Institute of Standards and Technology, 2023
- Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST AI 600-1) — National Institute of Standards and Technology, 2024
- OWASP Top 10 for LLM Applications 2025 — OWASP Gen AI Security Project, 2024
- Planning red teaming for large language models (LLMs) and their applications — Microsoft, 2025
- NIST/SEMATECH e-Handbook of Statistical Methods, 7.2.4.1 Confidence intervals — National Institute of Standards and Technology
- EU AI Act, Article 14: Human Oversight — Regulation (EU) 2024/1689, 2024
- EU AI Act, Article 72: Post-Market Monitoring — Regulation (EU) 2024/1689, 2024
- ISO/IEC 42001:2023 Artificial intelligence — Management system — International Organization for Standardization, 2023
Want a second pair of eyes on your draft?
Bring your completed template to a thirty-minute working session and we will review it with you, free of charge.
Book a working session →