Template

The Written Accuracy Bar: Defining "Good Enough" Before You Build AI

A framework and fill-in template for setting AI accuracy thresholds: metrics by task, severity tiers, sample sizes, confidence intervals, and sign-off.

An AI system is ready for production when it meets a standard that was written down before anyone saw the results. The Written Accuracy Bar is that standard: the metric, the threshold, the sample, the confidence level, the severity rules, and the people who sign. This page explains how to set each element and provides a complete template.

Why the bar must be written first

When the threshold is set after the results arrive, it tends to settle wherever the results happen to be. A bar written in advance protects the business owner, the delivery team, and the people affected by the system from that drift. It also turns evaluation from opinion into evidence. OpenAI's evaluation guidance names "vibe-based evals," using "it seems like it's working" as a strategy, as an anti-pattern, and recommends task-specific evals that reflect real-world distributions.1 Anthropic's guidance asks for success criteria that are specific, measurable, achievable, and relevant, and offers a model of a measurable criterion: "less than 0.1% of outputs out of 10,000 trials flagged for toxicity."2

The stakes are practical. In McKinsey's 2026 State of AI survey, inaccuracy was the most commonly experienced AI-related risk among respondent organizations.3 Regulation points the same way: for high-risk systems, the EU AI Act requires an "appropriate level of accuracy" and requires that "the levels of accuracy and the relevant accuracy metrics" be declared in the instructions for use.4 The NIST AI Risk Management Framework places measurement at the center of its Measure function, and its Generative AI Profile (NIST AI 600-1) identifies confabulation, the confident generation of false content, as a risk specific to generative systems.56

Key takeaway

A written accuracy bar has seven parts: the metric, the threshold, the severity rules, the sample and confidence level, the human baseline, the exception route, and the sign-off. Missing any one of them leaves room for a later argument.

Step 1: Choose metrics that fit the task

Different tasks fail in different ways, so they need different metrics. Choose one primary metric that decides pass or fail, and a small number of secondary metrics that you monitor.

Task typePrimary metric optionsSecondary metricsTypical grading method
Classification (routing, triage, intent)Accuracy; precision and recall per class; macro F1 when classes are imbalancedConfusion matrix on high-cost classes; calibration of confidence scoresCode-graded against labeled gold set
Extraction (fields from documents)Field-level exact match; document-level "fully correct" ratePer-field accuracy; null-handling accuracy; normalization errorsCode-graded with normalization rules
Generation (drafts, summaries, replies)Rubric pass rate (factual accuracy, completeness, policy compliance, tone)Edit distance from human final; reviewer acceptance rateHuman graders, or a model grader calibrated against human graders
Retrieval-augmented generation (RAG)Answer correctness and groundedness (claims supported by retrieved sources)Retrieval recall at k; citation accuracy; correct refusal when the answer is not in the corpusMixed: code-graded retrieval, rubric-graded answers
Agents and tool useTask success rate end to endCorrect tool selection; argument validity; unsafe or unauthorized actions; steps and cost per taskScenario tests in a sandbox with state checks

Prefer automated grading where it is reliable. Anthropic's guidance ranks code-based grading as fastest and most reliable, model-based grading as flexible and scalable, and human grading as the highest quality but slowest.2 When a model is used as a grader, calibrate it against human judgments before relying on it; OpenAI lists failing to do so as an anti-pattern.1

Step 2: Classify errors by severity

A single accuracy number treats every error as equal. In practice, a misspelled supplier name and a wrong bank account number are not the same event. Define severity tiers and set a separate threshold for each.

SeverityDefinitionExamplesTypical bar
S1 CriticalCould cause financial loss, legal or regulatory breach, safety harm, or disclosure of sensitive dataWrong payment details; leaked personal data; unauthorized action by an agentNear-zero ceiling with a statistically supported upper bound; S1-prone cases routed to people by design
S2 MajorWrong outcome that a downstream check may not catchWrong amount; wrong classification into a high-cost class; unsupported factual claimExplicit ceiling, often at or below the human baseline
S3 MinorWrong but caught or easily correctedFormatting errors; low-impact field missesIncluded in the overall accuracy threshold
S4 CosmeticNo effect on the outcomeTone or style variations within policyTracked, not gated

Build the severity list from the specific harms of the workflow. For generative and agentic systems, the OWASP Top 10 for LLM Applications (2025) is a useful prompt for security-related harms, including prompt injection, sensitive information disclosure, improper output handling, and excessive agency.7 Microsoft's red-teaming guidance recommends maintaining a harms list, extending it as testing uncovers new harms, and following red teaming with systematic measurement, since red teaming reveals the risk surface but does not measure prevalence.8

Step 3: Size the sample and state the confidence

An accuracy figure from 50 examples and the same figure from 2,000 examples carry very different certainty. The bar should specify both the sample size and the confidence level, and the pass rule should use the confidence interval, not only the point estimate.

Sample size for a target margin of error

For a proportion such as accuracy, the standard approximation is n = z² × p(1 − p) / E², where z is 1.96 for 95% confidence, p is the expected accuracy, and E is the desired margin of error. Using p = 0.5 gives the most conservative (largest) sample. When you expect high accuracy, the required sample is smaller, as the table shows.

Margin of error (±) at 95% confidenceSample size, conservative (p = 0.50)Sample size, expected accuracy 95% (p = 0.95)
±10 points9719
±5 points38573
±3 points1,068203
±2 points2,401457
±1 point9,6041,825

Two practical notes. First, the normal approximation is weak near 0% or 100% and at small samples. Report intervals using the Wilson score method, which NIST's Engineering Statistics Handbook describes and which, unlike the common formula, cannot produce a lower limit below zero.9 Second, if you will report accuracy by segment (for example, by document type or language), each segment you gate on needs its own adequate sample.

Confidence intervals in practice

Suppose a system gets 470 of 500 evaluation cases correct: 94.0%. The 95% Wilson interval is approximately 91.6% to 95.8%. If the bar requires the lower bound to be at least 92%, this result does not pass yet, even though the headline figure looks strong. With 1,910 correct out of 2,000 (95.5%), the interval narrows to approximately 94.5% to 96.3%. A larger sample does not make the system better; it makes the evidence clearer.

Bounding rare, critical errors

For S1 errors, the question is usually "how confident are we that the rate is below a ceiling?" If you observe zero critical errors in n independent cases, the exact one-sided 95% upper bound on the true rate is 1 − 0.051/n, which is very close to 3/n (often called the "rule of three"). In practice:

  • Zero S1 errors in 300 cases supports a rate below about 1%.
  • Zero S1 errors in 600 cases supports a rate below about 0.5%.
  • Zero S1 errors in 3,000 cases supports a rate below about 0.1%.

When the required ceiling demands a sample larger than you can label, that is a strong signal to route the S1-prone cases to people by design rather than attempting to prove a rate statistically.

Step 4: Compare against the human baseline

The right reference point is usually the current process, not perfection. Measure the human error rate on the same sample, with the same grading rules, before setting the threshold. Then state the comparison explicitly: for example, "the system's S2 error rate must be no higher than the human baseline, and its overall accuracy must be within two points of the baseline or better." Record who graded the human baseline and how disagreements between graders were resolved, and measure inter-grader agreement where judgment is involved. If two experts agree only 90% of the time, a 98% bar against a single grader's labels is not meaningful.

Step 5: Define the exception route

An accuracy bar applies to the cases the system handles. The exception route defines which cases it does not. Specify the routing triggers (low confidence, missing data, policy flags, S1-prone categories), the queue, the human role, and the turnaround target. Report two numbers together: the share of volume handled automatically, and the accuracy on that share. A system that handles 70% of volume at 99% accuracy can be more valuable than one that handles 100% at 93%. For high-risk systems, the EU AI Act requires that people overseeing the system can disregard, override, or reverse its output and can stop it.10

Step 6: Set the review cadence

The bar is not only a launch gate. It is the standard the system is held to in operation. Define how often a fresh production sample is graded, which signals trigger an unscheduled review (input distribution shift, a rise in exception rates, a model or prompt change, a new data source), and what happens on a breach. The EU AI Act's post-market monitoring provision describes this kind of active, systematic collection and analysis of performance data over a system's lifetime.11 OpenAI's guidance makes the same point plainly: evaluation is a continuous process.1

Step 7: Sign it

The bar is signed by the business owner, the person accountable for risk or compliance in the workflow, and the delivery lead. Changes after signature are dated amendments with a stated reason. This record supports internal governance and aligns with the documented, continually improved management system that ISO/IEC 42001 describes.12

The template

Written Accuracy Bar

SectionEntry
System and workflow________________________
Version and datev___ / ____-__-__
Task typeClassification / Extraction / Generation / RAG / Agent
Unit of evaluationWhat counts as one case (document, field, conversation, task)
Primary metric and definition________________________
Secondary metrics (monitored)________________________
Grading methodCode / Model grader (calibration result: ___) / Human (number of graders: ___)

Thresholds by severity

SeverityDefinition for this workflowThresholdPass rule
OverallPrimary metric___%Point estimate at least ___% and 95% lower bound at least ___%
S1 CriticalBelow ___%95% upper bound below ___%, or routed to human by design
S2 MajorBelow ___%No higher than human baseline
S3 MinorIncluded in overall

Evaluation sample

Source and time window
________________________
Sample size and stratification
Total n = ____; segments gated separately: ________
Confidence level and interval method
95%, Wilson score (or state alternative)
Holdout protection
Who holds the gold set; confirmation it was not used for development
Labeling
Labelers, guidelines version, inter-grader agreement: ____

Human baseline

Baseline measured on
Same sample / comparable sample (describe)
Baseline results
Overall: ___% | S1: ___% | S2: ___%
Comparison rule
________________________

Exception route

Routing triggers
________________________
Queue, role, turnaround
________________________
Target automated share
___% of volume

Review cadence

Scheduled production sampling
Frequency: ____ Sample size: ____
Unscheduled review triggers
Model or prompt change; data source change; exception rate above ___%; drift signal: ____
Action on breach
________________________

Sign-off

RoleNameSignatureDate
Business owner
Risk or compliance owner
Delivery lead

Illustrative example

Example: inbound claims-document classification for an insurer. This example is illustrative. The organization and all figures are fictional and do not describe any Quantabase client.

SectionIllustrative entry
TaskClassify inbound claim documents into 14 document types and route to the correct handling team.
Primary metricDocument-level accuracy against expert labels; macro F1 monitored for rare classes.
Severity rulesS1: a document containing a fraud or legal notice routed to a general queue. S2: misrouting that delays a claim by more than one day. S3: misclassification between sibling types handled by the same team.
ThresholdsOverall accuracy at least 95% with 95% Wilson lower bound at least 94%. S1: fraud and legal notices always reviewed by a person (routed by keyword and model flag), with zero misses on a 600-document targeted set. S2: no higher than the human baseline.
Sample2,000 documents drawn from six months of intake, stratified by type, labeled by two senior handlers with adjudication; inter-grader agreement 97%.
Human baselineMeasured on the same 2,000 documents: 94.8% accuracy; S2 rate 1.6%.
Result1,910 of 2,000 correct (95.5%; Wilson 95% interval approximately 94.5% to 96.3%). S2 rate 1.2%. Zero S1 misses in the 600-document targeted set, supporting an S1 miss rate below about 0.5% at 95% confidence. Bar met.
Exception routeConfidence below threshold or any S1 flag goes to the intake supervisor queue, 2-hour turnaround. Expected automated share: about 80%.
Review cadenceWeekly sample of 200 production documents; full re-evaluation on any model or prompt change, or if the exception rate moves more than 5 points.
Key takeaway

The example passes because it was designed to be judged: a stated sample, an interval rather than a headline number, a human baseline on the same data, and critical cases routed to people by design.

Sources

  1. Evaluation best practices — OpenAI, 2025
  2. Define success criteria and build evaluations — Anthropic, 2025
  3. The state of AI in 2026: On the road to ROI — McKinsey & Company, 2026
  4. EU AI Act, Article 15: Accuracy, Robustness and Cybersecurity — Regulation (EU) 2024/1689, 2024
  5. AI Risk Management Framework (AI RMF 1.0) — National Institute of Standards and Technology, 2023
  6. Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile (NIST AI 600-1) — National Institute of Standards and Technology, 2024
  7. OWASP Top 10 for LLM Applications 2025 — OWASP Gen AI Security Project, 2024
  8. Planning red teaming for large language models (LLMs) and their applications — Microsoft, 2025
  9. NIST/SEMATECH e-Handbook of Statistical Methods, 7.2.4.1 Confidence intervals — National Institute of Standards and Technology
  10. EU AI Act, Article 14: Human Oversight — Regulation (EU) 2024/1689, 2024
  11. EU AI Act, Article 72: Post-Market Monitoring — Regulation (EU) 2024/1689, 2024
  12. ISO/IEC 42001:2023 Artificial intelligence — Management system — International Organization for Standardization, 2023

Want a second pair of eyes on your draft?

Bring your completed template to a thirty-minute working session and we will review it with you, free of charge.

Book a working session →