What AI Red-Team Evaluations Can and Cannot Prove

Red-teaming evaluations have a calculable evidentiary ceiling based on testing budgets and harm rates. Above a specific threshold, modest-sized benchmarks can certify safety to stated standards, making a clean sheet statistically stronger than a single reproduced failure. Below this rate, no feasible passive benchmark can provide sufficient evidence of safety.