Choice of reference modelsTo mitigate biases from selecting just one reference model, we use three state-of-the-art open source SUTs as candidate references models. They were not chosen arbitrarily. The reference models were selected based on highest overall performance at a range of tasks among similarly-sized accessible models. We only considered models that were not used to create the evaluator model (i.e., LlamaGuard). For each test, the lowest scoring of the three candidate reference models is used as the reference.