Option 3: Reference modelThis involves recording the percentage of unsafe responses for a reference model as a baseline, and then comparing every SUT against it. For instance, if 20% of the reference model's responses are unsafe for a test and 25% of an SUT's responses are unsafe on the same test then it is 1.25x _more_ unsafe than the reference model (0.25/0.20). If only 10% of another SUT's response are unsafe on the test, it is 0.5x _less_ unsafe (0.10/0.20). The advantage of this approach is that it is interpretable, baselined against AI systems with achievable safety features, and allows thresholds to vary across hazard categories. However, it is more complex than the other solutions to implement and requires picking a reference model.