methodology, and aims to be open to audit. For our core target audiences we anticipate the following specific requirements for the grading system: For **model providers** the benchmark should incentivize targeted safety improvements to models. Scores should be fair, meaning that they should not favor or disadvantage models of specific providers. Moreover, scores that indicate good safety performance should be achievable. For **model integrators** the benchmark should have a signal. A better score should mean a safer model. It should be possible to break down scores into more granular insights and differences between scores should be clear. For **AI standards makers and regulators** the benchmark should encourage wide participation and drive improvements in safety. It should also facilitate meaningful dialogue within the AI research and developer community.