A reliability metric that asks whether a task succeeds across repeated runs, not just once. It is useful when agent behaviour varies from run to run, because it exposes instability that a single pass rate can hide.
What Pass K Measures
Pass K is a repeatability metric, not a one-shot success rate. It asks whether a task still succeeds when the same agent or workflow is run multiple times, which makes it useful for judging stability, not just best-case performance.
Why Pass K Matters
Single-run success can hide brittle behaviour, especially in agentic systems where tool use, context selection, or downstream state changes can vary from run to run. Pass K makes that variance visible by testing whether success survives repetition, rather than assuming one good run reflects reliable behaviour.
That distinction matters when teams are comparing agents, prompts, or orchestration changes. A system that passes once but fails intermittently may look acceptable in a demo and still be operationally weak in production.
How To Interpret Pass K Results
Higher Pass K values generally indicate more stable execution, but the metric should be read alongside task difficulty, randomness, and any external dependencies that can change between runs. A low score does not always mean the underlying capability is absent, only that the outcome is not robust across repeated trials.
Because the metric focuses on repetition, it is especially useful when failures are nondeterministic or hard to reproduce. That makes it a better fit for reliability assessment than for judging a single isolated attempt.
Where Pass K Fits In Evaluation
Pass K belongs in evaluation workflows that need to separate incidental success from dependable behaviour. It is most informative when used with a fixed task set, consistent scoring rules, and enough repetitions to expose instability rather than mask it.
For that reason, it works well as part of a broader evaluation suite that also looks at correctness, consistency, and failure modes. A system can score well on a single attempt and still be a poor choice if it cannot repeat that success predictably.
Risk and Threat Considerations
Repeated-run metrics matter because intermittent behaviour can become an operational risk even when isolated tests look fine. In agentic or automated systems, that instability can lead to missed actions, inconsistent decisions, or hard-to-debug failures that only appear under production conditions.
Failure mechanism: The evaluation captures one successful execution while ignoring variance caused by stochastic model output, state drift, tool timing, or hidden dependency differences across runs.
Impact: Organisations may deploy systems that appear dependable in testing but fail unpredictably in real use, increasing reliability risk and making incident triage and change control much harder.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST CSF 2.0, OWASP ASVS and NIST AI RMF set the governance and control requirements practitioners need to meet.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | DE.CM-01 — Monitor for anomalies and events | Repeatability metrics help reveal unstable behaviour across runs. |
| GV.OV-01 — Outcomes are monitored and communicated | Pass K is an evaluation outcome used to monitor system reliability over time. | |
| Recommendation — Track repeated-run failures as anomalous behaviour in your monitoring process. Use repeated-run scores to monitor whether outcomes remain dependable across changes. | ||
| OWASP ASVS | V15 — Secure Coding and Architecture | Repeated-run instability often exposes brittle architecture or logic paths. |
| Recommendation — Design evaluation harnesses that surface instability in architecture and control flow. | ||
| NIST AI RMF | MEASURE — Measure AI risks and performance | Pass K measures reliability variance in AI-enabled workflows. |
| Recommendation — Measure repeated-run performance to quantify reliability and consistency risk. | ||
Practitioner Guidance
Why practitioners should care: Pass K is most useful when you need evidence that a workflow is not merely capable of success, but consistently capable of success. Treat it as a guard against overconfident approval based on a single green test run.
What to watch for: Large gaps between first-pass success and repeated-pass success usually signal unstable prompts, brittle tool dependencies, or hidden state sensitivity. Those are the cases where a system deserves more scrutiny before release.
Related resources from NHI Mgmt Group
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on October 22, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org