Join our Newsletter — 33% off our NHI Course
Foundations & NHI Taxonomy

Pass K

← Back to Glossary
By NHI Mgmt Group Updated October 22, 2026 Domain: Foundations & NHI Taxonomy

A reliability metric that asks whether a task succeeds across repeated runs, not just once. It is useful when agent behaviour varies from run to run, because it exposes instability that a single pass rate can hide.

What Pass K Measures

Pass K is a repeatability metric, not a one-shot success rate. It asks whether a task still succeeds when the same agent or workflow is run multiple times, which makes it useful for judging stability, not just best-case performance.

Why Pass K Matters

Single-run success can hide brittle behaviour, especially in agentic systems where tool use, context selection, or downstream state changes can vary from run to run. Pass K makes that variance visible by testing whether success survives repetition, rather than assuming one good run reflects reliable behaviour.

That distinction matters when teams are comparing agents, prompts, or orchestration changes. A system that passes once but fails intermittently may look acceptable in a demo and still be operationally weak in production.

How To Interpret Pass K Results

Higher Pass K values generally indicate more stable execution, but the metric should be read alongside task difficulty, randomness, and any external dependencies that can change between runs. A low score does not always mean the underlying capability is absent, only that the outcome is not robust across repeated trials.

Because the metric focuses on repetition, it is especially useful when failures are nondeterministic or hard to reproduce. That makes it a better fit for reliability assessment than for judging a single isolated attempt.

Where Pass K Fits In Evaluation

Pass K belongs in evaluation workflows that need to separate incidental success from dependable behaviour. It is most informative when used with a fixed task set, consistent scoring rules, and enough repetitions to expose instability rather than mask it.

For that reason, it works well as part of a broader evaluation suite that also looks at correctness, consistency, and failure modes. A system can score well on a single attempt and still be a poor choice if it cannot repeat that success predictably.

Risk and Threat Considerations

Repeated-run metrics matter because intermittent behaviour can become an operational risk even when isolated tests look fine. In agentic or automated systems, that instability can lead to missed actions, inconsistent decisions, or hard-to-debug failures that only appear under production conditions.

Failure mechanism: The evaluation captures one successful execution while ignoring variance caused by stochastic model output, state drift, tool timing, or hidden dependency differences across runs.

Impact: Organisations may deploy systems that appear dependable in testing but fail unpredictably in real use, increasing reliability risk and making incident triage and change control much harder.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

NIST CSF 2.0, OWASP ASVS and NIST AI RMF set the governance and control requirements practitioners need to meet.

FrameworkControl / ReferenceRelevance
NIST CSF 2.0DE.CM-01 — Monitor for anomalies and eventsRepeatability metrics help reveal unstable behaviour across runs.
GV.OV-01 — Outcomes are monitored and communicatedPass K is an evaluation outcome used to monitor system reliability over time.
Recommendation — Track repeated-run failures as anomalous behaviour in your monitoring process. Use repeated-run scores to monitor whether outcomes remain dependable across changes.
OWASP ASVSV15 — Secure Coding and ArchitectureRepeated-run instability often exposes brittle architecture or logic paths.
Recommendation — Design evaluation harnesses that surface instability in architecture and control flow.
NIST AI RMFMEASURE — Measure AI risks and performancePass K measures reliability variance in AI-enabled workflows.
Recommendation — Measure repeated-run performance to quantify reliability and consistency risk.

Practitioner Guidance

Why practitioners should care: Pass K is most useful when you need evidence that a workflow is not merely capable of success, but consistently capable of success. Treat it as a guard against overconfident approval based on a single green test run.

What to watch for: Large gaps between first-pass success and repeated-pass success usually signal unstable prompts, brittle tool dependencies, or hidden state sensitivity. Those are the cases where a system deserves more scrutiny before release.

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.

NHIMG Editorial Note
Reviewed and updated by the NHIMG editorial team on October 22, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org