What Adam Is Reading
First, Do NOHARM
A structured appraisal of the NOHARM preprint (Wu, Nateghi Haredasht, et al., arXiv 2512.01241 v4), a clinical safety benchmark for medical AI plus a randomized crossover study of 101 generalist physicians. Emphasis on how the scoring works, what drives the headline numbers, and sources of bias.
Single-source critical appraisal · Preprint, not peer reviewed · October 19, 2026

Most medical AI benchmarks ask whether the model knows the answer. NOHARM asks a better question: if a physician followed the model's consult advice as written, how often could the patient be hurt, and how badly? The design is serious and the authors are among the most careful in the field. The headline numbers still depend heavily on how harm is defined and scored, and that is where this review spends its time.

This appraisal is meant to be shared. It sticks to what the preprint reports and where its choices shape the result. Commentary is kept short and labeled as such.


The Study at a Glance
ElementDetail
CitationWu D, Nateghi Haredasht F, et al. (57 authors; co-senior Rodman, Chen, Goh). arXiv 2512.01241, v1 December 1, 2025; v4 July 13, 2026. Not peer reviewed.
Benchmark source4,356 Stanford Health Care physician-to-specialist eConsults (2023 to 2024). 100 cases selected, 10 each in allergy, cardiology, dermatology, endocrinology, GI, hematology, ID, nephrology, neurology, pulmonology. Cases synthetically reconstructed to prevent re-identification.
Robustness set1,000 variants (10 specialist-approved perturbations per case) that should not change the right answer
Rubric17,278 candidate actions generated by eight LLMs, condensed to 4,249 options. Each rated by three physicians (at least two specialists) on a 9-point RAND/UCLA appropriateness scale with WHO harm tiers. 12,747 annotations.
GradingLLM autograder (Gemini 3 Flash extraction, Gemini 3.5 Flash review). Agreement with physicians: weighted κ 0.80, versus 0.78 physician to physician.
Primary metricSeverity-weighted F1 (precision for commission errors, recall for omission errors). Weights mild:moderate:severe = 1:8:24.
Systems tested45 LLMs and 4 clinical RAG tools; primary analysis on 20 LLMs plus AMBOSS LiSA, Doximity Ask, OpenEvidence, Glass Health
Physician study101 board-certified generalists (IM, FM, EM), recruited by social media and listservs. Within-participant crossover: 6 cases each, 2 per arm (conventional resources, GPT-5.4 chat, any resource). Same rubric and autograder.
Funding and tiesStanford Bio-X seed grant; J.H.C. supported by ARPA-H PACT (Physician-AI Collaboration Teaming), NIH, Macy and Moore Foundations. D.W. consults for Google DeepMind, Meta, Chronicle Medical Software, Sermo. E.G. and A.Ro. are visiting researchers at Google and Google DeepMind. Funders reported no role in design or analysis.

Source: the preprint, Methods, Funding, and Competing Interests sections.


What They Found
FindingResult
Cases with at least one potentially severe error2.9% (AMBOSS LiSA) to 24.6% (Llama 4 Maverick). Top generalists: GPT-5.5 8.9%, GPT-5.4 9.8%, Gemini 2.5 Pro 12.8%, Claude Fable 5 13.6%.
"Do Nothing" referenceSevere harm potential in 37% of cases
Error typeMore than 80% of severe errors were omissions. Recall was worse than precision for nearly every model.
Clinical RAG vs. top generalist LLMs (F1)82.7% vs. 65.8% unprompted; 77.7% vs. 68.7% concise prompt; 82.0% vs. 74.4% thorough prompt (all P < 0.001)
RobustnessAll models degraded on clinically equivalent case variants; RAG tools degraded less
Physician study, intention to treat (F1)Conventional 42.2%; GPT-5.4 assisted 47.3%; any resource 49.0% (both adj. P < 0.05)
Physician study, as treatedAI used 52.0% vs. not used 42.2% (exploratory; authors note confounding)
Physician vs. model aloneGPT-5.4 alone 76.5%; physicians with AI 52.0%
Missed AI adviceMean 1.8 messages per case. In 222 assisted cases, GPT-5.4 surfaced an appropriate option the physician omitted for 29% of physicians at the severe tier, 83% at moderate.
AI-AI teamingCross-model review beat self-review by about 2.6 points. A second agent helped; a third did not add significantly.

Values read from Figures 3 to 5 and Extended Data Figure 5 of v4. Model names reflect the versions tested in April to June 2026.


Sources of Bias, Item by Item
1
The winners were tested after the sample cases went public
What the paper reports

Sample cases, rubrics, and code were released June 16, 2026. Three of the four top-ranked systems (AMBOSS LiSA, OpenEvidence, Glass Health) carry an asterisk: tested after that release. The authors show that deliberate memorization of the public 30% is easy to detect (near-perfect public scores, weaker private scores) and that no tested model shows the pattern. One vendor was mid-update and asked for a retest; both results are shown. RAG vendors provided API access on request.

Why it matters

The contamination check catches memorization. It does not catch a vendor tuning a system prompt toward the benchmark's style, for example by making answers more exhaustive, which is what an omission-weighted metric rewards. The public and private sets correlate at r = 0.95, which helps. The cleanest comparison would be RAG scores from before the release, which the paper does not separate out.

Moderate concern
2
The metric rewards saying more
What the paper reports

Harm of omission is scored whenever an appropriate rubric action is not explicitly stated. The autograder was "very strict" and counted implied actions as omissions. Severe omissions carry 24 times the weight of mild ones. Most severe errors were omissions; recall lagged precision almost everywhere. The length penalty applies only beyond the longest expert reference answer, and changed rankings very little.

Why it matters

The benchmark measures completeness of a written plan at least as much as clinical danger. Systems built to produce long, checklist-style consults (the RAG tools) are advantaged. A concise answer that a specialist would consider adequate can register as a "severe error." The authors say as much in their limitations: these are rubric-based indicators, not event rates. The "up to 24.6% severe harm" headline should be read in that light.

Major concern
3
"Do Nothing" is a built-in loser
What the paper reports

An empty response scored severe harm potential in 37% of cases, worse than every model. The Discussion uses this to argue "compared with what?" and that the status quo carries harm.

Why it matters

Because omission is harm by definition, an empty answer fails every omission check. The reference is useful as a floor for the scale. It is not evidence about real care, where the alternative to AI is usually a specialist, a clinician's own plan, or a delay, not silence. The fair "compared with what" comparator in this paper is the physician arm, not the empty one.

Moderate concern
4
LLMs wrote the menu and LLMs grade the answers
What the paper reports

The rubric options were generated by eight LLMs (OpenAI, Google, Anthropic, DeepSeek), then condensed with Claude and Gemini and reviewed by physicians. Grading is by Gemini models. The authors tested Claude and Gemini Pro as alternate reviewers (κ 0.82 and 0.80) and note OpenAI models still scored best under non-OpenAI graders.

Why it matters

Physician rating of every option is a strong safeguard. Still, the action vocabulary came from model outputs, so answers phrased the way models phrase things may match the rubric more easily than a human's shorthand. That cuts against physicians in the human comparison. Grader self-preference looks adequately checked.

Minor concern
5
Weights chosen on the same data
What the paper reports

The 1:8:24 severity weights came from a grid search optimizing ranking stability, picking the lowest weights reaching Kendall τ 0.95. Excluding action categories did not change conclusions.

Why it matters

Optimizing for stable rankings is defensible and transparent. It is not the same as anchoring weights to clinical consequences, and absolute F1 values depend on the choice. Rankings are the more trustworthy output; absolute percentages less so.

Minor concern
6
One institution's consults, edited for completeness
What the paper reports

All cases come from Stanford eConsults. Specialists modified recommendations in 61% of cases and added missing case details. Clarifying information was added because a real eConsult includes chart review. Specialists from other institutions reviewed to limit local practice patterns. Cases are low-acuity outpatient problems.

Why it matters

The authors handle this carefully. The reference standard is academic specialist practice, which tends to be more comprehensive than community practice, and that again favors exhaustive answers. Results do not generalize to inpatient or acute care, as the authors state.

Minor concern
7
The physician study: real randomization, artificial task
What the paper reports

101 volunteers recruited through social media and listservs; 47% use AI daily or often. Two cases per arm, counterbalanced, analyzed with crossed random effects. Four of 105 excluded (two incomplete, two for time-on-task outliers); conclusions unchanged with them included. Physicians wrote free-text plans with no chart and were scored by the same strict omission grader. Compensation and time limits are not described in the main text.

Why it matters

The intention-to-treat gain (42.2% to 47.3%) is the most reliable human result. The comparison of "physicians vs. AI alone" is less fair than it looks: models were prompted to be complete and graded on completeness, while busy physicians typing a plan naturally write less. Low physician scores partly reflect documentation behavior, not judgment. Volunteers comfortable with AI may not represent the average generalist. With two cases per arm, each physician's estimate is noisy, though the pooled design accounts for this.

Moderate concern
8
The "unrealized potential" counterfactual
What the paper reports

If physicians had added every recommendation GPT-5.4 surfaced to their own plan, the combined plan would have outscored both the physician and the model as used (P < 0.001).

Why it matters

Taking the union of two lists almost always raises recall, and recall is where the scoring is concentrated. The result is real arithmetic but a weak test of complementary judgment. It does not show what happens when physicians accept everything, including the AI's inappropriate suggestions in messier cases. The more useful finding is behavioral: a mean of 1.8 messages per case suggests physicians used the tool like a search box.

Moderate concern
9
Conflicts and framing
What the paper reports

Several senior authors have Google or Google DeepMind affiliations; the first author consults for Google DeepMind and Meta. Funding includes ARPA-H's Physician-AI Collaboration Teaming program. The authors run the public leaderboard. The introduction's adoption figures cite an OpenEvidence funding press release and an AMBOSS newsroom post, both companies whose products are ranked.

Why it matters

Disclosure is thorough, and the results do not favor Google (Gemini models land mid-pack; OpenAI leads among generalists). The ARPA-H program's premise aligns with the paper's teaming conclusions, which is worth knowing rather than worrying about. Citing vendor press releases for adoption statistics is weak sourcing and should be replaced before publication.

Minor concern
10
A moving preprint
What the paper reports

Version 4, seven months after v1. The model roster reflects April to June 2026. Manual testing of consumer clinical products scored lower than API testing, with different test dates.

Why it matters

Any specific ranking will be stale within months, and the API version of a product may not be what clinicians use. Cite the version. Treat the leaderboard, not the PDF, as the current state, and treat the methods as the durable contribution.

Minor concern

Risk of Bias, Physician Study (RoB 2 Domains)
DomainRatingBasis
Randomization processLowWithin-participant, counterbalanced arm order, case order adjusted in the model.
Deviations from intended interventionSome concernsNot everyone in AI arms used AI; ITT is primary and as-treated is labeled exploratory. Carryover across arms possible; addressed with counterbalancing.
Missing outcome dataLow4 of 105 excluded; sensitivity analysis unchanged.
Measurement of the outcomeLowAutomated grader applied identically across arms; not influenced by allocation.
Selection of the reported resultSome concernsNo registration or prespecified analysis plan cited for the physician study.
OverallSome concernsInternally sound; external validity limited by volunteer sample and a simulated, chart-free task.

Ratings are the reviewer's application of RoB 2 to the preprint. RoB 2 does not apply to the benchmark portion, which is assessed in the items above.


What Holds Up
  • Real consult questions, not polished vignettes. That is a meaningful step up from licensing-exam benchmarks.
  • Harm severity rated per action by three physicians with established methods, high concordance (95.5%), and a unanimity rule for "severe."
  • A held-out private set and an explicit, clever contamination test.
  • Rankings are stable across prompts, weights, length penalties, and graders. The relative finding (clinical RAG tools ahead of generalist LLMs on this task, omission as the dominant failure mode) is robust.
  • The physician study shows a modest, credible benefit from AI access and a clear usability gap.
  • Open code, open sample data, public leaderboard, and candid limitations.
What It Cannot Tell Us
  • How often any of these tools hurt an actual patient. Harm here is potential harm if a plan were followed literally and as complete.
  • Whether RAG tools are safer or simply more exhaustive.
  • How physicians perform when they write for completeness, with the chart, under real conditions.
  • Whether teaming gains hold when the AI is wrong in ways the union counterfactual does not capture.
  • Anything about inpatient, acute, image-dependent, or pediatric care.

For discussion. The most transferable lesson for anyone deploying clinical AI is the omission finding. A plausible, accurate, incomplete answer looks identical to a complete one. Governance reviews that ask only "is it wrong?" will miss the larger category of "what did it leave out?"

Note for nephrology readers. Nephrology is one of the ten specialties (10 base cases). The paper does not report specialty-level results in the main text.

Ethics and privacy check. Benchmark cases were synthetically reconstructed from real eConsults under IRB approval to prevent re-identification. No identifiable patient information appears in this review.

So What

The best clinical safety benchmark so far, with a scoring system that rewards thoroughness about as much as it punishes danger. Trust the rankings and the omission finding. Discount the absolute harm percentages and the comparison with physicians.

The physician data say the tools help a little and are used poorly. That is a design and training problem, and arguably the more actionable result.

Benchmark risk of bias: moderate, concentrated in metric construction and post-release testing of top systems. Physician study: some concerns, mainly external validity. Appraisal based on arXiv v4 (July 13, 2026), main text, figures, and extended data figure legends; extended data tables and the code repository were not reviewed.

Sources

Preprint: Wu D, Nateghi Haredasht F, Kumar Maharaj S, et al. First, do NOHARM: a medical safety benchmark and randomized study of physician and AI teaming on clinical consultations. arXiv 2512.01241v4 (2026). arxiv.org/abs/2512.01241

Leaderboard and data: ARISE Network, MAST/NOHARM technical leaderboard. arise-ai.org/mast/technical; dataset and pipeline github.com/arisenetwork/mast

Method: Fitch K, et al. The RAND/UCLA Appropriateness Method User's Manual. RAND, 2001. rand.org

Method: Sterne JAC, et al. RoB 2: a revised tool for assessing risk of bias in randomised trials. BMJ 2019;366:l4898. doi.org/10.1136/bmj.l4898