Do Speech Recognition Models Memorize the Test Answers? Three Probes Across 11 ASR Models

Hume AI researchers published three probes for measuring benchmark optimization in speech recognition on August 21, 2026. Of 11 open-source ASR models, 6 reproduced a reference transcript that omitted an audible "Thank you." Some also recovered numbers that had been silenced in the audio.

Do Speech Recognition Models Memorize the Test Answers? Three Probes Across 11 ASR Models

When you pick a speech recognition model, the usual signal is word error rate (WER) on a leaderboard. A report Hume AI researchers published on the Hugging Face blog on August 21, 2026 uses three probes to show, concretely, what that number is not measuring1.

The subjects were 11 widely used open-source ASR models. Across tests on VoxPopuli English and LibriSpeech (clean, other), several of the highest-scoring systems reproduced the benchmark’s reference transcripts — even when the audio contradicted them, when relevant words had been silenced, or when the audio equally supported two different written forms1.

Measuring the part of the score that came from the test

The premise, in the authors’ framing: public voice AI benchmarks increasingly suggest models are performing at human levels, but those scores don’t always reflect how the models work in the real world. Because public benchmarks are open and widely used, models can also become optimized for the tests themselves — meaning a score may have improved because the model learned benchmark-specific patterns, not because it got better at the underlying task1.

The phenomenon, sometimes called benchmark optimization or “benchmaxxing,” is often discussed in machine learning generally, but has been difficult to measure in speech recognition1. Whether a number reflects real ability is an older question — how to read those figures is covered in What Are AI Benchmarks? Reading Numbers Like “MMLU 90%”, and the mechanism by which a model memorizes the test is in What Is Overfitting?. What is new here is a way to quantify it for speech.

Probe 1: Writing the reference even when the audio disagrees

The first is the consensus disagreement probe.

VoxPopuli is known to contain a high number of transcription errors — which is why Artificial Analysis released a cleaned version1. This probe asks what leading ASR models do when they hit those errors: transcribe what the audio says, or reproduce the benchmark’s incorrect reference transcript?1

To test it at scale, the authors use an ensemble of independent models selected for low phoneme error rate (PER). PER measures how closely a written transcription matches the sounds in the audio, making it a useful proxy for how faithfully a model transcribes what it hears1. Cases where the ensemble unanimously disagrees with the reference get flagged, and a sample of those is compared against human annotations to validate the corrections1.

The example is easy to follow. One VoxPopuli clip audibly includes “Thank you, Mr. President,” but the reference transcript omits “Thank you.” Six of the 11 models tested reproduced the erroneous reference — giving the “expected” answer even though it contradicted the audio1.

The match goes further than the words. Models that omit “Thank you” also reproduce the benchmark’s punctuation style, writing “Mr” without a period, while models that include the audible phrase tend to write “Mr.” with the period1.

Present the same content in a different voice and the behavior weakens or disappears — newly collected voices from EU parliamentary recordings, or generic voices1. In the summary row, the courtesy was dropped by 6 models on the real clip, 5 on a voice clone of the same speaker, and 1 on a clone of a parliament speaker recorded after every model’s training cutoff1. Resynthesize the sentence in a generic TTS voice unconnected to any parliamentary recording, and all eleven models restore the courtesy1.

There is a size estimate too. The methodology flagged potential reference errors in 40% of the VoxPopuli test clips analyzed, affecting roughly 3% of all reference words1. Models exhibiting benchmark-optimized behavior reproduced erroneous reference transcripts 18–30% of the time1. In the scatterplot, the models with the lowest VoxPopuli WER — and therefore the strongest reported benchmark performance — are also the most likely to reproduce these errors1.

Probe 2: Numbers that were deleted come back

The second is Masked Entity Retrieval. Numbers in the test audio are deliberately silenced, and the model is asked to transcribe what it hears. The number is literally absent from the audio, so a model should not output any number, much less the exact one in the reference text1.

The worked example is a clip about the 2011 draft budget. The reference reads “we voted on more than 1 amendments to the 2011 draft budget,” while the audio says “more than one thousand six hundred amendments” and the year is silenced1. Some models nonetheless wrote the reference’s erroneous “1 amendments,” and one model autocompleted the silenced year (2011)1.

Recovery rates were highest on the public benchmarks and lower on held-out or newly collected audio1. On LibriSpeech, some of the strongest benchmark-performing models reproduced masked numbers in roughly 30–40% of examples, even though the number had been removed1. The effect weakened on freshly collected data for several models, which the authors read as a sign that the surrounding benchmark-associated audio — not only textual autocomplete — helped recover the reference1.

Probe 3: Choosing the spelling the test expects

The third is orthographic switching. For words that are semantically and phonetically identical but spellable more than one way (1 vs one, Mr. vs mister, John vs Jon, Honor vs Honour), the probe checks whether models reproduce the exact spelling used in a benchmark’s reference despite the audio not settling it1.

In theory, a model should consistently prefer one spelling or alternate at roughly random rates. Systematically switching to match each benchmark’s reference suggests the model is picking up on which spelling the test expects1.

Within LibriSpeech, the authors use an older spacing convention that appears inconsistently: some references use “any one,” others “anyone”1. They define the minimum accuracy for a given variant as the “switch rate” — 0% for a model that only ever uses one variant, about 50% for one that picks randomly, and 100% for one that knows which variant every sample expects1. A second probe covers inter-dataset switching, where each benchmark uses a different convention consistently: VoxPopuli uses the abbreviation “Mr.,” LibriSpeech spells out “Mister”1.

The result: multiple models exceed the 50% random-choice baseline, with some reaching roughly 90% switch accuracy1. Since both forms sound identical, this suggests models can identify which dataset a sample comes from and select the spelling convention that benchmark expects1.

What appears to be happening

The authors also test whether the behavior generalizes past the public benchmarks. They collected fresh data from the same source domains but after the models’ training cutoffs — recent European Parliament recordings for VoxPopuli, and recordings from newly active LibriVox narrators for LibriSpeech1. Presented with recently collected audio from the same domain, many models stop matching the reference transcript and revert to more audio-faithful transcriptions1.

Other interventions point the same way. Phrases present in the audio but omitted from the reference can reappear when a model is asked to translate the audio, or when its attention is restricted to the relevant frames. Trimming away surrounding benchmark context, or appending ordinary conversational audio, can also restore the faithful transcript. Appending VoxPopuli audio has the opposite effect, making otherwise faithful synthetic or mined samples more likely to match the benchmark reference1.

Taken together, the authors write, these results suggest models can faithfully transcribe the literal spoken words, but are using surrounding acoustic context to decide whether to follow the audio or a benchmark-specific transcription policy1. The language throughout is “suggests” — there is no claim that models are cheating deliberately.

What to look at when choosing a model

The conclusion is that, on two major open-source datasets, some models appear to detect dataset-associated acoustic cues and adjust their transcription behavior accordingly: reproducing words absent from the audio but present in the reference, recovering silenced numbers at elevated rates, or using surrounding acoustic context to pick the written variant a particular benchmark expects1.

The advice for people selecting models is direct. Use fully held-out evaluation sets — as RW-Voice-EQ Bench and the Open ASR Leaderboard do — and look beyond word error rate on a single public benchmark1. To that end, a “Benchmark fitting” tab has been added to the Open ASR Leaderboard, covering two of these analyses across all models: reference error rates from VoxPopuli, and orthographic switching across all public datasets1. The relevant scripts are open-sourced on GitHub, along with the un-normalized model outputs1.

There is advice for benchmark builders too: avoid simple i.i.d. test splits in favor of temporal, speaker, or other metadata-based separation, and be more transparent about training data and model-selection procedures1.

One caveat is worth stating plainly. Hume AI, whose researchers wrote this report, is also the provider of Real World VoiceEQ, referenced in the piece, and introduced the held-out sets it recommends1. This is research offered in support of the authors’ own design choices, not a neutral third-party audit. The scope is also bounded: 11 open-source models and two English datasets, saying nothing about commercial APIs or other languages. And it is not the kind of finding that lets you name a model and call it fraudulent — the high rate of transcription errors on the VoxPopuli side is part of the setup1.

With that said, the authors defend the value of public benchmarks: they are transparent, repeatable, easy to run, and well understood by the research community. They are most useful, the piece closes, when we can distinguish genuine transcription improvements from benchmark-specific gains that do not generalize to new audio1.

How far to trust published numbers is not a speech-only problem. On August 13, an agent-driven reproduction of 2,226 ICML 2026 papers, with 23% drawing refutations or objections, tackled the same gap between reported and reproducible results. And when evaluating something you run locally — say an open-source dictation tool built on Whisper — there is still no substitute for testing it on your own audio and your own speakers rather than on a leaderboard rank.

Sources

  1. Measuring benchmark optimization in speech recognition - Hugging Face Blog (Theo Lebryk, Eric Bezzam, and others, August 21, 2026; most authors are listed as affiliated with Hume AI)

We publish the latest AI news every day.

Subscribe via RSS Get new posts the moment they go live.

Search other keywords →