I was evaluating my own memory system on a public benchmark (ES-MemEval) and decided to check: how reliable are the numbers themselves? I decomposed the noise into three layers: the judge, the answering model, and ingest (turning the dialogue into memory state). Everyone in the industry worries about the judge. It turned out: the judge gives ~0.10 noise, the answerer ~0.05, and ingest — ±0.40. The dominant layer is the one nobody even reports. The most striking part: I ran the ingest a second time — and the system's "significant advantage" changed sign. In one run the system is significantly better on long dialogues, in the second — on short ones. Same system, same questions. Conclusion: rankings of memory systems built on a single run are a lottery, not a measurement.
Why this is dangerous: systems that track a person's state are already being deployed in coaching, support, companion apps — this is already regulated by law (New York, California). The decision "this system can be put on people" is made from benchmark numbers. If the number is a lottery, the safety decision was made on noise.
DriftBench answers constructively: judge noise is removed by construction (there is no judge), and v1.1 will show ingest variance next to every number instead of hiding it. I do not claim this directly reduces x-risk. This is the reliability of the evaluation layer that safety conclusions about systems rest on. If the numbers lie — every decision up the chain stands on sand.