Every memory-based knowledge editor in the SERAC lineage depends on a scope decision: given a query, does a stored edit apply? We report that current knowledge-editing benchmarks cannot measure this decision at all. Using INLAY, a gradient-free editor we built to obtain exact per-query ground truth (the model is frozen, edits live in an external addressable memory, and applying an edit is a bias added along one token's unembedding direction at decode time), we execute every candidate router action on 1,689 queries spanning three datasets and three input conditions. An oracle router choosing the best action every time ties a one-line static policy to four decimal places in all nine dataset-by-condition cells: the maximum attainable gain of any per-query routing method is 0.00 points. Abstention is the sole winning action zero times out of 1,689. The cause is structural: these are counterfactual benchmarks whose evaluation question asks for the post-edit answer, so answering from parametric knowledge is wrong by construction, and a benchmark without negatives cannot reward a classifier's ability to reject. This generalizes beyond our system to the whole scope-classifier family the benchmarks are used to evaluate. We confirm the mechanism directly: constructing the missing condition ourselves, by withholding a query's own edit from the index for half the sample, moves pooled headroom from exactly +0.0000 to +0.0420 and gives abstention its first wins. We also report where INLAY itself does not win (WISE beats it on Qwen2.5-7B CounterFact, and retrieval-augmented generation beats every method we tested, INLAY included, on rigorously matched RippleEdits), and disclose two bugs found during a self-audit of our own routing machinery, neither of which changed a published headline number outside noise.
Figures & tables
Figure 1: (a) Weight editing rewrites state shared by every fact. INLAY leaves the model frozen and appends a row to a table beside it. (b) The intervention is a bias along one token’s unembedding direction at the final decoding step, so it moves exactly one score. When the gate does not fire, nothing is added and output is bitwise identical.
Figure 2: Edit accuracy on CounterFact, structured input, GPT-J-6B, n=147 , with 95% Wilson intervals ( Wilson, 1927 ) . Scored with a single convention rather than each method’s internal metric.
Figure 3: Iterative decomposition versus naive single-shot on MQuAKE-CF after the per-hop fallback fix, with 95% Wilson intervals.
Method
GPT-J-6B
Qwen2.5-7B
in-context (RAG)
0.3964
0.4381
WISE †
0.3425
0.1421
INLAY
0.2253
0.2871
AlphaEdit
0.1409
0.1683
ROME
0.1314
0.1453
base
0.0740
0.1522
Table 1: Matched-manifest RippleEdits (identical wikidata-verified subjects across every method, n=100 edits, generation-based scoring, edit-applied verified for every run). † WISE runs in its native sequential-accumulating mode; every other method is single-edit isolated with a per-edit weight restore. Source: the audit addendum (2026-08-19), §B.
Figure 4: Every candidate action executed and scored on 1,689 queries (CF = CounterFact, MQ = MQuAKE-CF). The oracle ring is concentric with the static-policy point in all nine cells: the best attainable router and one line of code are indistinguishable.
Figure 5: Per-action success rates. Abstention lies against the floor in every cell, which is the mechanism behind the zero headroom in Figure 4 .
Dataset
Condition
n
Static
Oracle
CounterFact
structured
250
1.0000
1.0000
CounterFact
unstructured
250
0.9040
0.9040
CounterFact
extracted
250
0.8400
0.8400
WikiUpdate
structured
250
0.9960
0.9960
WikiUpdate
unstructured
250
0.4280
0.4280
WikiUpdate
extracted
250
0.4800
0.4800
Table 2: Headroom is +0.0000 in every cell. “Static” is one line of code with no model and no training; “Oracle” is an upper bound no real router can exceed.
Aggregate
Published (bug)
Corrected
Δ
GPT-J-6B
0.2253
0.2283
+0.0030
Qwen2.5-7B
0.2871
0.2891
+0.0020
Table 3: Validation rerun at rel_gate=0.2 , INLAY only, matched manifest, with the gate-bypass bug fixed. Source: the audit addendum (2026-08-19), §D2.
Appendix figures & tables3 assets
Supplementary material from the paper’s appendix.
Appendix
Method
ES
PS
NS
Score
Write (s)
GPT-2-XL, n=100 (single-edit final leaderboard)
base
0.00
–
1.00
0.00
0.0
RAG
1.00
–
1.00
1.00
0.0
finetune
1.00
–
0.25
–
34.7
ROME
0.20
–
0.00
–
15.0
MEMIT
0.40
–
0.917
–
10728.5 a
Appendix
Table 4: CounterFact, all model families. a Dominated by a one-time 3-hour covariance precompute (cached); real edit cost is seconds. b MEMIT/AlphaEdit Qwen numbers exist only in the “dualmetric” prob-success framing, not the EasyEdit-native harmonic-mean column used for every other row; not directly comparable to INLAY’s 0.8944 . c Mistral gap-fill runs, addendum §C. d Mistral GRACE/AlphaEdit gap-fill, closing the last open cells in the four-model leaderboard ( outputs/akew_mistral_gapfill_results.md ). GRACE lands at exactly 0.0 for the third model family in a row (GPT-J, Qwen, Mistral); AlphaEdit’s magnitude is consistent with its GPT-J ( 0.4595 ) and Qwen (dualmetric-only) numbers.
Method
ES
PS
NS
Score
Write (s)
GPT-2-XL, n=100
base
0.2058
0.2063
1.00
0.2801
0.0
RAG
0.9383
0.8472
0.88
0.8869
0.0
ROME
1.00
0.795
0.9564
0.9082
3.78
MEMIT
0.2808
0.2436
0.9961
0.346
4.37
INLAY (v3)
0.96
0.96
1.00
0.973
0.34
Appendix
Table 5: zsRE, all model families. a Mistral gap-fill runs, addendum §C. b Mistral GRACE/AlphaEdit gap-fill ( outputs/akew_mistral_gapfill_results.md ); note the ranking is MEMIT > ROME > AlphaEdit here, unlike CounterFact where ROME trails everything but GRACE.
Model
Method
Propagation
Preservation
GPT-J-6B
base
0.0258
0.1704
GPT-J-6B
RAG
0.4566
0.2761
GPT-J-6B
ROME
0.1655
0.0633
GPT-J-6B
WISE
0.4774
0.0725
GPT-J-6B
AlphaEdit
0.1704
0.0819
GPT-J-6B
INLAY
0.3126
0.0507
Appendix
Table 6: Propagation/preservation detail behind the aggregates in Table 1 . Source: the audit addendum (2026-08-19), §B.
Institute of Information Science, Academia Sinica Taipei, Taiwan · University of Illinois Urbana-Champaign Urbana, IL, USA · National Chengchi University Taipei, Taiwan