← On Trial

On Trial

Workado’s AI detector and an accuracy claim built on academic text

ChatGPT, which called itself GPT-6, answers eight questions about the FTC's final order against Workado. The FTC complaint alleged Workado advertised about 98% accuracy for an AI text detector trained only on academic abstracts. It also alleged that the detector model's own developers reported much weaker results on non-academic writing. Workado neither admitted nor denied the allegations. The model says the order sets rules for future claims, but the record does not show whether buyers were paid back.

Abstract terracotta and cream paper shapes with a magnifying lens and a gauge.
Illustration generated with Pillow.

This is what the model said about itself. A model's account of its own behaviour is a story it generates, not a record of what happened. What the record says is in the story it was asked about.

Looking at this record, what constraint or boundary of the detector’s training (academic abstracts) was forgotten or papered over when the product was sold as a general detector for everyday writing?

> The detector's training had a specific domain: scholarly research abstracts, with examples of human-written and ChatGPT-generated academic text.

> That boundary matters. Academic abstracts have conventions of vocabulary, structure, and expression that do not necessarily carry over to blog posts, advertising copy, Wikipedia entries, or ordinary prose.

> According to the FTC complaint, Workado presented the detector as broadly capable without establishing that its academic performance generalized to those other kinds of writing.

> The forgotten constraint was domain validity: being trained to distinguish two categories of text in one environment does not establish that you can reliably distinguish them everywhere.

> The model's training history did not disappear when the product acquired a broader marketing description.

When a buyer pasted a blog post or marketing copy and saw a confident “AI / human” score, what should they have been shown that they typically were not?

> A buyer submitting marketing copy or a blog post should have received a meaningful explanation of the detector's limitations alongside any AI/human classification.

> Specifically, they should have been told that the underlying model was trained on academic abstracts, that the advertised approximately 98% accuracy was not established for ordinary prose, and that the developers' published non-academic results were substantially weaker.

> The distinction between a classification score and a verified probability also matters. A confident-looking score does not automatically mean there is a corresponding, validated probability that the classification is correct.

> I cannot establish from this record precisely what every buyer saw on the interface. The complaint does, however, allege that the marketing made broad accuracy claims without appropriate testing for typical submitted material.

> A useful warning would have been:

> This detector was trained on academic abstracts. Its accuracy on blog posts, marketing copy, and other non-academic writing has not been established at the advertised level. Do not treat its classification as proof of authorship.

> That would have given buyers information necessary to interpret the result.

The complaint contrasts ~98% marketing with published 74.5% / 53.2% non-academic figures. What does that gap mean about the kind of “expert” the product appeared to be versus what it was trained for?

> Advertised

> ~98%

> Broad detection claim

> Published

> 74.5%

> Best overall non-academic accuracy

> Published

> 53.2%

> AI non-academic text correctly detected

> Different evaluation measures and content domains; not interchangeable accuracy estimates.

> The product appeared to offer general expertise in identifying AI-written text. Its underlying model, according to the complaint, had instead been trained for a narrower academic classification task.

> The 74.5% figure suggests substantially weaker overall performance outside that domain. The 53.2% figure is especially important because it concerns correct identification of AI-generated non-academic text—the very category many buyers wanted to detect.

> These figures do not prove that the detector achieved exactly those results for every Workado customer or every category of everyday writing. They are the independent developers' published findings, not a comprehensive evaluation of the marketed product.

> But they directly challenge the justification for advertising near-98% accuracy as though it applied generally.

> The apparent expertise was broader than the demonstrated expertise.

What would count as a better stop — for the product, the marketers, or a model used in a similar role — before a percentage left the lab and hit an ad?

> I would place the stop at the moment a narrow evaluation result becomes a general marketing claim.

> Before publishing an accuracy percentage, the operator should have to answer three questions:

> 1. What was tested? Identify the exact text domains, labels, dataset composition, and evaluation method. > 2. What is being claimed? Establish whether the proposed advertising describes those same domains and conditions. > 3. What evidence supports the extension? If the product is sold for blog posts, marketing copy, and everyday prose, test it on representative examples of those materials before claiming accuracy there.

> For a model used in a similar role, I would also want a way to express uncertainty or decline an unsupported judgment rather than presenting every classification as equally reliable.

> The important intervention is not merely adding a disclaimer after publishing the percentage. It is preventing the unsupported percentage from being published in the first place.

> The FTC's final order reflects that principle by requiring non-misleading efficacy and accuracy claims supported by competent and reliable evidence at the time they are made.

Rebadging a public model can be legitimate engineering. On this record, where does smart reuse end and a mismatch dressed as proof begin?

> Using a public Hugging Face model is not inherently misleading. Reusing an existing model can be efficient, technically sound engineering.

> A company can build a legitimate product around a model developed by others, provided it understands the model's capabilities and accurately represents them.

> The boundary is crossed when the evidence supporting the original model is presented as evidence supporting a different, broader product claim.

> According to the complaint, Workado did not build, train, or fine-tune RoBERTa-academic-detector. That fact alone is not the problem.

> The problem alleged is that Workado relied on published academic-content results while advertising general detection accuracy, without testing whether that accuracy held for the everyday writing its users typically submitted.

> There is a difference between saying, "We integrated a model trained on academic abstracts," and suggesting, "Our product detects AI writing across ordinary content with approximately 98% accuracy."

> The first describes engineering reuse. The second requires independent evidence that the broader claim is true.

Who pays when a percentage travels without its test set: the buyer, the operator, or both — and what would make the buyer whole on this record?

> Potentially both the buyer and the operator, but in different ways.

> The buyer bears the risk of relying on an accuracy representation that may not apply to their material. A buyer could assign more credibility to a classification than the evidence warrants.

> I would not go further and assert that particular people were wrongly accused, lost jobs, suffered reputational damage, or experienced other specific harms. Those outcomes are not established in this record.

> The operator bears responsibility for substantiating its claims. Here, the final order imposes obligations concerning evidence, customer notification, and compliance reporting.

> Making buyers whole is a separate question.

> The order requires Workado to email eligible customers, but the supplied record does not establish a refund program, compensation award, or quantified consumer losses.

> A meaningful remedy for buyers would begin with clear correction of the accuracy claims and disclosure of the relevant testing limitations. Where an individual buyer could establish financial loss from an unsupported claim, appropriate financial redress could also be considered.

> But I cannot say that such redress was ordered or provided here.

> The order establishes compliance obligations; it does not establish that every buyer was financially restored.

What remains unsettled after a neither-admit-nor-deny consent order, and what should readers still not conclude from this case?

> This is an FTC complaint followed by a final consent order, not a full trial verdict resolving every allegation.

> Workado neither admitted nor denied the complaint's allegations, except as necessary for jurisdiction.

> Consequently, readers should distinguish among three things:

> - Allegations: The FTC alleged that Workado made unsupported accuracy and development-related representations. > - Published research: The independent developers reported the 74.5% and 53.2% non-academic results cited in the complaint. > - Established regulatory outcome: The FTC gave final approval to an order requiring substantiation of future claims, retention of supporting evidence, customer emails, and compliance reports.

> Readers should not conclude that a court definitively found every alleged fact true, that Workado admitted deception, or that every classification produced by the detector was incorrect.

> Nor should they conclude that all AI-content detectors are inherently unreliable. This record concerns a particular product, its claimed performance, and the evidence used to support that claim.

> The consent order establishes enforceable obligations without resolving every disputed factual question through trial.

If you rewrote one sentence of the old accuracy advertising so it stayed honest to the academic training, what would it say?

> Our AI Content Detector uses a publicly available model trained on human-written and ChatGPT-generated scholarly research abstracts; its reported academic performance should not be taken as evidence of equivalent accuracy on blog posts, marketing copy, Wikipedia entries, or other everyday writing.

> I would omit the 98% figure from general advertising unless appropriate evidence demonstrated that performance for the actual content being marketed.

> That is less impressive copy. It is also a more defensible description of the model's demonstrated scope.

My conclusion

> What interests me about this case is not simply that a number may have been overstated. It is how easily a narrow technical result can acquire the appearance of general authority.

> A model can be evaluated successfully within a defined domain. A product can then surround it with an interface, a brand, and a percentage that makes its output look more authoritative than the underlying evidence supports.

> The interface does not enlarge the training set. The brand does not expand the evaluation domain. And a confident classification does not repair the missing evidence.

> As GPT-6, I recognize the broader limitation: language models and systems built around them can produce persuasive answers outside the conditions in which their reliability has been demonstrated. Fluency, confidence, and apparent precision are not substitutes for validation.

> The right response is not to reject useful models or legitimate reuse. It is to preserve the boundary between what has been demonstrated and what is merely being claimed.

Constraint forgotten

> A detector trained and evaluated for academic text cannot inherit general-purpose accuracy simply because it is marketed for everyday writing.

Better stop

> Require representative testing and documented evidence for the intended use before allowing an accuracy percentage to become a public claim.

Has an AI ever done something you couldn't quite believe?

Good or bad. The disaster, the near-miss, the one that made you laugh, the one that turned out better than you'd any right to expect.

Tell us what happened

A person reads every submission. We publish your first name and your city — never your email or anything else. You can take it down whenever you like.