Poisson Tasks
Tool-use tasks with a known right answer, generated on your machine, and a card that says what each level of difficulty was worth to the model you ran.
Each task asks a model to move one record of a small mock ledger up a ladder of stages, using only the tools it is given. Every task is generated with its own checker, so a run is scored exactly, with no judge model. Poisson Tasks is one of the open-source tools from Poisson Labs.
1. Install it. Needs Python 3.11 to 3.13; check with python3 --version (python.org has one, and so does uv python install 3.13).
pip install poisson-tasks
2. Open it. poisson-tasks with no command opens a guided session in your terminal. Nothing calls a model until you say yes to a run's cost.
poisson-tasks
- In a new folder it walks the first run through: what to test (a model on the built-in tasks, or on your own tools), one task to look at, the run with its cost shown before it asks, the card, and what to do next.
- In a folder already set up it shows where you are and offers the next steps.
Or run the same steps as commands, for scripts and CI.
Say what to test. init asks which model to test, which environment variable holds its key (it records the variable's name and never the key), and what to measure, and writes tasks.toml.
poisson-tasks init
Run it. run shows how many calls it will make and about what they will cost before it spends anything, and stops at your cap. Ctrl-C stops it; running it again picks up where it stopped.
poisson-tasks run
Read the card. card writes what each level was worth to that model, and what that does not tell you.
poisson-tasks card
Python 3.11 to 3.13, on macOS or Linux. A first run against gpt-5-nano is 30 episodes and costs about two cents.
Who it is for
People training models. Checkable tool-use tasks at a difficulty you choose, scored exactly, with a card for each model you run. poisson-tasks export --to verifiers hands the same tasks to verifiers to run under your own loop (verifiers-export.md).
Agent teams. Tasks built on your own tools. Bring an OpenAI tools file, an MCP tool list (or an MCP server, started with --mcp-command) or an OpenAPI document. Tasks simulates the responses from your schemas, never calls your backend, and the card shows where your setup breaks (own-tools.md; how the responses are made and the contract hash are in own-tools-reference.md).
Both start the same way: poisson-tasks on a terminal, or the commands above. For your own tools, one command sets up a folder, with the file beside tasks.toml (the session's setup asks the same, as its first question):
poisson-tasks init --own-file <your file>
If you ran the built-in tasks first and want your own tools next, poisson-tasks init --force asks its questions again, keeping the old tasks.toml as tasks.toml.bak, or run poisson-tasks init in a new folder.
Reading the card
For each level of each knob you ran, a card says what the level was worth to the model:
- strict pass@1 with its 95% interval, leaky pass@1, how often the model carried the record past the goal, and what an episode cost;
- the model, where it was served and what produced the run, so a change between two cards can be traced to a changed tool contract or generator rather than the model;
- what it does not claim: it is one model's result on these tasks, and ranks no models.
It refuses to publish at all when more than 10% of the attempts at a level made no tool call, because that measures whether the model starts, not how hard the level is. reading-a-card.md explains every column and every line a card can carry.
What a first run costs, and what it writes
run prints its estimate before it asks. A first look is 30 episodes against gpt-5-nano: about two cents. Every run has a finite cap, by default the larger of $1.00 and twice the estimate, rounded up to a whole dollar.
init and run write only to the folder you work in, apart from a short list:
- the tokenizer file, fetched once into the installed package;
- uv, for the harness: with uv 0.6.10 or later already on your
PATH, the installer is not fetched and your uv is left as it is; without one, uv's installer from astral.sh puts one in~/.local/bin; - verifiers' cache, and temporary files verifiers and uv leave behind.
A run sends your key to your model's endpoint and nowhere else, and uploads nothing. before-a-run.md has every item, the limit on open files a run raises, and the commands verifiers installs beside poisson-tasks.
What a task looks like
A task moves one record of a mock ledger up a fixed ladder of eight stages, with a block of sixteen tools. One call moves one record one stage, and every call after the first carries the token the previous call returned, so a task that is d stages deep takes at least d calls whatever the model already knows.
The verdict on an episode is one of ten labels, and every episode is judged strict (the record ends exactly at the goal, nothing else moved, and the model ended with a reply) and leaky (reaching the goal is enough) at once. Generation makes no model calls and no network calls, and is byte-identical across runs, processes and platforms. the-task.md has the domain and the verdicts.
The dials
A knob is a dial you turn on purpose; an arm is one setting of a knob (depth:d3 is depth at level 3); a level is one setting of the knob. Two arms of one knob differ in that knob and in nothing else, which a set of thirty-one checks (the pin ledger) holds on every generated task.
There are fourteen dials. Each is labelled with what the evidence says, and no more:
| dial | varies | what the evidence says |
|---|---|---|
depth |
how many chained calls the goal is away | Shown to make tasks harder on gpt-5-nano, in strict pass@1, from 0.547 at d1 to 0.177 at d5. Not on Qwen3-8B, which goes past the goal at the low levels. Measured on the published cards. |
faults |
how many calls on the way answer "unavailable" and must be made again | Shown to make tasks harder on Qwen3-8B · gpt-5-nano: does not bite; Qwen3-8B: bites |
history |
how many tokens of earlier tool work the conversation holds | Shown to make tasks harder on both models · gpt-5-nano: bites; Qwen3-8B: bites |
shape |
how many records four stage calls advance side by side | Shown to make tasks harder on Qwen3-8B (four wide the harder) · gpt-5-nano: does not bite; Qwen3-8B: bites |
distractor |
how many of the sixteen tools in the block are decoys | Experimental. Both published cards show it did not make tasks harder. |
similarity |
how many digits of the right tool's ledger number each lookalike tool shares | Available · retested in v2 · gpt-5-nano: does not bite; Qwen3-8B: does not bite |
block |
how many tools are offered | Available · retested in v2 · gpt-5-nano: does not bite; Qwen3-8B: does not bite |
arguments |
how many values each call must carry, copied from the request | Available · retested in v2 · gpt-5-nano: does not bite; Qwen3-8B: does not bite |
spread |
how many tool answers the entry code is split across | Available · retested in v2 · gpt-5-nano: top easier; Qwen3-8B: cannot tell |
timeouts |
how many calls on the way time out, nothing having landed, and must be made again | Experimental. Not measured on any model yet; added in 0.3.0 |
ratelimits |
how many calls on the way answer "rate limited" with a retry-after, and must be made again | Experimental. Not measured on any model yet; added in 0.3.0 |
landed |
whether the write goes through but answers a timeout, so a blind retry is a duplicate; on your own tools | Experimental. Not measured on any model yet; added in 0.3.0 |
baddata |
how little a read that answers "ok" and is wrong gives away; the same read made again is right | Experimental. Not measured on any model yet; added in 0.4.0 |
lagged |
whether the first read after a write still shows the record as it was, so believing it means writing twice; on your own tools | Experimental. Not measured on any model yet; added in 0.4.0 |
"Bites" means a drop of at least 0.15 in strict pass@1 from the dial's lowest level to its highest, with a 95% interval that excludes zero. Every dial has tasks, and --arm reaches all fourteen:
poisson-tasks generate --arm block:k32 --show
knobs-and-arms.md has each dial's levels and its full evidence, which recipes reach which dial, what a dial needs on your own tools, the probe's table with every contrast and its interval, and three things about how the probe ran that you should know.
The published cards
Two cards ship inside the package, for gpt-5-nano and Qwen3-8B: depth and the decoy-tools dial at every level, with their control arms, at 60 tasks per level and 5 attempts each, 4,200 episodes a card.
Both were measured on an earlier build of the generator, so in this release card --published reads each not current, and a card from your own run is not set beside them (card --compare published says so in one line). A later release measures them again on the current generator. published-cards.md says what they show and where the two models agree, and calibration.md holds both in full.
The commands
poisson-tasks is one command with seven verbs:
poisson-tasks init: ask what to test, and writetasks.toml; spends nothing.poisson-tasks generate: make the plan's tasks with no model and no network, or show one task in full.poisson-tasks run: show the plan and its cost, ask, then run the tasks against the model.poisson-tasks card: build the card from a run, or rebuild the published cards, or compare two runs.poisson-tasks verify: judge an answer with the task's own verifier, with no model. In this release it refuses tasks made on your own tools, which verify does not judge on its own yet: a run's card judges every episode on them, by replay.poisson-tasks export: write the configs another runner reads (verifiers).poisson-tasks doctor: say whether this environment is ready, and what to do if not.
Every verb ends the same way: a result line first, problems on standard error, and an exit code that means the same everywhere. commands.md has each verb's help, what it writes and how it ends, and config.md every setting of tasks.toml.
From Python, and under verifiers yourself
- python.md: everything the command does is a library. It shows how to make a task, judge an answer, check a contrast, rebuild a published card and read your own tools, and points to three short programs in the repository's
examplesfolder as source to read. - verifiers-export.md: running the tasks under verifiers' own
eval, with the taskset's id, the signals it reports, the harness the numbers were measured under, and whyevalhas to be run by its path.
What is not claimed
- No dial is claimed to work across models beyond the table above. Two models from two families were measured; a level's number is one model's, and none is claimed for a model that has not been run.
- The command has not been run against every provider for real. The test suite runs it against stand-in servers that speak the APIs of OpenAI, Anthropic, Ollama and vLLM, not against the real services; the published cards were measured against OpenAI's API (
gpt-5-nano) and a vLLM server (Qwen3-8B) through the same harness. A first run against a provider is worth a small cap. - A model you serve yourself is recorded as the server reports it, not as a pinned serving stack; the card says how the model was served is not recorded.
- Windows is not supported.
runrefuses there, because the harness uses a POSIX shell.
Contributing
Anyone can open an issue. Pull requests come from invited collaborators; to help, open an issue first.
CONTRIBUTING.md covers setting up a checkout, the tests and the rules the repository keeps. The changes are in CHANGELOG.md, and the third-party material is itemised in NOTICE.
Citation
@misc{kolasinski2026poissontasks,
author = {Kolasinski, Taylor},
title = {poisson-tasks: deterministic tool-use tasks, each generated with its verifier},
year = {2026},
howpublished = {\url{https://github.com/poisson-labs/tasks}},
note = {Poisson Labs}
}
Licence
MIT. See LICENSE. Third-party material is itemised in NOTICE.
Metadata
Release files for poisson-tasks 0.4.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| poisson_tasks-0.4.2.tar.gz | 3.0 MB | Without provenance | Details for poisson_tasks-0.4.2.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| poisson_tasks-0.4.2-py3-none-any.whl | Python 3 | none | any | Details for poisson_tasks-0.4.2-py3-none-any.whl |
Total release size: 3.6 MB
Release files / poisson_tasks-0.4.2.tar.gz
| Download URL | poisson_tasks-0.4.2.tar.gz |
|---|---|
| Size | 3.0 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
10a96217867d4451969abee947b3b47b57769b5674cf48db044bad392cab5061
|
|
BLAKE2b-256 checksum How to use checksums |
8ad04fec646dd65a8b20b6bf6de586ad5b9e9957d8e1beffb4298c834d0aee9f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.13
|
Release files / poisson_tasks-0.4.2-py3-none-any.whl
| Download URL | poisson_tasks-0.4.2-py3-none-any.whl |
|---|---|
| Size | 676.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
70049727f80418d8d8829f87dffe80a746656edaa873fcdaa0f5bd3143537b08
|
|
BLAKE2b-256 checksum How to use checksums |
7cd7f076f2998a9a45a63c12d9cc800f285c9d7c70327b662ede6955a515b3f3
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.13
|
Security for poisson-tasks 0.4.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.