Skip to content

What AI Still Cannot Do

Current AI systems cannot reliably tell you when they are wrong, cannot know what happened after training ended unless something looks it up for them, cannot be counted on to repeat a success once conditions change, and cannot be the party held responsible for an outcome. Most are engineering problems being narrowed year by year. The last is not an engineering problem at all.

The limits are not where intuition puts them

The usual answer is a list of human virtues: empathy, creativity, judgment. Comforting, and mostly untested. The measured picture is stranger.

In a randomised field experiment with Boston Consulting Group, published in Organization Science in 2026, 758 consultants worked with and without GPT-4. On tasks inside the model's competence, the consultants using AI finished more of them and worked faster. On one task deliberately placed just outside it, they were markedly less likely to reach the correct answer than colleagues working without AI at all. The authors called the pattern the jagged technological frontier: the boundary between what AI does well and badly is irregular, and it does not track human difficulty. The size of each of those effects is set out in the evidence on AI and productivity.

Stanford's 2026 AI Index illustrates it by putting two different systems side by side. Gemini Deep Think took a gold medal at the 2025 International Mathematical Olympiad. On ClockBench, an unrelated test of reading analogue clocks, the strongest model measured was GPT-5.4 High, correct 50.6% of the time in March 2026 against 90.1% for humans on correctly formatted clocks. Separate systems, separate tests, which is what makes the pairing useful: the field can take the olympiad medal and still lose to the clock. The International AI Safety Report 2026, chaired by Yoshua Bengio, puts it plainly: leading systems "may excel at some difficult tasks while failing at other, simpler ones." Unevenness on that scale is also why the question of how close AGI is has no clean answer.

It cannot reliably tell you when it is wrong

A language model produces the next likely piece of text. Nothing in that process separately checks whether the result is true, and the model's confidence is a poor guide to its accuracy.

Researchers at OpenAI and Georgia Tech argued in September 2025 that this is partly a scoring problem. Most evaluations award a point for a correct answer and nothing for admitting uncertainty, so a system optimised against them learns that guessing beats abstaining, as a student does on a multiple-choice exam. Their remedy is to change what leaderboards reward. That is a testable claim about incentives from people with an interest in the field, not a settled finding.

Looking information up helps and does not fix it. Stanford's RegLab tested three purpose-built legal research tools that retrieve real legal sources before answering, across 202 queries, as those products stood in 2024. Lexis+ AI hallucinated on about 17% of them, Westlaw AI-Assisted Research on about a third, and Ask Practical Law AI on about 19% while declining to answer properly on 62%. Accurate answers ran from 65% down to 19%. These are products sold to lawyers on the strength of grounding answers in sources. The mechanism is covered in depth in why AI makes things up.

It does not know what happened after it stopped learning

A model's factual knowledge is fixed when its training data ends. That date, the knowledge cutoff, is published by most developers and is softer than it sounds. Researchers at Johns Hopkins found in 2024 that the effective cutoff, the point where knowledge of a given source actually stops, often differs from the reported one and varies by topic, because large web crawls carry older material inside newer collections and deduplication misses near-copies. A stated cutoff is an approximation, not a line.

Search and retrieval close most of the gap, which is what RAG does. Retrieval changes where the answer comes from. It does not give the system a way to judge whether the page it found is any good.

A benchmark score is not a job reference

Benchmark results are the main public evidence about AI capability, and weaker than their precision suggests. Three documented problems sit underneath them.

Tests get used up. Humanity's Last Exam was designed to stay difficult and still gained about 30 percentage points between 2024 and 2025. That is benchmark saturation, and it shortens the window in which a test can separate systems.

Tests contain errors. A 2025 review cited by the AI Index found invalid question rates from 2% on MMLU Math to 42% on GSM8K, one of the most quoted maths benchmarks in the field.

Tests leak. When benchmark items reach training data, a score measures recall rather than capability, and contamination is hard to rule out from outside. The AI Index cites the 2025 dispute over Meta's Llama 4, which the company denied.

The gap also opens between two tests of the same kind. Robots reached 89.4% success on RLBench, eighteen short manipulation tasks in a controlled simulation, as of January 2026. On BEHAVIOR-1K, which is also a simulation but sets long household activities drawn from what people said they wanted help with, the best team in the 2025 challenge finished 12.4% of tasks outright. Both figures come from simulators. Lengthening the task, rather than leaving the simulator, is what moved one number to the other.

It does not hold up when the conditions change

A model learns the statistical regularities of the data it trained on. Move it where those regularities differ and performance falls, usually with no warning in the output.

The clearest documented case is medical. The Epic Sepsis Model was running in hundreds of US hospitals. Researchers at Michigan Medicine validated it externally across 27,697 patients and 38,455 hospitalisations and published in JAMA Internal Medicine in 2021. It scored an area under the curve of 0.63, against the 0.76 to 0.83 the developer had reported, and at the recommended alert threshold caught 33% of sepsis cases, missing 1,709 of 2,552 patients who had sepsis while firing alerts on 18% of all hospitalisations.

The model worked where it was built and did not transfer. That is why generalization and concept drift are first-order concerns for anyone deploying these systems, and why a vendor's validation figures describe their setting rather than yours.

It cannot be handed long work without checkpoints

METR, a nonprofit evaluation organization, measures task difficulty in units of human time: the length, in human expert working time, of a task a model completes at a given success rate. It is not a measure of how long an agent can run unattended, and METR says so directly. In its March 2025 paper that figure had doubled roughly every seven months across six years, and it has kept climbing. On METR's live results page, last updated on 8 May 2026, the strongest released model measured, Claude Opus 4.6, sits near twelve hours at 50% success and a little over an hour at 80%. A preview build, listed as Claude Mythos Preview (early), is charted higher again at roughly seventeen hours at 50%, past the point where METR says its own task set stops measuring reliably.

Two things matter. The number is rising fast, so any figure quoted here will date. And 50% is not a working standard: a coin flip on whether the job got finished is not delegation. METR notes that measurements above 16 hours are unreliable with its current task set, that the tasks are mostly software, machine learning and cybersecurity, and that they represent what someone with no prior context could do rather than skilled work inside an organization. For now, AI agents need checkpoints rather than a brief and an afternoon.

It cannot be the one who is accountable

This limit is different in kind. It does not move when models improve, because it is not about capability.

In February 2024 the British Columbia Civil Resolution Tribunal decided Moffatt v. Air Canada, after the airline's chatbot gave a customer wrong information about bereavement fares. Air Canada argued, among other things, that the chatbot was a separate legal entity responsible for its own actions. The tribunal rejected that and ordered the airline to pay. Responsibility stayed where it started.

Regulators have written the same principle into law. Article 14 of the EU AI Act requires high-risk systems to be designed so they can be "effectively overseen by natural persons" while in use, and that oversight includes overriding an output, declining to use the system at all, and staying alert to automation bias. Where a decision needs someone answerable for it, better models do not remove the need for that person, which is part of why the jobs question rarely resolves into simple replacement.

What would move each of these

LimitationWhat would change it
Unreliable self-assessmentScoring that rewards abstention, and verification built into the system
Knowledge cutoffContinuous updating, or retrieval that checks its own sources
Scores that do not transferEvaluation on real tasks, held out and uncontaminated
Brittleness across settingsRequired local validation and monitoring after deployment
Reliability on long tasksAlready moving, doubling roughly every seven months
AccountabilityNot a technical limit. It would take a change in law

Five of the six are open engineering problems where progress is real and uneven. The International AI Safety Report 2026 puts the pace this way: the trajectory to 2030 is uncertain, current trends are consistent with continued improvement, and progress could plateau, hold steady, or accelerate dramatically. Date every claim about a limitation, including the ones here, and check whether it still holds when you need it to.

Frequently Asked Questions

What is AI's biggest weakness?

A system's confidence is a weak guide to whether it is right. Models write equally fluent answers whether the underlying claim is accurate or invented, and they rarely signal doubt. Other limits you can anticipate. This one means checking work that already looks finished, which is slow, and which people stop doing once the tool has been right several times running.

Can I trust AI for factual research?

Treat what it gives you as leads rather than a result. Stanford's RegLab found that specialist legal tools built to cite real legal sources still produced unsupported or fabricated content on 17 to 33% of queries, as those products stood in 2024. For anything with consequences, open the source and confirm it says what the summary claims. Checking is still faster than drafting from nothing, which is where the real saving sits.

Does a high benchmark score mean AI will be good at my job?

Not on its own. A benchmark is a fixed set of questions asked under test conditions, and three things weaken the step from a score to your work. Tests saturate, so recent gains can reflect a ceiling rather than a capability jump. Tests contain errors, with one review finding a large share of invalid items in a widely used maths benchmark. And test items can reach training data, turning a score into a memory check. Robotics shows it starkly, with short simulated tasks near 90% success and long simulated household ones in the low teens. The useful test is a small trial on your own work, scored by you.

Are these limits the same for every AI tool?

Mostly, because they come from how the systems are built rather than from any one product. A chatbot, a coding assistant and an image model all share the self-assessment problem and the transfer problem, since neither is solved by the training method any of them uses. The knowledge cutoff is the exception among the technical limits: a tool that searches the web before answering sidesteps most of it, though it then depends on whether the page it found was any good. Accountability is identical everywhere, because it is set by law rather than by the tool.

What should I check before trusting an AI tool with real work?

Four things, in this order. Run it on cases where you already know the right answer, because a vendor's figures describe their setting rather than yours. Check whether it gives sources you can open, and open two of them. Note the date attached to anything it tells you, and to any benchmark result quoted at you, since both age quickly. And decide who will be answerable for the output before it goes anywhere, because that person is the one thing the tool cannot supply.

What could AI never do?

Never is the wrong word for most of the list. Unreliable self-assessment, a fixed knowledge cutoff, scores that do not survive contact with real work, brittleness when conditions change and patchy reliability on long tasks are all open engineering problems, and each has been narrowing. Assume any specific limit stated today needs rechecking later, including the ones in this article. One item is different in kind. Being the party answerable for an outcome is assigned by law and by institutions rather than produced by capability, which is why a tribunal rejected the argument that an airline's chatbot was responsible for its own advice, and why the EU AI Act requires high-risk systems to be overseen by people who can override them. Better models do not change that one.

Sources

  1. Fabrizio Dell'Acqua, Edward McFowland III, Ethan Mollick, Hila Lifshitz, Katherine C. Kellogg, Saran Rajendran, Lisa Krayer, François Candelon and Karim R. Lakhani, "Navigating the Jagged Technological Frontier: Field Experimental Evidence of the Effects of Artificial Intelligence on Knowledge Worker Productivity and Quality," Organization Science, Articles in Advance, pp. 1-21, published online 11 March 2026, DOI 10.1287/orsc.2025.21838; published version hosted by Harvard Business School. https://www.hbs.edu/ris/Publication%20Files/dell-acqua-et-al-2026-navigating-the-jagged-technological-frontier_5c589c8c-fbb5-458f-b285-c944746cd717.pdf
  2. Stanford Institute for Human-Centered AI, "The 2026 AI Index Report, Chapter 2: Technical Performance," 2026. https://hai.stanford.edu/assets/files/ai_index_report_2026_chapter_2_technical.pdf
  3. International AI Safety Report 2026, Executive Summary, chaired by Yoshua Bengio, February 2026. https://internationalaisafetyreport.org/publication/2026-report-executive-summary
  4. Adam Tauman Kalai, Ofir Nachum, Santosh S. Vempala and Edwin Zhang, "Why Language Models Hallucinate," 4 September 2025. https://arxiv.org/abs/2509.04664
  5. Varun Magesh, Faiz Surani, Matthew Dahl, Mirac Suzgun, Christopher D. Manning and Daniel E. Ho, "Hallucination-Free? Assessing the Reliability of Leading AI Legal Research Tools," Journal of Empirical Legal Studies, 2025, 22:216-242. https://nlp.stanford.edu/~manning/papers/Magesh-Hallucination%E2%80%90Free-2025.pdf
  6. Stanford RegLab, publication page for the above, with summary findings. https://reglab.stanford.edu/publications/hallucination-free-assessing-the-reliability-of-leading-ai-legal-research-tools/
  7. Jeffrey Cheng, Marc Marone, Orion Weller, Dawn Lawrie, Daniel Khashabi and Benjamin Van Durme, "Dated Data: Tracing Knowledge Cutoffs in Large Language Models," 2024. https://arxiv.org/abs/2403.12958
  8. Andrew Wong et al., "External Validation of a Widely Implemented Proprietary Sepsis Prediction Model in Hospitalized Patients," JAMA Internal Medicine, 2021. https://pmc.ncbi.nlm.nih.gov/articles/PMC8218233/
  9. METR, "Measuring AI Ability to Complete Long Tasks," 19 March 2025. https://metr.org/blog/2025-03-19-measuring-ai-ability-to-complete-long-tasks/
  10. METR, "Task-Completion Time Horizons of Frontier AI Models," live measurements, methodology and caveats, last updated 8 May 2026. https://metr.org/time-horizons/
  11. CBC News, "Air Canada found liable for chatbot's bad advice on plane tickets," 15 February 2024, reporting Moffatt v. Air Canada, BC Civil Resolution Tribunal. https://www.cbc.ca/news/canada/british-columbia/air-canada-chatbot-lawsuit-1.7116416
  12. European Commission AI Act Service Desk, "Article 14: Human oversight," Regulation (EU) 2024/1689. https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-14