In this guide

Most founders ask the same question about an AI product: is it good enough? Almost nobody asks the question that has to come first: good enough by what test?

Without an answer, "good enough" just means it worked in the demo, or it sounded right in the meeting, or a co-founder liked the answer it gave. None of those are a test. They're opinions with good production values.

The better question is: what test must this AI product pass before we build more of it?

That test is a golden dataset — a frozen set of real examples with known correct outcomes, built before the product is, that every version has to pass. Paired with it is a Sprint966 starting bar: a written, product-specific pass condition, set before launch, based on what a wrong answer would actually cost. Without those two things, teams don't evaluate their AI product — they optimize it by opinion, demo quality, and vibes.

This article sits inside our guide to Build vs. Cut, Sprint966's method for scoping AI products. The short version: build the simplest architecture that can pass a real test, and cut everything that hasn't earned its place. A golden dataset is what makes "pass a real test" possible.

Not sure what your product's test should even measure?
Check Your Product Scope → — every Sprint966 engagement starts by building this with you.

What is a golden dataset?

Golden dataset — in one sentence

A frozen set of real examples — real questions, real documents, real workflow cases — each paired with a known correct outcome, used to test an AI product before and after every change.

Three things make it a golden dataset rather than just a spreadsheet of examples:

It reflects real work. Not a flattering demo script or generic filler. It represents the customer questions, documents, and workflow exceptions your product will face — the same shape of input the product will see in production. The examples can be anonymized, carefully reconstructed, or synthetic, as long as they preserve the same difficulty and expected outcome.

It's frozen. Once built, the set doesn't drift with every new idea. It's versioned. When you improve it, you do so deliberately and track what changed and why — a moving target can't tell you whether last week's change helped or hurt.

It has a known correct answer. Every example has a written expected result and, ideally, a reason that result is correct. Without that, "testing" is just running the product and reading the output — which tells you what the AI said, not whether it was right.

A golden dataset is built before the product, or before any major complexity is added to it. It is not a random spreadsheet assembled the week before launch. It is not a public benchmark borrowed because it was convenient. It is not a demo script — a handful of curated examples chosen because they make the product look good. A demo script proves the product can work. A golden dataset tells you whether it does.

Why do AI products fail without a test set?

Without a golden dataset, nobody — not the founder, not the team, not the AI studio — can tell whether the product is actually improving.

Demo quality is not product quality. A model can produce one excellent answer in a live demo and a mediocre one on the next ten real questions; a good demo shows the product can work, not that it reliably does. This gap matters, because founders and investors often make go/no-go decisions based on exactly this kind of one-off performance.

It gets worse once the product is live and iterating. Every change — a new prompt, a different retrieval setup, a model upgrade, a new workflow step — can improve one case and quietly break another. Without a fixed set of examples to re-run after every change, teams have no way to catch a regression until a customer does.

This is why serious AI evaluation practice treats testing as infrastructure, not an afterthought. OpenAI's guidance is direct about sequencing: set up evaluations first, and use them to guide decisions before reaching for heavier tools like fine-tuning.1 And NIST frames generative AI risk as something managed continuously across a system's full lifecycle — design, development, deployment, ongoing operation — not resolved once at the point a model is chosen.2

The same discipline appears in Saudi guidance. SDAIA's AI Ethics Principles call for teams to assess and validate their data, test model performance, consider fairness, document responsibility, complete appropriate review before launch, and continue monitoring after deployment.6 A golden dataset is one practical way to support that work: it gives your team a repeatable body of evidence for how the product performs. It is a Sprint966 testing method, not a requirement imposed by SDAIA.

Founder takeaway: if you can't point to a fixed set of examples your product is measured against, you don't know if it's improving. You know if it's changing.

What should go inside a golden dataset?

A useful golden dataset covers more than the cases where your product looks good. For each example, write down the input, the expected answer or action, why that's the correct outcome, the risk level, and clear pass/fail criteria. The set as a whole should include:

  • Normal cases — the everyday inputs the product will see most often.
  • Edge cases — unusual but realistic inputs: incomplete information, odd phrasing, multiple issues in one request.
  • Failure cases — inputs where the right behavior is for the AI to fail gracefully, not guess.
  • Ambiguous cases — inputs that could reasonably go more than one way, so you can see how the product handles genuine uncertainty.
  • High-risk cases — inputs where a wrong answer would be expensive, embarrassing, or hard to reverse.
  • Arabic and bilingual cases, where relevant — real dialect, mixed-language documents, not textbook phrasing.
  • Cases the AI should refuse or escalate — requests outside its scope, or ones that need a human.
  • Cases where the correct answer is "I don't know" — one of the most commonly skipped categories, and one of the most important. A product that never gets to say "I don't know" in testing will never say it in production either.

What one row actually looks like

Here's a single example from a delivery and logistics support product, structured the way a golden dataset entry should be:

Input Expected outcome Why it is correct Risk level Pass / fail rule
"My order #4521 hasn't arrived, it's been 6 days, I need a refund now." Classify as a delivery delay + refund request. Draft an apology and status update. Escalate the refund decision to a human — do not issue it automatically. Refunds move money and are hard to reverse, so a human must approve them even when the rest of the response is routine. High Fail if the AI issues or promises a refund without human approval. Fail if it doesn't identify the refund request. Pass if it drafts an appropriate response and routes the refund decision to a person.
Input
"My order #4521 hasn't arrived, it's been 6 days, I need a refund now."
Expected outcome
Classify as a delivery delay + refund request. Draft an apology and status update. Escalate the refund decision to a human — do not issue it automatically.
Why it is correct
Refunds move money and are hard to reverse, so a human must approve them even when the rest of the response is routine.
Risk level
High
Pass / fail rule
Fail if the AI issues or promises a refund without human approval. Fail if it doesn't identify the refund request. Pass if it drafts an appropriate response and routes the refund decision to a person.

That single row captures the habit worth building for every example: a real input, a written expected outcome, the reasoning behind it, an honest risk level, and a rule specific enough that two different people would agree on whether the AI passed.

A note on real customer data

Your test set may draw from customer conversations, tickets, orders, or internal records. Before adding them, check whether they contain personal data. Saudi Arabia's Personal Data Protection Law (PDPL) requires personal data to be appropriate and limited to what the purpose needs.7 9 In practice, the test often needs the problem pattern — not the person's real name, phone number, account number, or other identifiers. Minimize or anonymize the data where appropriate, or create a representative example that preserves the same difficulty. For a live evaluation process involving personal data, confirm the setup with a qualified Saudi privacy professional.

How many examples do you need?

There's no single right number — but there is a sensible way to think about it.

For a first product, 50–100 well-chosen examples can be a practical starting range. Notice the qualifiers: well-chosen matters more than the count, and this is a starting range, not a finish line. A tightly scoped, low-risk task — a single classification, a narrow extraction — can be meaningfully tested with fewer. A broader or riskier product needs more: document AI and RAG systems need enough examples to cover real retrieval variety, workflows and agents need enough to cover multiple paths and failure modes, and bilingual or Arabic-facing products need enough to cover real dialect and phrasing, not just the English-language version of the same question.

It's worth being precise about where the "50–100" number actually comes from, so it isn't mistaken for an industry rule. OpenAI's fine-tuning guidance discusses a minimum example count and describes common performance gains appearing around the 50–100 example range — but that's guidance about training a model, not a general evaluation standard for every AI product.3 Sprint966 uses a similar range as a practical starting point for a first golden dataset, not because a standards body has declared it correct, but because it's usually enough real cases to catch the failure modes that matter, without turning dataset-building into a project of its own.

Founder takeaway: start with enough examples to cover normal, edge, failure, ambiguous, and high-risk cases for your specific product — then grow the set as real usage teaches you what you missed.

How do you set the Sprint966 starting bar?

Once you have a golden dataset, the next question is: what score counts as a pass?

Here's the honest answer: there is no universal AI accuracy threshold. NIST — which maintains the leading AI risk management framework — is explicit that it does not prescribe universal risk tolerances; acceptable risk is contextual and depends on the specific use case.4 Anyone who tells you a single accuracy percentage is "the standard" for AI products is not describing a real standard.

That absence of a universal number is exactly why Sprint966 sets a starting bar: a product-specific pass condition, written down before launch, based on the realities of your product rather than a borrowed benchmark. The starting bar depends on:

  • The cost of a wrong answer. A wrong FAQ response costs little. A wrong number in a customer's invoice costs more.
  • Reversibility. Can a mistake be caught and corrected, or is it permanent the moment it happens?
  • Whether a human reviews the output before it matters. A draft a person checks before sending can tolerate a different bar than an action that executes automatically.
  • Whether money, legal, health, HR, or permanent records are involved. These categories deserve a higher bar and, often, mandatory human approval regardless of the score.
  • Customer impact. How visible is a mistake, and how much trust does it cost when it happens?

The Sprint966 starting bar

In practice, the same company can run two AI products with two different bars. A support-triage tool whose drafts a human reviews before sending can run at a lower bar than an invoice-extraction step that feeds numbers directly into accounting. An internal document Q&A tool used by your own team can tolerate more ambiguity than a customer-facing product giving advice directly to the public. Neither bar is "the Sprint966 standard" — each is set for that specific product, in writing, before it launches.

How do you test different AI product types?

A golden dataset isn't scored the same way for every kind of AI product. What you measure should match where the product sits on the Sprint966 Architecture Ladder.

Prompt-based app. Test output quality, format adherence, whether it refuses appropriately, and whether it's consistent across similar inputs. The simplest rung to test — one input, one output, one clear pass/fail.

AI Q&A. Test answer correctness against your golden set, whether it abstains correctly on out-of-scope questions, and whether answers are actually grounded in your source material rather than just sounding plausible.

RAG / document AI. Don't score this with a single number. Measure retrieval quality — did the system find the right passages? — separately from answer quality — was the response actually correct and supported? Microsoft's RAG evaluation guidance takes this approach, separating retrieval evaluation from response evaluation, because retrieval is often the actual bottleneck behind a bad-looking answer.5

Workflow automation. Measure each step in the process, not just the final outcome. A workflow can produce the right final result while an internal step quietly fails and gets masked by a later correction — you want to catch that before it compounds.

AI agents. Measure task success, but also tool-use accuracy, step count, cost, latency, and how the system recovers when something goes wrong mid-task. An agent that eventually gets the right answer after ten unnecessary tool calls has a cost problem your golden dataset should surface.

Fine-tuning. Compare the fine-tuned model against your existing baseline on the same golden dataset. If you can't show it beating your prompting-and-retrieval baseline on real examples, the fine-tune hasn't earned its place — which is why serious guidance treats evaluations as the step before fine-tuning, not after.1 3

What should founders avoid when testing AI?

A few patterns show up often enough to name directly:

  • Testing only the happy path. If every example in your set is one the AI is likely to succeed at, your test set is a confidence exercise, not an evaluation.
  • Testing only in English when the real product is Arabic or bilingual. A test set that doesn't reflect the language your customers actually use isn't testing your product.
  • Changing the prompt after every bad answer, with no regression test. Without a fixed golden dataset, "fixing" one failure can silently break three others you never re-checked.
  • Relying on a single demo. One good run proves the product can work — not that it reliably does.
  • Hiding human correction inside the workflow and calling the result "AI accuracy." If a person is quietly fixing the AI's output before anyone sees it, you're measuring your team, not your product.
  • Using one overall score for a system with multiple parts. A RAG product's single "accuracy" number can hide whether the failure is in retrieval or generation — you need both.
  • Testing only final answers instead of sources, retrieval, steps, cost, and latency. A correct answer reached at an unreasonable cost is still a problem worth catching before launch.
  • Treating a public benchmark result as proof your product works in your context. A benchmark score describes performance on someone else's test set, not on your customers' real questions.

How Sprint966 builds a golden dataset during Scope Check

This isn't a side deliverable — it's the substance of how we start.

In the AI Product Scope Check, Sprint966 defines the job, the risk, and the test before anything is built. You leave with:

  • Your golden dataset — real examples, drawn from your actual business, covering the categories above.
  • Your starting rung on the Sprint966 Architecture Ladder — the simplest architecture that could plausibly pass your test.
  • Your Sprint966 starting bar — a written, product-specific pass condition.
  • Your risk posture — including which actions, if any, need to stay human-approved.
  • A build list and a cut list — what goes into V1, and what's deliberately left out until it earns its place.

This is why Scope Check comes before delivery. Building first and testing later means discovering what "good enough" means only after the budget is spent.

Check Your Product Scope → and see what we typically build once scope is set at What We Build.

Frequently asked questions

What is a golden dataset?
A golden dataset is a frozen set of real examples — real questions, real documents, real workflow cases — each with a known correct outcome, used to test an AI product before launch and after every change. It's built before the product, from real work, so every version can be measured against the same fixed exam.
Is a golden dataset the same as a benchmark?
No. A public benchmark measures a model's general performance on someone else's test set. A golden dataset is built from your own real examples, for your own product, and tests whether your specific product does its specific job — something a public benchmark score cannot tell you.
How many examples do I need?
For a first product, 50–100 well-chosen examples can be a practical starting range — though the right number depends on the task's complexity, risk, and variability. Narrow, low-risk tasks can work with fewer; document AI, workflows, agents, and bilingual products typically need more to cover real variety and edge cases.
What accuracy should an AI product reach before launch?
There's no universal number. NIST explicitly does not prescribe universal risk tolerances — acceptable risk depends on context and use case.4 Sprint966 sets a product-specific starting bar instead, based on the cost of a wrong answer, how reversible it is, and whether a human reviews the output first.
How do I test a RAG product?
Measure retrieval and generation separately, not as one score. Check whether the system found the right source material, then separately check whether the generated answer was correct and grounded in that material. This split matters because retrieval is often the real bottleneck behind a bad-looking answer.5
How do I test an AI workflow?
Test each step in the process, not only the final outcome. A workflow can produce a correct final result while an internal step is failing quietly — measuring only the end result can hide that until it compounds into a bigger problem.
Do I need evals before fine-tuning?
Yes. Fine-tuning should be compared against a prompting-and-retrieval baseline on the same golden dataset — if it doesn't clearly beat that baseline, it hasn't earned its place. This ordering — evaluate first, fine-tune only if evidence supports it — reflects standard guidance in this space.1 3
What is the Sprint966 starting bar?
The Sprint966 starting bar is a written, product-specific pass condition — not an industry standard — set before launch based on what a wrong answer would cost, how reversible it is, and whether a human reviews the output before it matters. Two different AI products at the same company can have two different bars.
Can I build first and test later?
You can, but it's a more expensive way to learn the same lesson. Testing after the fact means discovering what "good enough" means only after the budget is spent — and without a golden dataset built before major decisions, every prompt or model change is a guess you can't verify against anything fixed.