arXiv AI By Shashwat Pandey, Satwik Pandey, Suresh Raghu

Confidently Wrong, Silently So: Auditing Undetectable Failures of a Deployed On-Device Language Model

Read the original on arXiv AI →

The paper audits a developer‑accessible on‑device language model, revealing that it can confidently produce incorrect answers while refusing benign prompts, a phenomenon termed task‑asymmetric miscalibration. The model’s confident outputs are surface‑indistinguishable, with classifiers based on user‑visible features failing to separate correct from wrong responses. The authors propose a model‑agnostic audit protocol, a surface‑indistinguishability test, and a black‑box consistency wrapper that improves reliability without requiring model access.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

arXiv Machine Learning
4d ago

Smart Alone, Blind Together: Why Accuracy Fails to CertifyTheory of Mind in Multi-Agent Teams

The paper argues that accuracy is an inadequate metric for certifying a coordinator’s theory‑of‑mind in multi‑agent systems, because the required accuracy depends on deployment‑specific costs and errors are often dependent. Experiments on task assignment, Level‑Based Foraging, Hanabi, and human judgments show that accuracy can both approve harmful language‑model deployments and reject beneficial ones. The authors propose a Blind‑Spot Gate that evaluates error costs, pairwise interactions, and dependence without deployment, achieving better safety outcomes than accuracy alone.

By Will Beaumaster, Paul Schrater
arXiv Computer Vision
Aug 25

From Subjective Judgments to Auditable Standards:Protocol-Guided AI Auditing of Website Redundancy

The paper introduces CORA (Counterfactual, Observable Redundancy Audit), a protocol for auditing website redundancy by measuring repetition load, normal-use tax, and failure-domain recovery reserve. Each audit run records screenshots, stable element identities, and task traces, while a versioned vision‑language model generates annotations that are validated and released only if they meet calibrated criteria. Experiments on a transparent mechanistic testbed show that CORA’s factorized representation separates reserve from normal-use tax and predicts perturbed success more accurately than scalar-load baselines, but it withholds automated scores when instruments fail to meet release requirements, indicating that CORA is an auditable candidate procedure for the studied benchmark rather than a universal standard.

By Ge Kong, Yongtong Cao