arXiv 论文提出选择性审计框架:用置信度决定何时引入人工审核
Reliable AI-Assisted Decisions via Selective Auditing
这篇论文解决了 AI 决策该不该信的问题:错漏审比例可设阈值、有数学保证,还比基线少用大量人工审核,做智能体安全筛查的值得看看。
arXiv 论文 2610.31662 研究如何对 AI 系统的连续决策做在线监控:每个决策附带置信度分数,系统据此自动决定接受结果还是交给人类审计员复核。作者把该任务形式化为带约束的在线优化问题,目标是在保证 AI 错误漏审比例低于用户设定阈值的前提下,最小化人工审计频率。论文提出了一族无需任何假设、具有可证明错误控制保证的算法,其中一种在对抗性和 i.i.d. 数据流下都能渐近达到最优审计率。实验涵盖大语言模型有害请求筛查、定性文本标注和数据标注三类场景,结果显示该方法在实现有效错误控制的同时,相比基线大幅降低了人工审计量。
Reliable AI-Assisted Decisions via Selective Auditing
We consider online monitoring of an AI system that produces a sequence of decisions. At each round, the system outputs a proposed decision together with a confidence score estimating the trustworthiness of the decision. The decision and confidence score need not be produced by the same model: for example, one agent may propose a decision, while a separate verifier agent evaluates it and outputs a correctness or safety score. Based on this information, we must decide whether to accept the AI decision automatically or consult an expert, such as a human auditor, who reviews the proposal and either accepts or corrects it. We formulate this task as an online constrained optimization problem in which the goal is to minimize the frequency of expert auditing while guaranteeing that the fraction of AI errors that go unaudited stays below a user-defined threshold. We derive a family of algorithms with provable error-control guarantees with no assumptions, including a method that is optimally efficient: it asymptotically attains the best achievable auditing rate for both adversarial and i.i.d. data streams. Experiments on screening harmful requests to large language models, qualitative text annotation, and data labeling show that our methods achieve valid error control in practice while substantially reducing the need for human auditing compared to baselines.