Reliable AI-Assisted Decisions via Selective Auditing

LLM HDCE Agent Human Agent Interaction AI Safety / AI Ethics AVAR
2026年10月22日
我们研究对生成一系列决策的人工智能系统进行在线监控的问题。在每一轮中,该系统不仅输出一个待采纳的决策,还同时提供一个置信度分数,用以评估该决策的可信程度。值得注意的是,决策与置信度分数未必由同一模型生成:例如,可由一个代理(agent)提出决策,而由另一个独立的验证代理对其评估,并输出正确性或安全性得分。基于上述决策与置信度信息,我们必须实时判断:是自动采纳该人工智能决策,还是转而咨询一位专家(例如人类审计员),由其审阅该提议并决定予以采纳或予以修正。我们将这一任务建模为一个在线约束优化问题,其目标是在确保未经审核的AI错误决策所占比例严格低于用户预先设定阈值的前提下,尽可能降低专家人工审核的频率。我们推导出一族具备严格误差控制保证的算法——这些保证无需任何数据分布假设;其中一种方法具有最优效率:它在渐近意义上,无论面对对抗性数据流还是独立同分布(i.i.d.)数据流,均能达到理论上可实现的最低审核率。在针对大型语言模型有害请求筛查、定性文本标注以及数据打标等任务开展的实验表明,我们的方法在实践中切实实现了符合要求的误差控制,同时相较于各类基线方法,显著减少了对人工审核的依赖。
We consider online monitoring of an AI system that produces a sequence of decisions. At each round, the system outputs a proposed decision together with a confidence score estimating the trustworthiness of the decision. The decision and confidence score need not be produced by the same model: for example, one agent may propose a decision, while a separate verifier agent evaluates it and outputs a correctness or safety score. Based on this information, we must decide whether to accept the AI decision automatically or consult an expert, such as a human auditor, who reviews the proposal and either accepts or corrects it. We formulate this task as an online constrained optimization problem in which the goal is to minimize the frequency of expert auditing while guaranteeing that the fraction of AI errors that go unaudited stays below a user-defined threshold. We derive a family of algorithms with provable error-control guarantees with no assumptions, including a method that is optimally efficient: it asymptotically attains the best achievable auditing rate for both adversarial and i.i.d. data streams. Experiments on screening harmful requests to large language models, qualitative text annotation, and data labeling show that our methods achieve valid error control in practice while substantially reducing the need for human auditing compared to baselines.
许愿