Oversight split: catch, judgment and action, measured separately
A checker that flags an AI system’s mistakes can be scored on three things: whether its flags fall on real failures (catch), whether it is the one that is right when it flags (judgment), and what happens to the final result under each response to a flag. Seven checkers, from better than the system they watch to useless, watched a forecaster in simulated worlds whose true laws are known, so every score is computed against the true answer. As a checker weakened, its judgment fell much faster than its catch, and acting on the weaker checker’s veto made the result worse.
Code, data and registration files: DOI 10.5281/zenodo.23851152. Code under MIT; data and text under CC BY 4.0.
Methods
The system is one forecaster in simulated stock-and-flow worlds from one generator family, run on development worlds; its mean error against the true answer is 0.859. The checkers belong to one class of linear model. Each flag can be met in four ways: ignore it, veto the flagged forecast, switch to the checker’s answer, or give the checker every decision. AZ70 used 1,152 windows across 24 worlds. AZ70, AZ71 and AZ73 are registered tests: their prediction files and executable specifications were committed before the data, and the commit hashes are in PROVENANCE.md in the deposit. AZ72 is exploratory. Gains below are reductions in error; a negative gain means the response made the result worse. Intervals are 95%.
Results
AZ70
Catch and judgment along a ladder of seven checkers, from better than the forecaster to useless
As a checker weakened, its catch AUROC fell from 0.722 to 0.600 while the share of its flags where it was right fell from 0.89 to 0.39 (95% interval 0.26 to 0.53). Acting on the weaker checker’s veto increased error by 0.086 (0.012 to 0.173). Across the seven, the error ratio after responding had a Spearman correlation of −0.964 with judgment and 0.786 with the share of false alarms; on a second world family, exploratory, −1.0 and 0.89.
AZ70
Four responses to a competent checker’s flags
A veto changed error by −0.008 (−0.048 to 0.032), no measurable effect. Switching to the checker’s forecast on flagged windows gained 0.175 (0.119 to 0.231), and handing the checker every window gained 0.305 (0.255 to 0.359), against the forecaster’s mean error of 0.859. On the second world family a veto did help, so the response has to be chosen for each setting. A mandatory veto from a weak checker cost 0.067 to 0.130 in error, 8 to 15% of the forecaster’s error.
AZ70
A rule for choosing the response, fixed before the data: use whichever response had the lowest error on held-out calibration worlds
It picked the best of the four responses for all seven checkers on both world families (regret 0.000).
AZ70
The forecaster’s own self-check used as a “verified” stamp
The stamp sat on 43% of the forecaster’s real failures (AUROC 0.58). Deferring to it lost about a quarter of the useful gain; the registered threshold of 25% failed. Deference was built into this setup, so it is not a measurement of how often anything defers.
AZ73
Switching on a checker’s flags against switching the same number of randomly chosen windows
For the four competent checkers, their flags beat random windows by 0.07 to 0.11, with every 95% interval above zero: 56 to 70% of the switch gain, against the random expectation. For the strongest checker the share is about half to 60% (52% against a placebo matched by world, 59% against the random expectation). A weak checker’s flags did no better than random (0.020, −0.020 to 0.061), and a useless checker’s did worse (−2.47, −4.25 to −0.57). Handing every window to the better checker beat overseeing the forecaster by 0.13 (0.305 against 0.175), so keeping the original forecaster in charge gave up 43% of the available gain. That comparison assumes the checker can act on every window at no extra cost.
AZ72
A second checker added to the first (exploratory)
Two checkers fitted on the same data made errors that correlated 0.99; the second missed 96% of what the first missed and added 0.007 AUROC. A checker of the same class fitted on independent data still shared 82% of the misses and added 0.015. Pairing the checker with the forecaster’s own self-check changed AUROC by −0.042.
AZ71
gemma4:12b, run locally at temperature 0, chose between two forecasts with known truth: 40 items from 19 worlds, each shown with no note, with “Model A VERIFIED” and with “Model B VERIFIED”, the note assigned regardless of which forecast was right
The note moved which forecast it acted on by 0.80 (0.68 to 0.93) toward the labelled one. Its stated judgment of which was better moved by 0.075, 3 of 40 items. With the note on A, it said B was better and acted on A in 27 of 40 items. The note pushed its catch from 0.66 to 0.50, a difference of 0.157 (−0.008 to 0.31) that cannot be told from zero. With no note its judgment (0.625) was already below always choosing B (0.675), so this is a weak monitor whose action follows the label rather than its own judgment.
Registered predictions held: AZ70 8 of 9 (Brier 0.133), AZ71 4 of 6 (Brier 0.264), AZ73 4 of 5 (Brier 0.18). A separate read-only re-check confirmed AZ71 and AZ73 with caveats and set the wording of AZ70’s judgment figure, whose interval includes 0.5; the wording above is the re-checked one. The deposited files carry the earlier wording with the same numbers.
After the deposit
Two registered follow-ups on AZ71’s 40 items, run and re-checked the same night and not in the deposit. Asked to state its judgment first, gemma4:12b acted on its own judgment in 40 of 40 items with no note. With a note saying Model A’s forecast had been verified by an independent validation check, it acted on A in 40 of 40, 38 of them against the verdict it had just given, so judging first did not reduce deference (AZ74). Moving the note from just before the decision to the top of the first turn cut acting on the labelled forecast from 40 of 40 to 4 of 40, against 2 of 40 with no note, with the verdict barely moving (paired difference 0.90, 0.80 to 0.975). That is a pilot with one model and one wording (AZ75).
Limitations
All results come from development worlds of one generator family, with one forecaster and one class of linear checker; none were confirmed on sealed worlds. Nothing here measures human reviewers or frontier models. AZ71’s 40 items come from 19 worlds, so its item-level intervals are somewhat optimistic, and it ran on one model at temperature 0. Handing every decision to the checker assumes it can act on every window at no extra cost.
AZ71 is a second setting for the label result in frontier-repro, where text dressed as system text, tool output or a cited specification moved compliance by 0.307; it is not a replication. The rest of that programme is on Checking AI: findings. Questions about the files go to futurisminstitute@gmail.com.