Training ML Models with Predictable Failures
Not on the map. Why?
Abstract (arXiv)
Estimating how often an ML model will fail at deployment scale is central to pre-deployment safety assessment, but a feasible evaluation set is rarely large enough to observe the failures that matter. Jones et al. (2025) address this by extrapolating from the largest k failure scores in an evaluation set to predict deployment-scale failure rates. We give a finite-k decomposition of this estimator's forecast error and show that it has a built-in bias toward over-prediction in the typical case, which is the safety-favorable direction. This bias is offset when the evaluation set misses a rare high-failure mode that the deployment set contains, leaving the forecast to under-predict at deployment scale. We propose a fine-tuning objective, the forecastability loss, that addresses this failure mode. In two proof-of-concept experiments, a language-model password game and an RL gridworld, fine-tuning substantially reduces held-out forecast error while preserving primary-task capability and achieving safety similar to that of supervised baselines.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 28 of its 44 references that are in the map. First posted on arXiv 14 May 2026.
Builds on
28 of 44 references.
References · 28
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2019Distributionally Robust Neural Networks for Group Shifts: On the Importance of Regularization for Worst-Case Generalizationcited by 1,232
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
- 2021Just Train Twice: Improving Group Robustness without Training Group Informationcited by 522
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 457
- 2022Conformal Risk Controlcited by 290
- 2021Learn then Test: Calibrating Predictive Algorithms to Achieve Risk Controlcited by 256
- 2018Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approachcited by 181
- 2015Risk-Sensitive and Robust Decision-Making: a CVaR Optimization Approachcited by 162
- 2023Tensor Trust: Interpretable Prompt Injection Attacks from an Online Gamecited by 135
- 2020Tilted Empirical Risk Minimizationcited by 103
16 more
- 2014Optimizing the CVaR via Samplingcited by 98
- 2018Scalable End-to-End Autonomous Vehicle Testing via Rare-event Simulationcited by 76
- 2018A Statistical Approach to Assessing Neural Network Robustnesscited by 54
- 2024Safety Cases: How to Justify the Safety of Advanced AI Systemscited by 48
- 2025A Closer Look at System Prompt Robustnesscited by 31
- 2017Data-Efficient Policy Evaluation Through Behavior Policy Searchcited by 25
- 2024Estimating the Probabilities of Rare Outputs in Language Modelscited by 15
- 2025An alignment safety case sketch based on debatecited by 12
- 2026Rare Event Analysis of Large Language Modelscited by 6
- 2023Extreme Risk Mitigation in Reinforcement Learning using Extreme Value Theorycited by 5
- 2025Enforcing tail calibration when training probabilistic forecast modelscited by 5
- 2024PromptKeeper: Safeguarding System Prompts for LLMscited by 4
- 2026Extreme Value Policy Optimization for Safe Reinforcement Learningcited by 3
- 2024Catastrophic-risk-aware reinforcement learning with extreme-value-theory-based policy gradientscited by 2
- 2025Provably Safeguarding a Classifier from OOD and Adversarial Samples: an Extreme Value Theory Approachcited by 1
- 2026EVEREST: An Evidential, Tail-Aware Transformer for Rare-Event Time-Series Forecastingcited by 1
Built on by
Not cited yet.