mlsanityData to 14 Oct 2026

Auditing Near-Optimal Policies Can Be Exponentially Hard: Conditional Query Lower Bounds via Occupancy Rashomon Capacity

arXiv 2606.00414 ↗First posted 29 May 2026cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

When many reinforcement-learning policies achieve near-optimal return, a post-hoc auditor may have to distinguish among many behaviorally distinct but return-equivalent policies. We formalize this phenomenon through an occupancy-measure analogue of Rashomon capacity: the metric entropy of the near-optimal occupancy region, computed relative to an audited deployment class. Because occupancy measures identify behavior only up to occupancy equivalence, we formulate auditing at the occupancy-class level and distinguish exact local-query oracles from noisy sample-query oracles. Our main exact-query result is conditional: if the audited class contains a 2/H-separated near-optimal packing whose local signatures are b-sparse, then exact local-query auditing requires Omega(M/b) queries; when the packing realizes deployment-class capacity and b=O(1), this becomes Omega(2Hopt^cF(eps)). We give a finite discounted hidden-branch MDP attaining this bound and show the exact Bayes success law. For noisy hidden-trigger testing, we prove a mixture lower bound of order M/β, where β is the per-sample KL signal, yielding Omega(2Hopt^cF(eps)/(ρ2Delta2)) for capacity-order packings with β=O(ρ2Delta2). We also provide a static target-recognition information lower bound, a transcript-compatible oracle-cover verification upper bound, and a canonical occupancy regularizer whose regularized audited capacity collapses when a trusted reference occupancy is available. Controlled benchmarks distinguish positive sparse-signature instances from high-capacity negative controls where exact auditing is easy, and map the noisy-trigger law to post-processed continuous-control and visual-RL auditing regimes.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 14 of its 26 references that are in the map. First posted on arXiv 29 May 2026.

Builds on

14 of 26 references.

References · 14

  1. 2020D4RL: Datasets for Deep Data-Driven Reinforcement Learningcited by 1,427
  2. 2018Diversity is All You Need: Learning Skills without a Reward Functioncited by 752
  3. 2018All Models are Wrong, but Many are Useful: Learning a Variable's Importance by Studying an Entire Class of Prediction Models Simultaneouslycited by 373
  4. 2021Interpretable Machine Learning: Fundamental Principles and 10 Grand Challengescited by 367
  5. 2022The Effects of Reward Misspecification: Mapping and Mitigating Misaligned Modelscited by 328
  6. 2019Predictive Multiplicity in Classificationcited by 166
  7. 2019On the Existence of Simpler Machine Learning Modelscited by 89
  8. 2020Policy Teaching via Environment Poisoning: Training-time Adversarial Attacks against Reinforcement Learningcited by 81
  9. 2020One Solution is Not All You Need: Few-Shot Extrapolation via Structured MaxEnt RLcited by 79
  10. 2021BACKDOORL: Backdoor Attack against Competitive Reinforcement Learningcited by 68
  11. 2022Rashomon Capacity: A Metric for Predictive Multiplicity in Classificationcited by 47
  12. 2020Cautious Reinforcement Learning with Logical Constraintscited by 45
2 more
  1. 2023An Empirical Evaluation of the Rashomon Effect in Explainable Machine Learningcited by 25
  2. 2021Poisoning Deep Reinforcement Learning Agents with In-Distribution Triggerscited by 20

Built on by

Not cited yet.