Cited by 147Adversarial Robustness in Machine LearningMachine Learning and AlgorithmsMachine Learning and Data Classification

Distribution-free, Risk-controlling Prediction Sets

Open access
Bates, Stephen, Angelopoulos, Anastasios, Lei, Lihua, Malik, Jitendra, Jordan, Michael·2021·Journal of the ACM

Abstract

While improving prediction accuracy has been the focus of machine learning in recent years, this alone does not suffice for reliable decision-making. Deploying learning systems in consequential settings also requires calibrating and communicating the uncertainty of predictions. To convey instance-wise uncertainty for prediction tasks, we show how to generate set-valued predictions from a black-box predictor that controls the expected loss on future test points at a user-specified level. Our approach provides explicit finite-sample guarantees for any dataset by using a holdout set to calibrate the size of the prediction sets. This framework enables simple, distribution-free, rigorous error control for many tasks, and we demonstrate it in five large-scale machine learning problems: (1) classification problems where some mistakes are more costly than others; (2) multi-label classification, where each observation has multiple associated labels; (3) classification problems where the labels have a hierarchical structure; (4) image segmentation, where we wish to predict a set of pixels containing an object of interest; and (5) protein structure prediction. Last, we discuss extensions to uncertainty quantification for ranking, metric learning, and distributionally robust learning.

AI snapshot

Written from the paper’s full text.

TL;DR

The paper introduces risk-controlling prediction sets (RCPS), a distribution-free, finite-sample method to turn any black-box predictor into set-valued predictions whose expected loss is below a user-specified level with high probability. It develops upper-confidence-bound calibration, concentration inequalities for bounded and unbounded losses, and demonstrates the framework on five large-scale prediction tasks.

Key findings

  • RCPS calibration chooses the smallest nested set parameter \(\lambda\) such that a pointwise upper confidence bound on risk stays below \(\alpha\) for all larger \(\lambda\), yielding a \((\alpha,\delta)\)-RCPS guarantee (Theorem 1).
  • For bounded losses, the Waudby-Smith–Ramdas bound is recommended for non-binary losses; for binary losses, the exact binomial bound should be used. For unbounded losses, the Pinelis–Utev bound gives valid coverage under bounded coefficient of variation, while the CLT bound is tighter but lacks finite-sample guarantees and undercovers heavy-tailed distributions.
  • The greedy set construction is approximately optimal: under loss forms \(L(y,S)=L_y 1\{y\notin S\}\) and more general \(L(y;S)=\int_{z\in S^c}\ell(y,z)d\mu(z)\), it has smallest average set size among risk-controlling predictors (Theorems 7 and 8).
  • Experiments report risk control on ImageNet classification with class-varying loss (30,000 calibration, 20,000 evaluation points, 100 splits, \(\alpha=\delta=0.1\)), MS COCO multi-label classification (4,000 calibration, 1,000 test, \(\alpha=\delta=0.1\)), hierarchical ImageNet classification (\(\alpha=0.05,\delta=0.1\)), polyp segmentation (1,781 examples, 1,000 calibration, \(\alpha=\delta=0.1\)), and protein structure prediction on 71 CASP-13 test points (35 calibration, 36 test, \(\alpha=2\)Å, \(\delta=0.1\)).

Methods

  • Split data into a training set and a calibration set; fit an arbitrary black-box predictor \(f\) on the training set, then use only calibration points to calibrate a nested family of set-valued predictors \(T_\lambda\) with monotone loss.
  • Construct upper confidence bounds for risk via concentration inequalities: Hoeffding, Hoeffding–Bentkus, empirical Bernstein, Waudby-Smith–Ramdas, exact binomial for binary losses, Pinelis–Utev for unbounded losses, and an asymptotic CLT bound; numerical simulations use one million replicates to compare coverage and median gap.
  • Evaluate on five tasks using ImageNet with ResNet-152/ResNet-18, MS COCO with TResNet, polyp segmentation datasets with PraNet, and AlphaFoldv1 distograms for protein structure, reporting risk and set sizes over random splits.

Limitations

  • The paper states that unbounded losses require regularity conditions such as bounded coefficient of variation; Proposition A.1 shows no nontrivial finite-sample upper confidence bound exists for nonnegative random variables without restrictions.
  • The CLT bound lacks finite-sample coverage guarantees and undercovers in simulations, especially for small means and heavy-tailed distributions; the protein experiment uses only 35 calibration and 36 test points and reports only the CLT bound because exact concentration results are “hopelessly conservative” at that sample size.
  • The protein experiment uses semi-synthetic data because ground-truth distance data was unavailable, and the greedy optimality results assume exact conditional density and specific loss forms, whereas practice uses plug-in estimates.

Model-written summary. Check it against the paper before relying on it.

Integrity signals

Registry

Crossref · 10.1145/3478535

Cites

69 of 69 references verified0 citation errors · 0 not checkable

Statistics

Nothing to recompute.

Claims the paper makes

0 of 22 cited sources checked · 0 supported · 0 flagged

  • Findingnone given

    The exact concentration results are hopelessly conservative with only 35 calibration points.

    “due to the small sample size (35 calibration and 36 test points), we only report results using the CLT bound, because the exact concentration results are hopelessly conservative with only 35 calibration points.”
    Quote in the paperSubstantial claim
  • Findingown data

    In the protein structure prediction experiment, the CLT bound nearly controls the risk.

    “Figure 15 shows the quantitative performance of the CLT, which nearly controls the risk.”
    Quote in the paperSubstantial claim
  • Findingown data

    The PU bound has valid coverage in the unbounded settings considered.

    “By contrast, the PU bound has valid coverage in these settings.”
    Quote in the paperSubstantial claim
  • Findingreasoning

    In the MS COCO multi-label classification experiment, the conformal baseline returns larger prediction sets.

    “In Figure 8, we find that the conformal baseline returns larger prediction sets.”
    Quote in the paperSubstantial claim0 of 1 sources checked
    • cites [12]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Findingown data

    The CLT does not always have correct coverage, especially when the true mean is small, unless the sample size is large.

    “First, we observe that the CLT does not always have correct coverage, especially when the true mean is small, unless the sample size is large.”
    Quote in the paperSubstantial claim
    • The authors state this as an assumption: The loss is bounded above by one.
  • May combine two claims. 24
  • Classified as probably not a substantial claim. 22
  • The quote only partly states this claim. 1
  • May combine two claims.

    Findingown data

    The WSR bound outperforms the others for all Beta distributions and has similar performance to the HB bound for Bernoulli distributions.

    “Next, as shown in Figure 4(b), the WSR bound outperforms the others for all Beta distributions and has a similar performance to the HB bound for Bernoulli distributions.”
    Quote in the paperSubstantial claim
    • The authors state this as an assumption: The loss is bounded above by one.
  • May combine two claims.

    Findingown data

    The CLT bound nearly achieves the desired coverage for light-tailed distributions but drastically undercovers for heavy-tailed distributions.

    “From Figure 5(a), we see that the CLT bound nearly achieves the desired coverage for light-tailed distributions but drastically undercovers for heavy-tailed distributions.”
    Quote in the paperSubstantial claim
  • May combine two claims.

    Findingown data

    In the hierarchical classification experiment, RCPS controls the risk at the desired level and the predictions are generally relatively precise (of low depth in the tree).

    “As before, we find that RCPS controls the risk at the desired level, and the predictions are generally relatively precise (i.e., of low depth in the tree).”
    Quote in the paperSubstantial claim
  • May combine two claims.

    Findingown data

    The CLT bound is much tighter than the PU bound in all cases, though the gap shrinks as sample size grows.

    “From Figure 5(b), we see that the CLT bound is much tighter in all cases, though the gap between two bounds shrink as the sample size grows.”
    Quote in the paperSubstantial claim
  • Classified as probably not a substantial claim. May combine two claims.

    Findingnone given

    This work explicitly considers classification with different penalties for different misclassification events, multi-label classification, classification with hierarchically structured classes, image segmentation, prediction problems where the response is a 3D structure, ranking, and metric learning.

    “this work explicitly considers classification with different penalties for different misclassification events, multi-label classification, classification with hierarchically structured classes, image segmentation, prediction problems where the response is a 3D structure, ranking, and metric learning.”
    Quote in the paperSubstantial claim
  • May combine two claims.

    Findingown data

    In the image segmentation experiment, RCPS controls the risk at the desired level and the average prediction set size is comparable to the average polyp size.

    “RCPS again control the risk at the desired level, and the average prediction set size size is comparable to the average polyp size.”
    Quote in the paperSubstantial claim
  • May combine two claims.

    Findingown data

    In the MS COCO multi-label classification experiment, our method controls the risk and gives sets with reasonable sizes.

    “Our method controls the risk and gives sets with reasonable sizes.”
    Quote in the paperSubstantial claim
  • May combine two claims.

    Findingown data

    In the Imagenet classification experiment, the RCPS procedure controls the risk at the correct level and the sets have reasonable sizes.

    “The RCPS procedure controls the risk at the correct level and the sets have reasonable sizes.”
    Quote in the paperSubstantial claim
  • May combine two claims.

    Findingown data

    Around 1,000 calibration points suffice when controlling risk at α=0.1; a few thousand suffice for α=0.01; about 10,000 suffice for α=0.001.

    “The left column shows that when we seek to control the risk at the relatively loose α = 0.1 level, around 1, 000 calibration points suffice; the middle panel shows that when we seek to control the risk at level α = 0.01, a few thousand calibration points suffice; and the right column shows that for the strict risk level α = 0.001, about 10,000 calibration points suffice.”
    Quote in the paperNot a substantial claim
  • Classified as probably not a substantial claim.

    Findingown data

    The confidence bound of Waudby-Smith and Ramdas [59] is the clear winner among bounded-loss upper confidence bounds.

    “The confidence bound of Waudby-Smith and Ramdas [59] is the clear winner, and ultimately we recommend this bound for use in all cases with bounded loss.”
    Quote in the paperSubstantial claim0 of 1 sources checked
    • cites [59]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • The authors state this as an assumption: The loss is bounded above by one.
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingown data

    The set sizes for all three methods overlap.

    “The set sizes for all three methods overlap.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Findingnone given

    In the shown hierarchical prediction examples, the prediction is an ancestor in the WordNet hierarchy of both the true class and the model's top-1 prediction.

    “Our prediction is an ancestor in the WordNet hierarchy of both the true class and the model's top-1 prediction.”
    Quote in the paperNot a substantial claim
  • May combine two claims.

    Interpretationreasoning

    The conformal baseline returns larger sets because conformal coverage is more strict, requiring that all classes are covered.

    “The reason is that the notion of coverage used by conformal prediction is more strict, requiring that all classes are covered.”
    Quote in the paperSubstantial claim0 of 1 sources checked
    • cites [12]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Classified as probably not a substantial claim. May combine two claims.

    Interpretationreasoning

    Because of the explicit guarantee on the output, a doctor could safely exclude diagnoses outside the set and test for those within.

    “Because of the explicit guarantee on our output, a doctor could safely exclude diagnoses outside the set and test for those within.”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Premisecitation

    Conformal prediction has been recognized as an attractive way of producing predictive sets with finite-sample guarantees.

    “In parallel, conformal prediction [55,56] has been recognized as an attractive way of producing predictive sets with finite-sample guarantees.”
    Quote in the paperNot a substantial claim0 of 2 sources checked
    • cites [55]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [56]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • May combine two claims.

    Interpretationnone given

    The size of the output set is chosen based on the accuracy of the classifier and the desired risk level-a lower accuracy classifier or a more strict risk level will require larger sets to guarantee risk control.

    “To do this, the size of the output set is chosen based on the accuracy of the classifier and the desired risk level-a lower accuracy classifier or a more strict risk level will require larger sets to guarantee risk control.”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Interpretationreasoning

    UCB calibration with the simplified Hoeffding bound selects the smallest set size such that the empirical risk on the calibration set is below αlog(1/δ)/2n.

    “In view of Equation ( 6), UCB calibration with this version of Hoeffding's bound results in a procedure that is simple to state-one selects the smallest set size such that the empirical risk on the calibration set is below αlog(1/δ )/2n.”
    Quote in the paperNot a substantial claim
    • The authors state this as an assumption: The loss is bounded above by one.
  • Probably not a substantial claim: may not pass S2 (checkable), S4 (based). May combine two claims.

    Interpretationnone given

    Returning a set of responses is a useful way to represent uncertainty, since such sets can be readily constructed from any existing predictor and are often interpretable.

    “Returning a set of responses is a useful way to represent uncertainty, since such sets can be readily constructed from any existing predictor and, moreover, they are often interpretable.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Premisecitation

    Tolerance regions are sets that contain a desired fraction of the population distribution with high probability.

    “Tolerance regions are sets that contain a desired fraction of the population distribution with high probability.”
    Quote in the paperNot a substantial claim0 of 4 sources checked
    • cites [52]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [58]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [60]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [61]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Interpretationnone given

    The continuity assumption on R(•) can be removed with minor modifications.

    “We assumed that R(•) is continuous for simplicity, but this condition can be removed with minor modifications.”
    Quote in the paperNot a substantial claim
  • May combine two claims.

    Interpretationcitation

    Unlike conformal prediction, the paper pursues the high-probability error guarantees of tolerance regions and thus relies on entirely different proof techniques.

    “Unlike conformal prediction, however, we pursue the high-probability error guarantees of tolerance regions and thus rely on entirely different proof techniques-see Reference [53] for a discussion of their relationship.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [53]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • May combine two claims.

    Interpretationreasoning

    The required number of samples increases slightly with higher confidence level (smaller δ), but dependence on δ is minimal, since bounds roughly scale as log(1/δ).

    “The required number of samples will increase slightly if we ask for a higher confidence level (i.e., smaller δ ), but the dependence on δ is minimal, since the bounds will roughly scale as log(1/δ )”
    Quote in the paperNot a substantial claim
  • The quote only partly states this claim.

    Interpretationreasoning

    In the setting of Theorem 1, if c_v(λ) ≤ c_v for each λ, T_λPU is a (α,δ)-RCPS.

    “Then, T λPU is a (α, δ )-RCPS.”
    Quote in the paperSubstantial claim
    • The authors state this as an assumption: For each λ, c_v(λ) ≤ c_v for some constant c_v.
  • Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

    Interpretationnone given

    The simplified Hoeffding result is only presented for illustration; much tighter concentration results are available.

    “This result is only presented for illustration purposes, however.Much tighter concentration results are available, so in practice, we recommend using the better bounds described next.”
    Quote in the paperNot a substantial claim
  • May combine two claims.

    Interpretationreasoning

    The Waudby-Smith-Ramdas bound is adaptive to the variance and improves upon the previous result in most settings.

    “We next present a bound that is adaptive to the variance and improves upon the previous result in most settings.”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Interpretationreasoning

    Theorem 8 includes Theorem 7 as a special case.

    “For the case considered in Section 4.2, E[ℓ(Y ; z) | X = x] = L z p(z | x ), so we see Theorem 8 includes Theorem 7 as a special case.”
    Quote in the paperNot a substantial claim
  • Classified as probably not a substantial claim.

    Interpretationnone given

    The present work concerns the construction of tolerance regions with a user-specified coverage guarantee.

    “The present work concerns the construction of tolerance regions with a user-specified coverage guarantee, and we do not pursue this latter formulation here.”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Interpretationnone given

    The HB bound performs well for binary variables because the Bentkus inequality is nearly tight there.

    “It is not surprising that the HB bound performs well for binary variables, since the Bentkus inequality is nearly tight here.”
    Quote in the paperNot a substantial claim
  • Classified as probably not a substantial claim. May combine two claims.

    Interpretationnone given

    When c_v(λ) is unknown, it can be treated as a sensitivity parameter or estimated based on sample moments.

    “When c v (λ) is unknown, we can treat it as a sensitivity parameter or estimate it based on the sample moments.”
    Quote in the paperSubstantial claim
  • May combine two claims.

    Interpretationreasoning

    The procedure finds the last point where the UCB R+(λ) is above the desired level α, so it will produce sets that are nearly as small as possible when R+(λ) is close to the true risk R(λ).

    “Since our procedure finds the last point where the UCB R + (λ) is above the desired level α, it will produce sets that are nearly as small as possible when R + (λ) is close to the true risk R(λ).”
    Quote in the paperSubstantial claim
  • May combine two claims.

    Interpretationnone given

    The algorithm includes the construction of tolerance regions as a special case but applies to many other problems.

    “Our algorithm includes the construction of tolerance regions as special case, but applies to many other problems”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Interpretationnone given

    The proposed algorithm is somewhat similar to split conformal prediction.

    “our proposed algorithm is somewhat similar to split conformal prediction.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Interpretationnone given

    The Hoeffding-Bentkus bound is nearly tight for binary loss functions.

    “Although the Hoeffding-Bentkus bound is nearly tight for binary loss functions”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim: may not pass S4 (based).

    Interpretationnone given

    The remainder of the article shows how to create set-valued predictors from f that control a certain statistical error notion, regardless of the quality of the initial model fit or the distribution of the data.

    “The remainder of this article shows how to subsequently create set-valued predictors from f that control a certain statistical error notion, regardless of the quality of the initial model fit or the distribution of the data.”
    Quote in the paperNot a substantial claim
  • May combine two claims.

    Interpretationreasoning

    RCPS can incorporate many loss functions, whereas conformal prediction controls coverage (binary risk).

    “First, our approach can incorporate many loss functions, whereas conformal prediction controls the coverage-i.e., binary risk.”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Premisecitation

    When Y = 2^Y and L(Yi, Tλ(Xi)) = 1{Yi ∉ Tλ(Xi)}, this is the well-known case of split conformal prediction.

    “this is the well-known case of split conformal prediction; see Reference [22].”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [22]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Premisecitation

    The binary loss case results in a classical tolerance region, as discussed in prior work.

    “The binary loss case case results in a classical tolerance region, as discussed previously in References [53] and [40].”
    Quote in the paperNot a substantial claim0 of 2 sources checked
    • cites [53]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [40]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Classified as probably not a substantial claim. May combine two claims.

    Premisenone given

    When the loss takes values in {0,1}, for a fixed λ the loss at each point is a Bernoulli random variable, and the risk is the mean of that random variable.

    “When the loss takes values in {0, 1}, for a fixed λ the loss at each point is a Bernoulli random variable, and the risk is simply the mean of this random variable.”
    Quote in the paperSubstantial claim
  • May combine two claims.

    Interpretationnone given

    RCPS apply whenever one has access to a concentration result, whereas conformal prediction relies on exchangeability.

    “Second, risk-controlling prediction sets apply whenever one has access to a concentration result, whereas conformal prediction relies on exchangeability, a particular combinatorial structure.”
    Quote in the paperSubstantial claim
  • May combine two claims.

    Premisecitation

    For sums of i.i.d. random variables, Hoeffding's inequality is derived by setting ψ(z)=exp{νz}, and the Bentkus inequality is derived by setting ψ(z)=(zν)+.

    “For sums of i.i.d.random variables, the Hoeffding's inequality (Proposition 3) is derived by setting ψ (z) = exp{νz} [26], and the Bentkus inequality (Proposition 4) is derived by setting ψ (z) = (zν ) + .”
    Quote in the paperSubstantial claim0 of 1 sources checked
    • cites [26]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Interpretationnone given

    For adversarially robust uncertainty quantification, our results establish that the procedure is statistically valid.

    “While carrying out this procedure would require computational innovations, our results establish that it is statistically valid.”
    Quote in the paperNot a substantial claim
41 of 41
  • The authors state this as an assumption.

    There exists λmax ∈ Λ such that R(λmax)=0.

    “We further assume that there exists an element λ max ∈ Λ such that R(λ max ) = 0.”
  • The authors state this as an assumption.

    For each λ, a pointwise upper confidence bound R+(λ) for R(λ) is available such that P(R(λ) ≤ R+(λ)) ≥ 1-δ.

    “We assume that we have access to a pointwise upper confidence bound (UCB) for the risk function for each λ: where R + (λ) may depend on (X 1 , Y 1 ), . . ., (X n , Y n ).”
  • The authors state this as an assumption.

    The loss function satisfies the nesting property: S ⊂ S' ⇒ L(y,S) ≥ L(y,S').

    “We require that the loss function respects the following nesting property: S ⊂ S =⇒ L(y, S) ≥ L(y, S ).(2)”
  • The authors state this as an assumption.

    The collection of set-valued predictors {Tλ} is nested: λ1 < λ2 ⇒ Tλ1(x) ⊂ Tλ2(x).

    “We further suppose we have a collection of such set-valued predictors indexed by a one-dimensional parameter λ taking values in a closed set Λ ⊂ R ∪ {±∞} that are nested, meaning that larger values of λ lead to larger sets: λ 1 < λ 2 =⇒ T λ 1 (x ) ⊂ T λ 2 (x ).(1)”
  • The authors state this as an assumption.

    R(λ) is continuous.

    “Suppose Equation (3) holds pointwise for each λ, and that R(λ) is continuous.”
  • The authors state this as an assumption.

    The calibration data and test data come from the same distribution.

    “The only requirement is that the calibration data and the test data come from the same distribution.”
  • The authors state this as an assumption.

    The data (Xi, Yi) are i.i.d.

    “Let (X i , Y i ) i=1, ...,m be an independent and identically distributed (i.i.d.) set of variables”
  • The authors state this as an assumption.

    For each λ, c_v(λ) ≤ c_v for some constant c_v.

    “suppose in addition that for each λ ∈ Λ, c v (λ) ≤ c v for some constant c v .”
  • The authors state this as an assumption.

    The loss L(Y, Tλ(X)) has a finite second moment for each λ.

    “assume additionally that L(Y , T λ (X )) has a finite second moment for each λ.”
  • The authors state this as an assumption.

    The loss is bounded above by one.

    “We begin with the case where our loss is bounded above and, without loss of generality, we take the bound to be one.”
  • The paper relies on this without support.

    Black-box predictive algorithms are rarely accompanied by reliable uncertainty quantification.

    “Problematically, however, these algorithms are rarely accompanied by reliable uncertainty quantification.”
  • The paper relies on this without support.

    Prediction failures will often be silent ones, particularly in high-consequence settings.

    “Thus, prediction failures will often be silent ones, which is particularly alarming in high-consequence settings.”
  • The paper relies on this without support.

    Black-box prediction will be with us for some time to come.

    “it is clear that black-box prediction will be with us for some time to come.”
  • The authors state this as an assumption.

    The predictor px(y) is an estimate of p_{Y|X=x}(y).

    “We assume that our predictor is px (y), an estimate of p Y |X =x (y), and we let ρx (y, S) = L(y, S) px (y).”
  • The authors state this as an assumption.

    The loss function has the simple form L(y,S)=L_y 1{y not in S} for constants L_y.

    “Suppose our loss function has the simple form L(y, S) = L y 1 {y S} , for constants L y .”
  • The authors state this as an assumption.

    The loss takes the form L(y;S)=∫_{z∈S^c} ℓ(y,z)dμ(z) for some nonnegative ℓ and a finite measure μ.

    “Suppose our loss takes the form L(y; S) = z ∈S c ℓ(y, z)dμ (z), for some nonnegative ℓ and a finite measure μ.”
  • The authors state this as an assumption.

    In the ranking setting, we have an i.i.d. sequence of points (X1,Y1),...,(Xm,Ym), where Y∈{1,...,k}.

    “We assume we have an i.i.d.sequence of points, (X 1 , Y 1 ), . . ., (X m , Y m ), where Y ∈ {1, . . ., k }.”
  • The authors state this as an assumption.

    In the ranking setting, the family of set-valued predictors satisfies the monotonicity property λ<λ' implies Tλ ⊂ Tλ'.

    “We assume that we have a family of such predictors satsifying the following monotonicity property: λ < λ =⇒ T λ (x 1 , x 2 ) ⊂ T λ (x 1 , x 2 ).(13)”
  • The authors state this as an assumption.

    In the metric learning setting, we have an i.i.d. sequence of points (X1,Y1),...,(Xm,Ym), with Y={1,...,k}.

    “We next consider the problem of supervised metric learning, where we have an i.i.d.sequence of points (X 1 , Y 1 ), . . ., (X m , Y m ), with Y = {1, . . ., k }.”
  • The authors state this as an assumption.

    In the metric learning setting, the family of set-valued metrics has the monotonicity property in Equation (13).

    “We assume that we have a family of such set-valued metrics that have the monotonicity property in Equation (13).”
  • The authors state this as an assumption.

    In the metric learning setting, the loss function is bounded by 1.

    “In the setting above, suppose the loss function is bounded by 1.”
  • The authors state this as an assumption.

    In the ranking setting, the loss function is bounded by one.

    “Consider the setting above with any loss function bounded by one.”
  • The authors state this as an assumption.

    The family of sets Tλ is such that the minimal element in the score definition exists with probability one.

    “where we assume that the family of sets T λ is such that the minimal element exists with probability one.”
  • The paper relies on this without support.

    The general case where Y is not binary has not been explicitly dealt with in prior work.

    “To the best of our knowledge, the general case where Y 2 Y has not been explicitly dealt with, so we record this mild generalization here.”
24 of 24

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • RCPS focuses exclusively on the average risk, which fails to capture critical aspects of risk-sensitive decision-making, particularly the tail behavior of the loss distribution.

    “However, RCPS focuses exclusively on the average risk, which fails to capture critical aspects of risk-sensitive decisionmaking, particularly the tail behavior of the loss distribution.”

    From Optimized Certainty Equivalent Risk-Controlling Prediction Sets (2026) · cites this paper as [8]

    Section 6, “Other Risk Functions” (page unavailable), says the paper initially defines risk as mean loss but then considers risk functionals other than the mean. That directly contradicts the claim that RCPS focuses exclusively on average risk. The passage does not itself establish a specific guarantee for the tail of the loss distribution. (LLM, conf=0.88)

    Checked by a reasoning model — may be wrong.

    Experimental — accuracy not yet measured
  • The WSR UCB on the risk R(λ,t) satisfies the inequality R(λ,t) ≤ ˆR+(λ,t,δ) with probability at least 1-δ over the calibration data.

    “The WSR UCB in (12) satisfies the inequality”

    From Optimized Certainty Equivalent Risk-Controlling Prediction Sets (2026) · cites this paper as [8]

    Proposition 5 (§3.1.3) states that the WSR bound is a (1−δ) upper confidence bound for R(λ), and its proof in Appendix A gives P(R(λ)>R⁺WSR(λ))≤δ. The paper establishes this for a fixed λ and a loss bounded by one; it does not establish the stated bound for R(λ,t) or the citing paper’s UCB in equation (12). (LLM, conf=0.86)

    Experimental — accuracy not yet measured
  • [39] generalizes [18] to control the quantile of a monotone loss function conditional on (X_i,Y_i)_{i=1}^n with probability 1-δ over the calibration dataset for any user-specified tolerance parameter δ.

    “[39] generalizes [18] to control the quantile of a monotone loss function conditional on ( X i , Y i ) n i =1 with probability 1 -δ over the calibration dataset for any user-specified tolerance parameter δ .”

    From Conformal Risk Control (2022) · cites this paper as [18]

    Section 2.2 and Appendix A establish that calibration can control a monotone risk with probability at least 1−δ over the calibration data. But Section 6 describes the paper’s main risk as the mean loss, while Appendix B gives a binary-loss tolerance-region case; the cited passages do not establish the claimed guarantee for the quantile of an arbitrary monotone loss. The paper’s Related Work section supports the characterization of its method as an expansion of tolerance regions. (LLM, conf=0.85)

    Experimental — accuracy not yet measured
  • Risk-controlling prediction sets (RCPS) offer probabilistic guarantees on the expected risk.

    “risk-controlling prediction sets (RCPS) [8] offer a principled approach to control the expected loss of the prediction set with high probability.”
  • Split conformal prediction (SCP) offers distribution-free, model-agnostic guarantees on ground-truth coverage, assuming data exchangeability.

    “SCP offers distribution-free, model-agnostic guarantees on groundtruth coverage, assuming data exchangeability.”

    From Conformal Lesion Segmentation for 3D Medical Images (2025) · cites this paper as Bates et al. 2021

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

Each contradiction between two passages listed here was confirmed by an independent check.

  • Protein distance matrices cannot have strictly positive diagonals

    Minor

    The label space requires positive elements throughout, but each diagonal entry represents the distance from a residue to itself, which is zero.

  • Polyp examples disagree on the number of polyps per image

    Minor

    Section 5.4 says all 20 selected images contain at least two polyps, whereas the Figure 12 caption says its top two rows contain a single polyp per image.

2 of 2

Cites

Flagged first, then by citations

Research works printed but not linked: 22

  1. Angelopoulos Anastasios Nikolas, International Conference on Learning Representations (ICLR).
  2. 10.5555/3454287.3455291 · DOI
  3. Cauchois Maxime, 2020, Duchi
  4. 10.5555/2354409.2355033 · DOI
  5. Grycko Eugen, Information and Classification
  6. Gupta Chirag, 2020, Ramdas
  7. Izbicki Rafael, 2019, Stern
  8. Lei Lihua, 2020, Candès
  9. Lin Tsung-Yi, European Conference on Computer Vision. Springer, 740–755
  10. Madry Aleksander, 2018, International Conference on Learning Representations (ICLR).
  11. 10.5555/1148466.1148472 · DOI
  12. Maurer Andreas, 2009, Conference on Learning Theory (COLT).
  13. Park Sangdon, 2020, International Conference on Learning Representations (ICLR).
  14. Park Sangdon, 2021, International Conference on Learning Representations (ICLR).
  15. 10.5555/3454287.3454605 · DOI
  16. Romano Yaniv, 2020, International Conference on Advances in Neural Information Processing Systems, H. Larochelle, M. Ranzato, R. Hadsell, M. F. Balcan, and H. Lin (Eds.), 33
  17. Senior Andrew W., 2020, et al
  18. 10.5555/3454287.3454514 · DOI
  19. Vovk Vladimir, 2012, Asian Conference on Machine Learning, 25
  20. 10.5555/645528.657641 · DOI
  21. 10.5555/1062391 · DOI
  22. Vovk Vladimir, 2020, Ninth Symposium on Conformal and Probabilistic Prediction and Applications, Alexander Gammerman, Vladimir Vovk, Zhiyuan Luo, Evgueni Smirnov, and Giovanni Cherubin (Eds.), 128

Cited by

Sorted by citations

Authors
Bates, S., Angelopoulos, A., Lei, L., Malik, J., & Jordan, M.
Affiliations
  • University of California, Berkeley (US)
  • Stanford University (US)
Venue
Journal of the ACM
Published
2021-09-30
Volume
68
Issue
6
Pages
1-34
ISSN
  • 0004-5411 (ISSN-L)
  • 1557-735X
OpenAlex
W3118640283
Cited by
144
References
63
Citations by year
2026: 48 · 2025: 27 · 2024: 25 · 2023: 21 · 2022: 8 · 2021: 14 · 2020: 1
FWCI
5.90
Type
journal article
Language
en
Open access
Locations
  • Journal of the ACM (publishedVersion, cc-by)
  • arXiv (Cornell University) (submittedVersion)
  • arXiv (Cornell University)
Funders
  • National Science Foundation Graduate Research Fellowship Program and a Berkeley Fellowship
  • Army Research Office (W911NF-16-1-0368)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
  • Physical Sciences › Computer Science › Artificial Intelligence › Machine Learning and Algorithms
  • Physical Sciences › Computer Science › Artificial Intelligence › Machine Learning and Data Classification
Keywords
prediction sets, uncertainty quantification, finite-sample guarantees, risk control, multi-label classification, hierarchical classification, image segmentation, protein structure prediction, metric learning

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Claims read by deepseek-v4.1-flash under definition version 3 (extract-v3) on 2026-10-22.

Classified by jev-1.13-20260917 (gold-guideline-v0.2) on 2026-10-22.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review