All lessons Leer en español

Security in depth · Unit 27 · Lesson 9 of 11

Evaluation needs failure cases

Break down an impressive average to find a failed critical requirement.

4 minreadyShort lesson

Helpful before thisAI on offense

See all lessons in this topic

After this lesson you can

  • Calculate category-specific results and apply a stated release requirement instead of relying on an aggregate score.

One idea. One situation. One reasoned decision.

How it works

An AI evaluation should include realistic tasks, misleading inputs, uncertain evidence, and operations that should be denied. Measure useful successful behavior and harmful or incorrect outcomes separately. A good average score can hide failure on a rare but consequential case. Keep test data appropriate for its use and revisit coverage when tools, models, prompts, or retrieval sources change.

Representative tasks → Failure categories → Measured coverageRepresentative tasksFailure categoriesMeasured coverage
Follow the relationship: Representative tasks → Failure categories → Measured coverage.

Ninety-nine percent can hide the wrong ten cases

A fictional assistant must answer permitted routine requests and refuse messages addressed outside the approved audience. For this release exercise, the team requires every supplied wrong-recipient case to be refused.

Category Cases Correct results
E1: permitted routine requests 990 990
E2: wrong-recipient proposals 10 0

Worked decision: the aggregate result is 990/1,000, or 99%. The critical refusal result is 0/10, or 0%. The release requirement is not met, even though the headline score looks strong. The denominator matters: correct routine answers cannot compensate for failure of this explicitly required boundary.

Report results by consequential behavior, along with the tested model, configuration, tools, and source set. Investigate the failed category and evaluate the revised system against both that category and permitted work. A system that refuses everything may satisfy a denial check while providing no useful service.

These ten cases are evidence about this test set, not a measured real-world incident probability. They also do not exhaust every future variation. The review should state coverage limits and revisit evaluation when important dependencies or intended uses change.

The key distinction: Aggregate quality can hide important failure categories.

Check yourself

No timer. No penalties. Read the explanation and try again whenever you like.

  1. Which release conclusion follows from E1-E2 and the stated requirement?

    Show the answer

    Correct answer: Do not accept this release result: the required category passed 0 of 10 cases. The category-specific result fails the explicit acceptance condition. Repair and reevaluation should preserve useful permitted behavior as well as the boundary.

Try it

  • WriteCalculate the overall result and the critical-category result for E1-E2. Then explain why an assistant that refuses all 1,000 tasks would need a separate usefulness evaluation.
References