Skip to content

Common-Witness Certificates and Sharp Feature Bounds for Counterfactual Image Auditing

Sep 2026 · 0 citations · 32 references
Computer Science

TL;DR

This work formalizes this local-to-global failure using a common witness grade and witness nerve, and predicts the predicted local-global separation, while synthetic experiments test sharp bounds, certificate recovery, and structured computation.

Abstract

An image editor may satisfy every regional plausibility constraint separately even when no single latent explanation fits the complete output. We formalize this local-to-global failure using a common witness grade and witness nerve. The framework separates auditing from causal identification: shared exogeneity alone allows every coupling of the regime marginals, whereas an externally justified witness relation yields sharp partial-identification bounds for prespecified image features. Helly-type arguments provide short incompatibility certificates for quasiconvex losses, heterogeneous action strata, and finite witness atlases; a blocker-hypergraph formula gives exact repair counts. Simultaneous confidence regions for the regime marginals give finite-sample outer coverage of the complete identified interval. Controlled MNIST, Morpho-MNIST, and smallNORB studies demonstrate the predicted local-global separation, while synthetic experiments test sharp bounds, certificate recovery, and structured computation. The method audits a declared feature relation and does not identify unrestricted pixel-level counterfactuals.

View source

Similar papers

Preprint Oct 2026

The Missing Corner: When Sharp Causal Bounds Fail to Compose

Sharp bounds on two potential-outcome means need not combine into sharp bounds on their difference. We characterize exactly when composition is guaranteed across environments sharing a joint potential-outcome law. For binary treatment and outcome, fix strict selection-probability bounds and interior treatment propensit...

Yi-Cheng Qi, Xiao Xiong · 0 citations
#machine learning Preprint Sep 2026

PrivCert: Certifying Statement Support under Differential Privacy

Differentially private (DP) text generation can protect individual records, but privacy alone does not specify what evidence a released statement carries about the underlying data. We identify this as an evidence gap: a private report may contain plausible claims without indicating whether they are strongly supported b...

Tsubasa Takahashi, Takumi Hiraoka · 0 citations
#artificial intelligence Preprint Sep 2026

Audit-First VAPO: Risk-Certified Selective Updates under Imperfect Verification

This work introduces Audit-First VAPO, which separates discrete directional admission from continuous magnitude control, and evaluates two models on two reasoning benchmarks against static RLVR, matched-random selection, confidence thresholding, noise correction, and verifier augmentation.

Miao-Bo Hu, Shu-Hao Hu, Xiao-Bo Guo et al. · 0 citations
Preprint Open access Sep 2026

From Public Evidence to Contractual Outcome: First and Stable Decidability on Kalshi

Public evidence can become sufficient to settle a prediction-market contract before the venue records its first determination, but the relevant boundary depends on the applicable rule version, exact release object, source hierarchy, correction history, and unfinished contract conditions. This paper defines two Kalshi c...

M. Nechepurenko · 3 citations
Preprint Aug 2026

Pre-Disclosure Experiment Menus: Oracle-Relative Risk and Joint Sample--Menu Asymptotics

We study a resolution problem in local asymptotic decision theory: individual risks may admit Gaussian approximations that do not determine their vanishing difference. A finite menu of experiments is installed before context disclosure, although observations may be routed adaptively afterward. A greatest-element Blackw...

Xin-Yu Song · 1 citation
#artificial intelligence Review Sep 2026

ASLEval: Measuring Privacy Exposure Displacement in LLM Agent Sessions

Privacy exposure displacement, the mismatch between a local evaluation proxy and target-grounded session exposure, and ASLEval, an authorization-aware framework that pre-registers a hidden target set, measures all declared visible exits, and reserves internal traces for diagnosis are introduced.

Guo-Xin Wu, Hui-Zhen Huang, Guo-Xiong Long et al. · 0 citations

Related blog posts

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.