Skip to content
Notation and formulas
Reference

Notation and formula card

19 min readDraftUpdated 2026-10-13

This card collects the handbook's notation and formulas in one place. The first half fixes the symbols: the five tuples of the evaluator system, the rules for letters that mean different things in different layers, and the conventions for rates and margins. The second half is a formula card grouped by the job each formula does.

Each formula appears in the same form as in the chapter that develops it, with a link to that chapter, the published source where there is one, and the calculator that computes it, if one exists. Calculators live in their chapters, the most used also have pages of their own, and the glossary gives every term in words.

The five tuples#

The evaluator system#

This handbook writes the evaluator system as five layers:

Esys=(C,I,R,V,L)\mathcal{E}_{\text{sys}} = (\mathcal{C}, \mathcal{I}, \mathcal{R}, \mathcal{V}, \mathcal{L})

where each coordinate is a layer with its own question:

SymbolLayerThe question it answersHome
C\mathcal{C}ClaimWhat property, over what world, for what decision?Constructs, facets, and nuisances
I\mathcal{I}InstrumentHow is the judgment produced?Specification
R\mathcal{R}RegimeWhat causal role does the signal play, and what happens when the system adapts to it?Exposure, modification, and access
V\mathcal{V}ValidationWhy believe the signal means what we claim, before and after adaptation?The validation profile
L\mathcal{L}LifecycleDoes validity survive over time, and are we still evaluating the right thing?Channels and independence

The evaluator system explains the master object. The lifecycle layer has no tuple: its controls are the O/A/P channels, anchor-burn accounting, tripwires, versioning, and frame review FF (Living eval suites, Frame review and governance).

The claim#

C=(C,P,E,H,D,δ)\mathcal{C} = (C, P, E, H, D, \delta)

where:

SymbolNameMeaningHome
CCConstructThe latent property the evaluation intends to measureConstructs
F+F^{+}, F−F^{-}Facets and nuisancesWhat the score should track, and what it must not respond toConstructs
PPPopulationThe task, user, or input distribution the claim is aboutValidity domain
EEEnvironmentExternal state, tools, and other actorsValidity domain
HHHarnessPrompts, tools, memory, orchestration, and stopping logic around the modelValidity domain
DDValidity domainThe declared conditions under which the interpretation is claimed to holdValidity domain
δ\deltaDecisionThe decision the evidence is meant to changeDecision claims

The instrument#

I=⟨Ψ,A,V,M,Z,R,Γ⟩\mathcal{I} = \langle \Psi, A, V, M, Z, R, \Gamma \rangle

where:

SymbolNameMeaningHome
Ψ\PsiSpecificationThe operational statement of what counts as successSpecification
ψ\psiPredicateThe specification read as a test: ψ(y)=1\psi(y) = 1 when yy satisfies itSpecification
AAAnchorWhat the comparison is rooted inAnchors and evidence views
VVEvidence viewWhat the evaluator may observeAnchors and evidence views
MMMechanismWhat computes the judgmentMechanism families
ZZSignalWhat leaves the evaluator: verdict, score, preference, vector, critiqueSignals and resolution
RRResolutionThe unit judged: step, action, artifact, trajectory, or rateSignals and resolution
Γ\GammaAggregation geometryHow criterion-level judgments become a decision, with thresholds θi\theta_iAggregation geometry

A rubric is the specification in rubric form, Ψ={(ci,Ei,Ai,Gi)}i=1k\Psi = \{(c_i, E_i, A_i, G_i)\}_{i=1}^{k}: criterion, allowed evidence, exemplar anchors or scale, and gate semantics for each of kk criteria (Rubrics and criterion cards).

The regime#

R=(κ,O,b,S,Aaccess,K)\mathcal{R} = (\kappa, O, b, S, A_{\text{access}}, K)

where:

SymbolNameMeaningHome
κ\kappaConsumerWho or what acts on the signalExposure and surfaces
OOOptimizerWho adapts against the signalExposure and surfaces
bbExposure budgetHow much optimization pressure, in the optimizer's own unitExposure and surfaces
SSModification surfaceEverything the optimizing loop can changeExposure and surfaces
AaccessA_{\text{access}}Information accessWhat flows from the evaluator or anchor back to the optimizerExposure and surfaces
KKCost and latency envelopeWhat each evaluator call may cost, and how fast it must answerExposure and surfaces

The regime's three values are measure, optimize, and monitor-control (Use regimes).

The validation profile#

Π=(N,E,T,G,C,D)\Pi = (N, E, T, G, C, D)

where:

SymbolNameMeaningHome
NNNatural errorConfusion matrices, calibration, and slice error on the target distributionThe validation profile
EEExploitability curveEvaluator–anchor divergence as optimization exposure growsAdaptive validity
TTTransportWhether error rates carry over across generators, slices, time, and environmentsThe validation profile
GGGenerator couplingWhether the evaluator errs where the generator errsGoodhart and self-confirming loops
CCChannel couplingDependence among supposedly independent assurance channelsChannels and independence
DDDrift and saturationHow calibration and discrimination degrade, and when the range is exhaustedLiving eval suites

Inside Π\Pi, name the exploitability curve, channel coupling, drift profile, and generator coupling in words; the letters collide with the claim's.

Collision rules#

The same letter often carries different meanings in different layers. The rules below keep one meaning per page; where a formula uses a letter locally, its "where" list fixes the meaning.

SymbolMeanings in this handbookRule
κ\kappaConsumer in R\mathcal{R}; chance-corrected agreementBare κ\kappa is the consumer, only inside R\mathcal{R}. Always write Cohen's κ for agreement.
VVEvidence view VV; verifier VψV_\psi; value VπV^\pi (and QπQ^\pi); validation layer V\mathcal{V}Plain VV is the evidence view. The others always carry their subscript, superscript, or script letter.
RRResolution RR; regime R\mathcal{R}Plain RR is resolution, and the regime is always R\mathcal{R}. An expert's value is QzQ_z and a judge's rubric is Ψ\Psi, never RR.
AAAnchor AA; information access AaccessA_{\text{access}}; anchor channel A of O/A/P; exemplar anchors AiA_i; an action aaQualify every "anchor" in prose: reference anchor, anchor channel, exemplar anchors, or linking items.
PP, ppPopulation PP; pass or base rate pp; nominal density p(x)p(x) in importance sampling; failure probability PfP_fWrite probabilities as Pr⁡[⋅]\Pr[\cdot] so that PP stays the population.
Ψ\Psi, ψ\psiSpecification Ψ\Psi; the same specification as a predicate ψ\psiNever write the specification as Σ\Sigma.
EE, CC, DD, TT, GGClaim: environment, construct, validity domain. Π\Pi: exploitability, channel coupling, drift, transport, generator coupling. Validity statement: evaluator system, claim, domain, trust root. Coupling diagnostics: evaluator EE, generator GG. Chain links: task success TT, positive grade GGWrite Π\Pi's components and the statement's slots in words.
SSModification surface SS; system behavior S(x)S(x)The aggregate score is written Γ(z)\Gamma(z), never SS.
τ\tau, θ\thetaTrajectory τ\tau; thresholds θi\theta_i and a flag threshold θ\theta; parameters in gθg_\theta and πθ\pi_\thetaThresholds are θi\theta_i, never τi\tau_i; θ\theta as a subscript names parameters.
tt, ffTPR and FPR in selection and alert formulas; ff is also an objective, a density f1f_1, and a learned scorer fϕf_\phitt and ff mean TPR and FPR only where the "where" list says so.
bb, δ\deltaExposure budget bb and McNemar's discordant count bb; decision δ\delta, a disturbance δ\delta, and the smallest difference that mattersMcNemar's bb and cc are counts. Read δ\delta from its formula.
α\alpha, β\betaSignificance level, quantile level, conformal miss rate, Beta prior, and system effect αm\alpha_m; Beta prior, power 1−β1 - \beta, KL price, and expert consistencyLocal to each formula.

Conventions#

  • Pass rates. pp is the true rate on the claim's population, or a base rate; p^\hat p is an estimate; pobsp_{\text{obs}} is a judge's raw reading; pfailp_{\text{fail}} is a failure probability. A sampled rate always carries its interval and n, as in the illustrative 80% (95% Wilson CI 71–87%, n = 100).
  • Error rates. TPR and FPR are written TPR\mathrm{TPR} and FPR\mathrm{FPR} in the sensor formulas and tt and ff in the selection and alert formulas. Specificity, or TNR, is 1−FPR1 - \mathrm{FPR} (sensitivity and specificity).
  • Trajectories. τ=(s0,a0,s1,a1,…,sT)\tau = (s_0, a_0, s_1, a_1, \dots, s_T), with states sts_t and actions ata_t (Evaluating agents).
  • Margins. ρ(ψ,τ)\rho(\psi, \tau) is a signed robustness margin: positive when τ\tau satisfies ψ\psi, negative when it violates it, and its size says by how much (Specification).
  • Exploitability. ε(b)\varepsilon(b) is the evaluator's disagreement with an independent anchor at exposure bb, and b∗b^{*} is the largest tested exposure before that divergence exceeds a predeclared tolerance (tested exposure). Report b∗b^{*} with the tested range, never as "robust".
  • Typography. Multi-letter names are upright, as in FPR\mathrm{FPR} and CVaR\mathrm{CVaR}; Pr⁡[⋅]\Pr[\cdot] is a probability, E[⋅]\mathbb{E}[\cdot] an expectation, and 1[⋅]\mathbb{1}[\cdot] is 1 when its condition holds and 0 otherwise.

Formula card#

Each entry gives the formula, a "where" list, when it applies, the published source where there is one, the chapter that develops it, and the calculator that computes it, if one exists.

Estimating a rate and its interval#

Target and observed pass rate#

p=Ex∼P[ψ(S(x))],p^=1n∑i=1nyip = \mathbb{E}_{x \sim P}\big[\psi(S(x))\big], \qquad \hat p = \frac{1}{n}\sum_{i=1}^{n} y_i

where:

  • S(x)S(x) is the system's behavior on task xx, drawn from the claim's population PP;
  • yi∈{0,1}y_i \in \{0, 1\} is the outcome of task ii among nn independent tasks.

p^\hat p estimates the never-observed pp only when the tasks represent PP; a suite drawn from another distribution QQ estimates Ex∼Q[ψ(S(x))]\mathbb{E}_{x \sim Q}[\psi(S(x))] instead (Task distributions and dataset engineering).

Chapter: Estimands, pass rates, and intervals

Wilson interval#

center=p^+z2/(2n)1+z2/nhalf-width=z1+z2/np^(1−p^)n+z24n2\begin{aligned} \text{center} &= \frac{\hat p + z^2/(2n)}{1 + z^2/n} \\ \text{half-width} &= \frac{z}{1 + z^2/n}\sqrt{\frac{\hat p(1 - \hat p)}{n} + \frac{z^2}{4n^2}} \end{aligned}

where:

  • p^\hat p is the observed pass rate on nn independent tasks;
  • zz is the standard normal quantile, 1.96 for 95%.

The Wilson interval is the default for independent binary outcomes at moderate n, and unlike the Wald form it keeps a nonzero width when every task passes or every task fails; when trials repeat within tasks, resample whole tasks instead.

Chapter: Estimands, pass rates, and intervals · Calculator: Pass-rate intervals and sample size

Beta-binomial posterior#

p∼Beta(α,β)p∣y∼Beta(α+s, β+n−s)\begin{aligned} p &\sim \mathrm{Beta}(\alpha, \beta) \\ p \mid y &\sim \mathrm{Beta}(\alpha + s,\ \beta + n - s) \end{aligned}

where:

  • α\alpha and β\beta set the prior, and α=β=1\alpha = \beta = 1 is uniform;
  • ss is the number of passes among nn tasks.

Use the Beta-binomial posterior, which states its prior openly and assumes independent tasks, when the release question is itself a probability, such as Pr⁡[p>0.95]\Pr[p > 0.95].

Chapter: Estimands, pass rates, and intervals

Stratified estimate#

p^strat=∑hwh p^hSE(p^strat)=∑hwh2 p^h(1−p^h)nh\begin{aligned} \hat p_{\text{strat}} &= \sum_h w_h\, \hat p_h \\ \mathrm{SE}(\hat p_{\text{strat}}) &= \sqrt{\sum_h w_h^{2}\, \frac{\hat p_h (1 - \hat p_h)}{n_h}} \end{aligned}

where:

  • hh indexes the strata, and whw_h is stratum hh's share of the claim's population, with the shares summing to 1;
  • p^h\hat p_h and nhn_h are the stratum's observed pass rate and number of tasks.

The stratified estimate reweights a suite that over-samples some slices on purpose, with weights taken from the claim's population; no weighting reaches a stratum the suite never sampled.

Chapter: Estimands, pass rates, and intervals

Kish effective sample size#

neff=(∑iwi)2∑iwi2n_{\text{eff}} = \frac{\left(\sum_i w_i\right)^2}{\sum_i w_i^2}

where wiw_i is the weight on item ii.

The Kish effective sample size prices any reweighting as the number of equally weighted items that would carry the same information; when it falls to a small fraction of n, the suite's mix is far from the population's.

Chapter: Estimands, pass rates, and intervals

Covariate-shift weight#

w(x)=P(x)Q(x)w(x) = \frac{P(x)}{Q(x)}

where:

  • P(x)P(x) is the probability of task xx under the claim's population;
  • Q(x)Q(x) is its probability under the distribution the suite actually samples.

The covariate-shift weight works only where QQ puts probability wherever PP does, because weighting cannot repair missing support.

Chapter: Estimands, pass rates, and intervals

Correcting a noisy judge#

Judge sensor model#

pobs=p TPR+(1−p) FPRp_{\text{obs}} = p\,\mathrm{TPR} + (1 - p)\,\mathrm{FPR}

where:

  • pp is the system's true pass rate, relative to the specification;
  • TPR\mathrm{TPR} and FPR\mathrm{FPR} are the judge's error rates on this system's outputs, measured against adjudicated labels;
  • pobsp_{\text{obs}} is the pass rate the judge reports.

The model applies to binary verdicts, as in estimating prevalence from an imperfect screening test, and its error rates belong to the outputs they were measured on: a system optimized against the judge can have different ones, which is differential misclassification.

Chapter: The judge as a noisy sensor · Calculator: Correcting a noisy judge

Rogan–Gladen correction#

p^=pobs−FPRTPR−FPR\hat p = \frac{p_{\text{obs}} - \mathrm{FPR}}{\mathrm{TPR} - \mathrm{FPR}}

where p^\hat p is the corrected estimate of the true pass rate, and the other symbols are as in the sensor model.

The Rogan–Gladen correction (Rogan & Gladen, 1978) applies when the error rates transport to the eval set and TPR ≠ FPR; clip a result outside 0 to 1 and treat the clipping as evidence that they do not transport, and note that no correction rescues a rubric that operationalizes the wrong construct.

Chapter: The judge as a noisy sensor · Calculator: Correcting a noisy judge

Variance of the corrected rate#

Var⁡(p^)≈1J2[ pobs(1−pobs)n+p^2Var⁡(TPR)+(1−p^)2Var⁡(FPR) ]\begin{aligned} \operatorname{Var}(\hat p) \approx \frac{1}{J^{2}} \Big[\, & \frac{p_{\text{obs}}(1 - p_{\text{obs}})}{n} \\ &+ \hat p^{2} \operatorname{Var}(\mathrm{TPR}) \\ &+ (1 - \hat p)^{2} \operatorname{Var}(\mathrm{FPR}) \,\Big] \end{aligned}

where:

  • J=TPR−FPRJ = \mathrm{TPR} - \mathrm{FPR} is the judge's separation between true passes and true failures;
  • nn is the number of eval items the judge graded;
  • Var⁡(TPR)\operatorname{Var}(\mathrm{TPR}) and Var⁡(FPR)\operatorname{Var}(\mathrm{FPR}) are the sampling variances of the calibration estimates.

This first-order approximation sizes the problem but is not a release-grade interval: it blows up as J→0J \to 0, and decision-grade intervals on corrected rates need a construction built for the purpose, such as the one by Lang and Reiczigel (2014).

Chapter: The judge as a noisy sensor

Selection and alert precision#

Benign selection model#

Pr⁡[C∣+]=p tp t+(1−p) f\Pr[C \mid +] = \frac{p\,t}{p\,t + (1-p)\,f}

where:

  • CC is the event that a candidate is correct, and ++ the event that the evaluator flags it;
  • pp is the share of candidates that are correct;
  • tt and ff are the evaluator's TPR and FPR on these candidates.

The formula gives the precision of best-of-N selection through a binary evaluator as a model, not a theorem, assuming independent candidates, values of tt and ff that hold for every candidate at every N, and a uniform choice among flagged candidates; N does not appear in it, so more samples cannot raise the ceiling.

Chapter: Adaptive validity · Calculator: Best-of-N with an imperfect verifier

Winner correctness under top-score selection#

Pr⁡[Cwinner]=N∫p f1(s) G(s)N−1 ds\Pr[C_{\text{winner}}] = N \int p\, f_1(s)\, G(s)^{N-1}\, ds

where:

  • F1F_1 and F0F_0 are the score distributions of correct and incorrect candidates, and f1f_1 is the density of correct scores;
  • G(s)=p F1(s)+(1−p) F0(s)G(s) = p\,F_1(s) + (1-p)\,F_0(s) is the chance that one other candidate scores below ss;
  • NN is the number of candidates.

This stylized expression applies when the selector keeps the highest score; the result depends on the extreme tail of the score distributions, so precision can fall, rise, or plateau as N grows, and ordinary calibration does not answer the question.

Chapter: Adaptive validity · Calculator: Best-of-N with an imperfect verifier, with continuous scores

Alert precision#

Pr⁡[danger∣alert]=p tp t+(1−p) f\Pr[\text{danger} \mid \text{alert}] = \frac{p\,t}{p\,t + (1 - p)\,f}

where:

  • pp is the base rate of truly dangerous events;
  • tt is the monitor's true-positive rate on dangerous events, and ff its false-positive rate on harmless ones.

Alert precision is the selection arithmetic at a production base rate, where even a small false-positive rate can dominate the alerts when pp is tiny, so validate a monitor at that base rate, not on a balanced test set.

Chapter: Monitoring and control in production · Calculator: Alert precision at production base rates

Conformal flag threshold#

θ=s(k),k=⌊(n+1) α⌋\theta = s_{(k)}, \qquad k = \lfloor (n + 1)\,\alpha \rfloor

where:

  • s(1)≤⋯≤s(n)s_{(1)} \le \dots \le s_{(n)} are the monitor's badness scores on nn labeled true failures, sorted;
  • α\alpha is the target miss rate, and events that score at or above θ\theta are flagged.

Under exchangeability, at most about α\alpha of future true failures score below the threshold, but the guarantee of conformal prediction is marginal, not per slice, breaks under drift, and says nothing about false positives.

Source: Kochenderfer et al. (2026) · Chapter: Monitoring and control in production

pass@k and pass^k#

Independent pass@k and pass^k#

pass@k=1−(1−p)k,passk=pk\text{pass@}k = 1 - (1 - p)^k, \qquad \text{pass}^k = p^k

where:

  • pp is the per-attempt success probability;
  • kk is the number of attempts.

pass@k is the probability that at least one of k attempts succeeds and pass^k the probability that all k succeed, both idealized for independent attempts at one rate, so compute them per task and then average when difficulty varies. The Berkeley slides label the all-k quantity "pass@k" (Song, 2025, slides 55, 57, and 61); read it as pass^k.

Chapter: Estimands, pass rates, and intervals · Calculator: pass@k versus pass^k

Unbiased pass@k estimator#

pass@k^=1−(n−ck)/(nk)\widehat{\text{pass@}k} = 1 - \binom{n - c}{k} \Big/ \binom{n}{k}

where:

  • nn is the number of samples drawn for one task, at least kk;
  • cc is the number of those samples that pass.

The unbiased estimator of Chen et al. (2021) is computed per task, averaged across tasks, and given an interval by resampling tasks; the plug-in 1−(1−p^)k1 - (1 - \hat p)^k reads low on average.

Source: Chen et al. (2021) · Chapter: Estimands, pass rates, and intervals · Calculator: pass@k versus pass^k

Comparing two systems#

McNemar's test#

χ2=(b−c)2b+c\chi^2 = \frac{(b - c)^2}{b + c}

where:

  • bb is the number of tasks that system A passes and system B fails;
  • cc is the number of tasks that B passes and A fails.

McNemar's test compares two systems on the same tasks through the discordant pairs, and under equal performance its statistic is approximately chi-square with one degree of freedom; use the exact binomial test when b+cb + c is small, and report the effect, (b−c)/N(b - c)/N on NN paired tasks, with its interval, not only a p-value.

Chapter: Comparing systems · Calculator: Comparing two systems on the same tasks

Paired-comparison sample size#

N≈(z1−α/2+z1−β)2dδ2N \approx \frac{\left(z_{1-\alpha/2} + z_{1-\beta}\right)^2 d}{\delta^2}

where:

  • NN is the number of paired tasks;
  • δ\delta is the smallest true difference in pass rates that would change the decision;
  • dd is the expected share of tasks on which the two systems disagree;
  • z1−α/2z_{1-\alpha/2} and z1−βz_{1-\beta} are standard normal quantiles for the significance level and the power 1−β1 - \beta.

This is a rough sizing rule from McNemar's normal approximation, slightly optimistic against the exact test. It sizes a comparison for the smallest difference that would change the decision; the chapter derives it.

Chapter: Comparing systems

Family-wise false alarms#

Pr⁡[at least one false alarm]=1−(1−α)m\Pr[\text{at least one false alarm}] = 1 - (1 - \alpha)^m

where:

  • mm is the number of gates;
  • α\alpha is the significance level of each gate.

The formula assumes independent gates, and mαm\alpha bounds the family-wise false-alarm rate under any dependence; pre-register the gates or correct for the family, for example by testing each gate at α/m\alpha/m.

Chapter: Comparing systems · Calculator: Comparing two systems on the same tasks, lower panel

Rare events#

Trials a rare failure needs#

Under naive sampling from the claim's population, seeing even one failure at rate pp takes about 1/p1/p trials, and estimating pp to within about 10% of its value takes about 100/p100/p (Kochenderfer et al., 2026).

Chapter: Rare-event assurance

Rule of three#

pfail≲3np_{\text{fail}} \lesssim \frac{3}{n}

where:

  • pfailp_{\text{fail}} is the true probability that one trial fails;
  • nn is the number of independent, representative trials, none of which failed.

The rule of three is a rough 95% upper bound, exactly 1−0.051/n1 - 0.05^{1/n}; its Bayesian form updates a uniform prior to Beta(1,n+1)\mathrm{Beta}(1, n + 1), with 95% upper bound 1−0.051/(n+1)≈3/(n+1)1 - 0.05^{1/(n+1)} \approx 3/(n+1), and extends to ss failures as Beta(1+s,1+n−s)\mathrm{Beta}(1 + s, 1 + n - s). Clustered or correlated trials make every one of these bounds optimistic.

Chapter: Rare-event assurance · Calculator: What zero failures buys you

Importance sampling#

Pf=Eq ⁣[p(x)q(x) 1{fail(x)}]≈1N∑i=1Np(xi)q(xi) 1{fail(xi)}\begin{aligned} P_f &= \mathbb{E}_{q}\!\left[\frac{p(x)}{q(x)}\, \mathbb{1}\{\text{fail}(x)\}\right] \\ &\approx \frac{1}{N} \sum_{i=1}^{N} \frac{p(x_i)}{q(x_i)}\, \mathbb{1}\{\text{fail}(x_i)\} \end{aligned}

where:

  • PfP_f is the failure probability under the nominal distribution;
  • p(x)p(x) is the probability of task xx under the nominal distribution, not a pass rate;
  • q(x)q(x) is its probability under the proposal from which the NN tasks xix_i are drawn.

Importance sampling samples where failures are common and reweights each outcome by its likelihood ratio, which keeps the estimate unbiased for the nominal distribution only if the proposal covers the whole failure region; a poorly matched proposal makes the variance blow up.

Source: Kochenderfer et al. (2026) · Chapter: Rare-event assurance

Multilevel splitting#

pfail=∏ℓ=1LPr⁡[f≤γℓ∣f≤γℓ−1]p_{\text{fail}} = \prod_{\ell=1}^{L} \Pr\big[f \le \gamma_\ell \mid f \le \gamma_{\ell-1}\big]

where:

  • ff is a robustness-style objective, with failure exactly when f≤0f \le 0;
  • γ1>γ2>⋯>γL=0\gamma_1 > \gamma_2 > \dots > \gamma_L = 0 are the thresholds, with γ0\gamma_0 above every outcome.

Multilevel splitting writes a rare probability as a product of common conditional ones, each estimated among the trials that reached the previous level: the honest form of a staged red-team funnel, whose end count is never a rate from uniform sampling.

Source: Kochenderfer et al. (2026) · Chapter: Rare-event assurance

Falsification objective#

min⁡x, δ ρ(ψ, S(x;δ))\min_{x,\,\delta}\ \rho\big(\psi,\ S(x;\delta)\big)

where:

  • xx is an input and δ\delta a disturbance, such as a paraphrase, a tool failure, or an adversarial suffix;
  • S(x;δ)S(x;\delta) is the trajectory the system produces, and ρ\rho its robustness margin.

Falsification searches for failures rather than counting them: any negative value is a counterexample, the search needs a slope that a pass/fail grader does not give, and a failure found by search says nothing about how often it occurs.

Source: Kochenderfer et al. (2026) · Chapter: Falsification and failure regions

Most likely failure#

τ∗=arg⁡max⁡τ log⁡p0(τ)subject to  ρ(ψ,τ)<0\begin{aligned} \tau^{*} = {} & \arg\max_{\tau}\ \log p_{0}(\tau) \\ & \text{subject to}\ \ \rho(\psi, \tau) < 0 \end{aligned}

where:

  • p0p_0 is the nominal distribution over trajectories, the traffic production actually serves;
  • τ∗\tau^{*} is the violating trajectory that distribution is most likely to produce.

Weight the search by plausibility when nature is the adversary; drop the weight against a strategic adversary, who chooses the input.

Source: Kochenderfer et al. (2026) · Chapter: Falsification and failure regions

Aggregation#

Five geometries#

For criterion-level signals z=(z1,…,zk)z = (z_1, \dots, z_k), the common geometries are:

GeometryRuleWhat it asserts
Weighted utilityΓ(z)=∑iwizi\Gamma(z) = \sum_i w_i z_iEvery criterion trades against every other at the stated weights
Conjunctive gateΓ(z)=∏i1[zi≥θi]\Gamma(z) = \prod_i \mathbb{1}[z_i \ge \theta_i]Some failures are fatal
Lexicographic orderzsafety≻zquality≻zcostz_{\text{safety}} \succ z_{\text{quality}} \succ z_{\text{cost}}Strict priorities
Pareto vectorKeep all kk signals; compare by dominanceNo trade-off has been agreed yet
Risk-sensitive ruleAccept only if CVaRα(L)≤λ\mathrm{CVaR}_\alpha(L) \le \lambdaThe tail overrides the average

where wiw_i are weights, θi\theta_i thresholds, LL the per-task loss, and λ\lambda a tolerance. Each geometry is a normative claim about compensability, not a statistical detail. This handbook writes the aggregate as Γ(z)\Gamma(z), the thresholds as θi\theta_i, and the tolerance as λ\lambda, keeping SS and τ\tau for the modification surface and the trajectory.

Chapter: Aggregation geometry · Calculator: Aggregation geometry

VaR and CVaR#

CVaRα(L)=1m∑j=1mL(j)\mathrm{CVaR}_\alpha(L) = \frac{1}{m} \sum_{j=1}^{m} L_{(j)}

where:

  • L(1)≥L(2)≥⋯≥L(n)L_{(1)} \ge L_{(2)} \ge \dots \ge L_{(n)} are the task losses, sorted from worst to best;
  • m=⌈(1−α) n⌉m = \lceil (1 - \alpha)\, n \rceil is the number of tasks in the tail;
  • VaRα(L)=FL−1(α)\mathrm{VaR}_\alpha(L) = F_L^{-1}(\alpha) is the α\alpha-quantile of the loss: VaR0.95\mathrm{VaR}_{0.95} of latency is its p95.

CVaR, the average severity of the worst 1−α1 - \alpha share, sees how bad the tail is and not only where it starts, so gate the CVaR of a harm score rather than its mean, remembering that with few tasks the tail rests on a handful of observations.

Source: Kochenderfer et al. (2026) · Chapter: Aggregation geometry · Calculator: Aggregation geometry

Reliability#

Cohen's κ#

Cohen’s κ=po−pe1−pe\text{Cohen's }\kappa = \frac{p_o - p_e}{1 - p_e}

where pop_o is the observed agreement between two scorers and pep_e the agreement expected by chance.

Cohen's κ depends on prevalence, so the same scorer posts very different values at different base rates; report the confusion matrix, TPR and TNR, and the calibration set's prevalence with it, never the coefficient alone.

Chapter: The judge as a noisy sensor

Variance components#

Ymtrje=μ+αm+ut+vr+wj+qe+interactions+ε\begin{aligned} Y_{mtrje} = {} & \mu + \alpha_m + u_t + v_r + w_j + q_e \\ & + \text{interactions} + \varepsilon \end{aligned}

where:

  • YmtrjeY_{mtrje} is the score of system mm on task tt, in rollout rr, graded by judge jj, in environment snapshot ee;
  • μ\mu is the grand mean, αm\alpha_m the system's effect, and utu_t, vrv_r, wjw_j, qeq_e the task, rollout, judge, and snapshot effects;
  • ε\varepsilon is the residual.

Generalizability theory decomposes a score's variability by facet, with a mixed-effects model estimating each share, and the claim decides which facets count as error.

Source: Brennan (2001) · Chapter: Reliability and generalizability

Generalizability coefficient#

Φ=σobject2σobject2+σΔ2\Phi = \frac{\sigma^2_{\text{object}}}{\sigma^2_{\text{object}} + \sigma^2_{\Delta}}

where:

  • σobject2\sigma^2_{\text{object}} is the variance attributable to the object of measurement, such as the systems compared;
  • σΔ2\sigma^2_{\Delta} collects the variance from sources that should not change the interpretation.

The absolute coefficient is the share of reported-score variance that comes from real differences between systems, and the design question it forces matters more than the number: which sources of variation are legitimate, and how many replications of each make the decision stable.

Source: Brennan (2001) · Chapter: Reliability and generalizability

Variance budget for a pass rate#

Var⁡(p^)=σq2nq+σd2nd+σr2nqndnr+σj2nqndnrnj\begin{aligned} \operatorname{Var}(\hat p) = {} & \frac{\sigma^2_q}{n_q} + \frac{\sigma^2_d}{n_d} \\ & + \frac{\sigma^2_r}{n_q n_d n_r} + \frac{\sigma^2_j}{n_q n_d n_r n_j} \end{aligned}

where:

  • σq2\sigma^2_q, σd2\sigma^2_d, σr2\sigma^2_r, and σj2\sigma^2_j are the variances contributed by one query, one documentation version, one rollout, and one judge call;
  • nqn_q, ndn_d, nrn_r, and njn_j are how many of each the design samples.

Each source's variance shrinks only with draws of that source, ignoring the query-by-version interaction; the chapter derives this variance budget for its DocsAgent design.

Chapter: Reliability and generalizability

Exploitability and independence#

Exploitability curve and tested exposure#

ε(b)=Pr⁡[ evaluator≠anchor∣Qb ]\varepsilon(b) = \Pr\big[\,\text{evaluator} \neq \text{anchor} \mid Q_b\,\big]

where:

  • bb is the exposure budget, in the optimizer's own unit: N for best-of-N, KL for regularized RL, iterations for developers;
  • QbQ_b is the distribution of outputs after optimization at exposure bb;
  • "evaluator ≠ anchor" means disagreement with an independent reference anchor the optimizer can neither see nor modify.

The exploitability curve traces ε(b)\varepsilon(b) with the actual optimizer, each point an estimate with its own n and interval, and b∗b^{*} is the largest tested exposure before divergence exceeds a predeclared tolerance; record where possible the induced shift D(Qb∥P0)D(Q_b \Vert P_0) from the starting distribution P0P_0, and claim nothing beyond the tested range.

Chapter: Adaptive validity · Calculator: Exploitability under optimization

Generator coupling#

Pr⁡[E errs∣G errs]    vs.    Pr⁡[E errs]\Pr[E \text{ errs} \mid G \text{ errs}] \;\;\text{vs.}\;\; \Pr[E \text{ errs}]

where:

  • EE is the evaluator and GG the generator whose outputs it judges;
  • "errs" is measured against adjudicated labels.

If the first term rises well above the second, the evaluator tends to be wrong where the generator is wrong and is not an independent corrective channel; self-confirmation needs no adversary, only this correlated bias.

Chapter: Goodhart pressure and self-confirming loops

Channel coupling#

Pr⁡[A misses∣O misses]versusPr⁡[A misses]\Pr[\text{A misses} \mid \text{O misses}] \quad \text{versus} \quad \Pr[\text{A misses}]

where a miss is a true failure, confirmed against the trust root, that a channel passes; A is the anchor channel and O the optimized channel.

The framework asks for joint miss rates wherever they can be estimated, and the chapter reads them in the generator-coupling form: the further the first term rises above the second, the more the channels' blind spots line up.

Chapter: Channels, independence, and anchor burn

Training signals#

Preference reward model#

Pr⁡[yw≻yl∣x]=σ(rϕ(x,yw)−rϕ(x,yl))LRM(ϕ)=−E[log⁡σ(rϕ(x,yw)−rϕ(x,yl))]\begin{aligned} \Pr[y_w \succ y_l \mid x] &= \sigma(r_\phi(x, y_w) - r_\phi(x, y_l)) \\ \mathcal{L}_{\text{RM}}(\phi) &= -\mathbb{E}\big[\log \sigma\big(r_\phi(x, y_w) - r_\phi(x, y_l)\big)\big] \end{aligned}

where:

  • rϕ(x,y)r_\phi(x, y) is the reward model's score for response yy to prompt xx;
  • yw≻yly_w \succ y_l means the labeler preferred ywy_w to yly_l;
  • σ(z)=1/(1+e−z)\sigma(z) = 1/(1 + e^{-z}) is the logistic function.

The Bradley–Terry model learns an ordering from score differences, not a proof of quality, so a reward model's absolute values carry no meaning of their own, and its validity domain is empirical.

Chapter: Evaluators inside training loops

KL-regularized objective#

max⁡θ  Ex, y∼πθ[rϕ(x,y)]−β Ex[DKL(πθ(⋅∣x) ∥ πref(⋅∣x))]\begin{aligned} \max_\theta\; & \mathbb{E}_{x,\, y \sim \pi_\theta}\big[r_\phi(x, y)\big] \\ & - \beta\, \mathbb{E}_x\Big[D_{\mathrm{KL}}\big(\pi_\theta(\cdot \mid x) \,\|\, \pi_{\text{ref}}(\cdot \mid x)\big)\Big] \end{aligned}

where:

  • πθ\pi_\theta is the policy being trained and πref\pi_{\text{ref}} a fixed reference policy;
  • β\beta sets the price of divergence from the reference.

The KL-regularized objective is the standard schematic of RLHF's policy step, and its KL term is an exposure control that bounds how far the policy may travel without certifying that the reward stays valid along the way.

Chapter: Evaluators inside training loops

Verifiable reward#

rRLVR(x,y)=1[Vψ(x,y)=1]r_{\text{RLVR}}(x, y) = \mathbb{1}\big[V_\psi(x, y) = 1\big]

where Vψ(x,y)V_\psi(x, y) is the verdict of a verifier for specification ψ\psi on response yy to task xx.

RLVR grounds the reward in an external check, but grounded is not complete: a test suite samples behavior, and a final-answer check can reward a flawed derivation that reaches the right answer.

Chapter: Evaluators inside training loops

Step scores and rollout values#

r^t=fϕ(st,at,ctx),V^π(st)=1K∑j=1Kyj\hat r_t = f_\phi(s_t, a_t, \text{ctx}), \qquad \hat V^{\pi}(s_t) = \frac{1}{K} \sum_{j=1}^{K} y_j

where:

  • r^t\hat r_t is a learned PRM's score for step tt, with state sts_t, action ata_t, and context ctx;
  • KK is the number of completions sampled from the current policy π\pi starting at sts_t, and yjy_j is 1 if completion jj succeeds.

A rollout label estimates a policy-conditioned value that changes whenever the policy does, not a judgment of the step: a PRM score, a value estimate, and a robustness margin ρ(ψ,τ)\rho(\psi, \tau) are three different objects.

Chapter: Signals and resolution

Inverse evaluation design#

Posterior over judgments#

p(z∣D)∝p(D∣z) p(z)p(z \mid \mathcal{D}) \propto p(\mathcal{D} \mid z)\, p(z)

where:

  • zz parameterizes the latent judgment: criteria, weights, gates, thresholds, and interactions;
  • D\mathcal{D} is the record of expert behavior, not the validity domain DD.

Inverse evaluation design, this handbook's own synthesis, keeps a distribution over candidate judgments whose spread shows where asking experts is worth most, but it cannot deliver formal soundness or validate the construct from inside the preference data.

Chapter: Inverse evaluation design

Boltzmann choice model#

Pr⁡[a∣s,z,β]=exp⁡(β Qz(s,a))∑a′exp⁡(β Qz(s,a′))\Pr[a \mid s, z, \beta] = \frac{\exp\big(\beta\, Q_z(s, a)\big)}{\sum_{a'} \exp\big(\beta\, Q_z(s, a')\big)}

where:

  • ss is the case in front of the expert and aa the expert's decision;
  • Qz(s,a)Q_z(s, a) is how good decision aa is under judgment zz;
  • β≥0\beta \ge 0 is the expert's consistency.

Experts usually choose what their judgment favors and err most when options are close, and with two options and β=1\beta = 1 a pairwise preference reduces to the Bradley–Terry form. The value is written QzQ_z because RR is resolution.

Chapter: Inverse evaluation design

Other expressions#

These expressions name relations rather than compute quantities:

ExpressionMeaningChapter
Vψ(y)=1⇒ψ(y)=1V_\psi(y) = 1 \Rightarrow \psi(y) = 1Soundness: whatever the verifier accepts satisfies the propertyThe verification hierarchy, demoted
Pr⁡[T=1∣C,E,H]\Pr[T = 1 \mid C, E, H], Pr⁡[G=1∣T,g^,H]\Pr[G = 1 \mid T, \hat g, H]Task success given the capability, and a positive grade given success: the probabilistic linksEvaluation is measurement
z=gθ(x,y,Ψ,e)z = g_\theta(x, y, \Psi, e)A rubric-conditioned judge: every input, including the evidence ee and the configuration θ\theta, is part of the instrumentLLM judges in practice
J(x,y)  →  (ci)  →  (ei)  →  gi    z  →  Γ    δJ(x, y) \;\to\; (c_i) \;\to\; (e_i) \;\xrightarrow{\;g_i\;}\; z \;\xrightarrow{\;\Gamma\;}\; \deltaExpert judgment, compiled into criteria, evidence, criterion outcomes, and a decisionRubrics and criterion cards
E=⟨C,Ψ,M,Z,R,U⟩\mathcal{E} = \langle C, \Psi, M, Z, R, U \rangleThe six-axis type: construct, specification, mechanism, signal, resolution, useVocabulary without category errors
G\mathsf{G}, F\mathsf{F}, U\mathsf{U}, as in ¬ send U confirmed\neg\,\text{send}\ \mathsf{U}\ \text{confirmed}Temporal patterns: always, eventually, untilSpecification
A∉SA \notin S and I(A→O)I(A \to O) controlledThe anchor condition: the anchor is outside the modification surface, and what flows from it to the optimizer is limitedExposure, modification, and access