Explainability is not a game
cacm.acm.org
cacm.acm.org
Yup, James Mickens planted this seed 6 years ago, well worth the watch, even if you already agree it's brilliant cathartic humour (the subject isn't really "security").
One way of thinking about explainability is that it deals with determining for some input data how much each feature is contributing to the final outcome (e.g. variable 1 and 2 contributed x% and y% to the final inferred value).
You're correct to suggest that when you backpropogate residual error there are also non-linear interactions between features and that will affect how much each variable is contributing to the updated weight value (in fact that's kind of the point of a deep network ;).
Take that further and consider why people are hesitant to touch cooking surfaces? The answer isn't "because fire is hot." The answer is "because the purpose of cooking surfaces is to get hot enough to cook things and without knowing how long it has been unused, it is not safe to touch."
It’s not a smooth function. Change a prompt a little, or the random seed, and you might get a much different result. Furthermore, how much do you really know about the function it’s approximating? The training data isn’t shared and it’s too much to read anyway.
For ordinary code, there are mathematical properties that we expect to hold true for all inputs. A sort function should return sorted output regardless of how it’s implemented and not just for the test set. If your function has properties that you can test and maybe even prove then maybe it doesn’t matter what the implementation is.
With LLM’s it’s hard to know what specific properties we want or how to formalize them and test them, so the situation is not much like approximating a mathematical function, even if it’s technically true in some sense.
Wouldn't running the llm on those unseen inputs solve that problem immediately? And I don't think what you describe falls under explainability but evaluation. "Does this model do what I want it to do and does it not do what I don't want it to do"
And sure, this is why relying on autocomplete while coding is fairly harmless, because we do have a lot of ways to verify that the code works.
The trouble is, people want to deploy LLM’s in situations where there’s no easy way to verify every output. “Explainability” is supposed to assist the user doing the verification.
This focus on explainability is good, and I liked the article, but I think at some point this is all has to devolve into scientific theory in general. That is, you can either analytically characterize the inner workings of your ML model, or you can't. If you can characterize it, you should be able to pinpoint what feature is underling a classification decision. If you can't, it becomes an empirical question and therefore no different from any other black box scientific inquiry. In that case you're left with manipulation of feature sets, observing results, and looking for a statistical relationship between the two; more broadly you have to make inferences from your results and that leads into every sort of issue that is encountered in any other scientific inquiry.
I have this hunch that being able to analytically characterize a given ML model must at some level basically be the same as coming up with a closed-form representation of it. If you can do that, you could replace the ML model with something simpler. If you can't, there's probably only a sort of statistical relationship that has no closed-form representation, or is otherwise imperfect in some way.
" Teen Readers.typesHere.Generated collection(Object (!(( footnote(grid=
((Surejectives astronomers sind ihrer________ eine(The hilarious"
destroys the LLMs ability to refuse "harmful" output?If that's true, we are confronted with a classic trade-off: what is more important? Explainability or other properties like accuracy?
I suspect in that in some high-consequence areas explainability will be the most important property (and possibly mandated by law), even though it has lower accuracy. For the rest, accuracy will be more important.
Sadly, I think there is good reason to believe that this trade-off will continue. I hope I'm wrong about that.
In fairness I haven't given this article a thorough read but my initial impression is that I'm finding myself frustrated by the FUD this article is attempting to spread. As my boss would often remark to remind us all: model explainability is an under-constrained optimization problem. By definition there isn't a unique explanation decomposition unless you further constrain the problem.
Therefore, I personally find that hand-wringing around there not being 100% agreement around different explanations for a model inference, while definitely thought provoking and worth considering, should at least account for this reality. For some reason a lot of folks in the ML community seem to have come the opinion that because the problem is under-constrained that means that explanations shouldn't be calculated or have no utility.
Would you prefer a model that examines which features are driving the model to deny a disproportionate number of folks of a particular race or ethnicity or not, all things being equal? My point is even if there are limitations to explainability I think there are a lot of very real, critical scenarios where applying SHAP can be of actual, real world utility.
Furthermore, it's not clear that LIME or other explainability methods will provide better or more robust explanations than Shapley values. As someone that has looked at this pretty extensively in credit underwriting I'd personally feel most comfortable computing SHAP values while acknowledging some of the limitations and risks this article calls out.
Axioms such as completeness are also pretty reasonable and I think there is a fair amount of real world utility to explainability algorithms that derive from such an axiomatic basis.