We propose FAME (Formal Abstract Minimal Explanations), a new class of abductive explanations grounded in abstract interpretation. FAME is the first method to scale to large neural networks while reducing explanation size. Our main contribution is the design of dedicated perturbation domains that eliminate the need for traversal order. FAME progressively shrinks these domains and leverages LiRPA-based bounds to discard irrelevant features, ultimately converging to a formal abstract minimal explanation. To assess explanation quality, we introduce a procedure that measures the worst-case distance between an abstract minimal explanation and a true minimal explanation. This procedure combines adversarial attacks with an optional VERIX+ refinement step. We benchmark FAME against VERIX+ and demonstrate consistent gains in both explanation size and runtime on medium- to large-scale neural networks.
Figures & tables
Figure 1: FAME Framework. The pipeline operates in two main phases (1) Abstract Pruning (Green) phase leverages abstract interpretation (LiRPA) to simultaneously free a large number of irrelevant (pixels that are certified to have no influence on the model’s decision) features based on a batch certificate (Section 4.2 ). This iterative process operates within a refined, cardinality-constrained perturbation domain, Ωm(x,A) (Eq. 5 ) to progressively tighten the domain ; To ensure that the final explanation is as small as possible, the remaining features that could not be freed in batches are tested individually (Section 5 ). (2) Exact Refinement (Orange) phase identifies the final necessary features using singleton addition attacks and, if needed, a final run of VERIX+ (Section 6 ). The difference in size, \lvert\text{\text{wAXp}^{A^{\star}}}\rvert-\lvert\text{AXp}\rvert , serves as an evaluation metric of phase 1.
VERIX+ (alone)
FAME: Single-round
FAME: Iterative refinement
FAME-accelerated VERIX+
Traversal order
bounds
/
/
/ + bounds
Search procedure
binary
MILP
Greedy
MILP
Greedy
Greedy + binary
Metrics ↓
∣ AXp ∣
time
∣wAXpA∣
time
∣wAXpA∣
time
∣wAXpA∣
time
∣wAXpA∣
time
∥ candidate-set ∥
∣AXp∣
time
MNIST-FC
280.16
13.87
441.05
4.4
448.37
0.35
229.73
14.30
225.14
8.78
44.21
224.41
13.72
MNIST-CNN
159.78
56.72
181.24
5.59
190.29
0.51
124.9
12.35
122.09
5.6
104.09
113.53
33.75
GTSRB-FC
313.42
56.18
236.85
9.68
243.18
0.97
331.84
12.28
332.74
5.26
11.93
332.66
9.26
Table 1: Average explanation size and generation time (in seconds) are compared for FAME (single-round and iterative MILP/Greedy) with FAME-accelerated VERIX+ to achieve minimality.
Figure 2: FAME’s iterative refinement approach against the VERIX+ baseline . The left plot compares the size of the final explanations. The right plot compares the runtime (in seconds ). The data points for each model are distinguished by color, and the use of circles (card=True) and squares (card=False) indicates whether a cardinality constraint ( ∣∣x−x′∣∣0≤m ) was applied.
Appendix figures & tables9 assets
Supplementary material from the paper’s appendix.
Appendix
Figure 3: Toy example illustrating the asymmetry between adding and freeing features.
Figure 5
Feature
Normalized Cost for Class 1
Normalized Cost for Class 2
Maximum Normalized Cost
( j )
( c1,j/(−b1) )
( c2,j/(−b2) )
( maxi )
j1
2/10=0.2
8/20=0.4
0.4
j2
7/10=0.7
4/20=0.2
0.7
j3
3/10=0.3
3/20=0.15
0.3
Appendix
Table 2: Example of Greedy Heuristic Decision Making
Layer Type
Input Shape
Output Shape
Activation
Flatten
28×28×1
784
-
Fully Connected
784
10
ReLU
Fully Connected
10
10
ReLU
Output
10
10
-
Appendix
Table 3: Architecture of the MNIST-FC model.
Layer Type
Input Shape
Output Shape
Activation
Convolution 2D
28×28×1
13×13×4
-
Convolution 2D
13×13×4
6×6×4
-
Flatten
6×6×4
144
-
Fully Connected
144
20
ReLU
Output
20
10
-
Appendix
Table 4: Architecture of the MNIST-CNN model.
Layer Type
Input Shape
Output Shape
Activation
Flatten
32×32×3
3072
-
Fully Connected
3072
10
ReLU
Fully Connected
10
10
ReLU
Output
10
10
-
Appendix
Table 5: Architecture of the GTSRB-FC model.
Layer Type
Input Shape
Output Shape
Activation
Convolution 2D
32×32×3
15×15×4
-
Convolution 2D
15×15×4
7×7×4
-
Flatten
7×7×4
196
-
Fully Connected
196
20
ReLU
Output
20
10
-
Appendix
Table 6: Architecture of the GTSRB-CNN model.
Layer Type
Input Shape
Output Shape
Activation
Reshape
3072
32×32×3
-
Convolution 2D
32×32×3
16×16×8
ReLU
Residual Block (Downsample)
16×16×8
8×8×16
ReLU
Residual Block
8×8×16
8×8×16
ReLU
Flatten
8×8×16
1024
-
Fully Connected
1024
100
ReLU
Appendix
Table 7: Architecture of the ResNet-2B model (CIFAR-10).
Figure 6: Performance Comparison of FAME’s Abstract Batch Freeing Methods. These three plots compare the greedy heuristic against the exact MILP solver for the iterative refinement task for all the models. The first plot shows the runtime comparison of the two methods on a log-log scale. The second plot compares the size of the freed feature set for both methods. The third plot illustrates the distribution of the optimality gap (MILP size - Greedy size).
Despite significant progress in post-hoc explanation methods for neural networks, many remain heuristic and lack provable guarantees. A key approach for obtaining explanations with provable guarantees is by identifying a cardinally-minimal subset of input features which by itself is provably sufficient to determine the prediction. However, for standard neural networks, this task is often computationally infeasible, as it demands a worst-case exponential number of verification queries in the number of input features, each of which is NP-hard. In this work, we show that for Neural Additive Models (NAMs), a recent and more interpretable neural network family, we can efficiently generate explanations with such guarantees. We present a new model-specific algorithm for NAMs that generates provably cardinally-minimal explanations using only a logarithmic number of verification queries in the number of input features, after a parallelized preprocessing step with logarithmic runtime in the required precision is applied to each small univariate NAM component. Our algorithm not only makes the task of obtaining cardinally-minimal explanations feasible, but even outperforms existing algorithms designed to find the relaxed variant of subset-minimal explanations - which may be larger and less informative but easier to compute - despite our algorithm solving a much more difficult task. Our experiments demonstrate that, compared to previous algorithms, our approach provides provably smaller explanations than existing works and substantially reduces the computation time. Moreover, we show that our generated provable explanations offer benefits that are unattainable by standard sampling-based techniques typically used to interpret NAMs.
Prototype-based neural networks are hailed as interpretable-by-design architectures. Recently, Abductive Latent Explanations (ALE) were introduced to provide formal, mathematically guaranteed explanations that leverage the intrinsic structure of these networks to ensure both predictive safety and human readability. ALEs rely on computing tight bounds on latent space distances to produce formal explanations. However, existing ALE formulations are rigidly confined to Euclidean latent spaces. This leaves a critical gap: modern state-of-the-art architectures increasingly rely on non-Euclidean representations - such as spherical metrics, Gaussian densities, and dimensional projections - rendering current formal explanation methods incompatible. In this work, we generalize the ALE framework to support non-Euclidean prototype architectures. For each geometric variant, we systematically derive how to either map the architecture to existing bounds or construct novel, architecture-specific bounding algorithms. We validate our theoretical constructions by computing subset-minimal formal explanations on fully trained image classifiers. By unifying these diverse models under a single formal framework, we enable the first rigorous, cross-architecture comparison of their interpretability.
Jules Soria, Alban Grastien, Romain Xu-Darme +3
Université Paris-Saclay, CEA, List, F-91120, Palaiseau, France
Formal explainability of classifying neural networks (NNs) is an active area of research, providing explanations with provable guarantees of the classification within continuous regions of the input feature space. However, the existing techniques are either limited to individual input features without guarantees on their relations or the provided solutions fail to scale to deep architectures. This paper addresses these issues by introducing a flexible symbolic framework for an efficient, guided computation of explanations of the NN behavior, parametrized by the activations of internal neurons, and using logical engines such as SMT solvers. Unlike prior methods that rely on specialized NN verifiers, our method yields explanations that are not restricted in shape. Our algorithm is implementable on top of a general-purpose logical solver, isolating the NN-specific encoding from the algorithmic framework. We experimented with a wide range of benchmarks from the domains of image recognition and medicine, illustrating the advantages of the new method, particularly in computational efficiency. Notably, our approach enables logical explanation of deep networks not amenable to prior logic-based methods.
Tomáš Kolárik, Faezeh Labbaf, Fabrizio Leopardi +3
University of Lugano (USI), Lugano, Switzerland · Florida State University, United States of America · SUPSI, IDSIA, Lugano, Switzerland