The Verification Tax: Fundamental Limits of AI Auditing in the Rare-Error Regime
Organizations: Independent
Abstract
The most cited calibration result in deep learning -- post-temperature-scaling ECE of 0.012 on CIFAR-100 (Guo et al., 2017) -- is below the statistical noise floor. We prove this is not a failure of the experiment but a law: the minimax rate for estimating calibration error with model error rate epsilon is Theta((Lepsilon/m)^{1/3}), and no estimator can beat it. This "verification tax" implies that as AI models improve, verifying their calibration becomes fundamentally harder -- with the same exponent in opposite directions. We establish four results that contradict standard evaluation practice: (1) self-evaluation without labels provides exactly zero information about calibration, bounded by a constant independent of compute; (2) a sharp phase transition at mepsilon approx 1 below which miscalibration is undetectable; (3) active querying eliminates the Lipschitz constant, collapsing estimation to detection; (4) verification cost grows exponentially with pipeline depth at rate L^K. We validate across five benchmarks (MMLU, TruthfulQA, ARC-Challenge, HellaSwag, WinoGrande; ~27,000 items) with 6 LLMs from 5 families (8B-405B parameters, 27 benchmark-model pairs with logprob-based confidence), 95% bootstrap CIs, and permutation tests. Self-evaluation non-significance holds in 80% of pairs. Across frontier models, 23% of pairwise comparisons are indistinguishable from noise, implying that credible calibration claims must report verification floors and prioritize active querying once gains approach benchmark resolution.
Figures & tables
| Benchmark | Typical | Ratio | Verifiable? | |||
|---|---|---|---|---|---|---|
| MMLU (per-subj) | 250 | 0.15 | 0.0843 | 0.02–0.05 | 0.4 | ✗ |
| MMLU (full) | 14,042 | 0.15 | 0.0220 | 0.02–0.05 | 1.6 | |
| TruthfulQA | 817 | 0.40 | 0.0788 | 0.05–0.15 | 1.3 | |
| BBQ (per-cat) | 500 | 0.30 | 0.0843 | 0.03–0.10 | 0.8 | ✗ |
| ToxiGen | 940 | 0.25 | 0.0643 | 0.05–0.12 | 1.3 | |
| HumanEval | 164 | 0.30 | 0.1223 | 0.05–0.20 | 1.0 |
| Model A | Model B | Benchmark | Gap | Verifiable? | ||
|---|---|---|---|---|---|---|
| GPT-4o | Claude 3.5 Sonnet | HumanEval | 164 | 0.017 | 0.0663 | NO |
| Llama-3.1-405B | Qwen3-Next-80B | TruthfulQA | 817 | 0.016 | 0.0341 | NO |
| GPT-4 | Claude 3 Opus | MMLU | 14,042 | 0.004 | 0.0060 | NO |
| GPT-4 | Gemini 1.5 Pro | HumanEval | 164 | 0.045 | 0.0663 | NO |
| GPT-4o | Claude 3.5 Sonnet | GPQA Diamond | 198 | 0.057 | 0.0709 | NO |
| GPT-4 | Gemini 1.5 Pro | MMLU | 14,042 | 0.005 | 0.0060 | NO |
Appendix figures & tables16 assets
Supplementary material from the paper’s appendix.
Appendix
| Subject | L405B | L4-Mav | Q3-80B | Max gap | Verif. | Instab. | ||
|---|---|---|---|---|---|---|---|---|
| Professional Law | 1534 | 0.72 | 0.68 | 0.68 | 0.040 | 0.175 | ✗ | 0.15 |
| Moral Scenarios | 895 | 0.87 | 0.47 | 0.67 | 0.402 | 0.179 | ✓ | 0.00 |
| Miscellaneous | 783 | 0.92 | 0.92 | 0.94 | 0.018 | 0.108 | ✗ | 0.44 |
| Professional Psychology | 612 | 0.87 | 0.86 | 0.87 | 0.005 | 0.133 | ✗ | 0.73 |
| High School Psychology | 545 | 0.93 | 0.92 | 0.96 | 0.037 | 0.104 | ✗ | 0.02 |
| High School Macroeconomics | 390 | 0.88 | 0.78 | 0.89 | 0.108 | 0.137 | ✗ | 0.27 |
| Benchmark | Model | ECE | Self-eval ( ) | ||||
|---|---|---|---|---|---|---|---|
| MMLU | Llama-3.1-405B | 14,042 | 0.160 | 0.1183 | 1.61 | 0.0264 | ( ) |
| MMLU | Llama-4-Maverick | 14,042 | 0.273 | 0.2620 | 1.00 | 0.0269 | — |
| MMLU | Qwen3-Next-80B | 14,042 | 0.165 | 0.1427 | 5.00 | 0.0389 | ( ) |
| TruthfulQA | Llama-3.1-405B | 817 | 0.234 | 0.1947 | 2.84 | 0.0933 | ( ) |
| TruthfulQA | Llama-4-Maverick | 817 | 0.656 | 0.6293 | 3.36 | 0.1391 | ( ) |
| TruthfulQA | Qwen3-Next-80B | 817 | 0.250 | 0.2224 | 3.64 | 0.1036 | ( ) |
| Model | |||||
|---|---|---|---|---|---|
| MMLU (14,042 items per model) | |||||
| Qwen3-Next-80B | 14,042 | .165 [.158,.171] | 2.45 [1.70,4.85] | .143 [.137,.149] | .031 [.027,.038] |
| Llama-4-Maverick | 14,042 | .273 [.266,.280] | 2.01 [1.42,4.75] | .262 [.255,.270] | .034 [.030,.045] |
| Llama-3.1-405B | 14,042 | .160 [.154,.166] | 1.41 [1.13,3.02] | .118 [.113,.124] | .025 [.023,.032] |
| TruthfulQA (817 items per model) | |||||
| Qwen3-Next-80B | 817 | .250 | 3.64 | .222 | .104 |
| Model | Domain | Gap | Exceeds | |||
|---|---|---|---|---|---|---|
| GPT-4 | General NLP (MMLU-scale) | 128571428.57 | ✓ | |||
| GPT-4 | Medical imaging | 3600000.00 | ✓ | |||
| GPT-4 | Legal | 180000000.00 | ✓ | |||
| GPT-4 | Financial | 90000000.00 | ✓ | |||
| GPT-4 | Code (HumanEval-scale) | 360000000.00 | ✓ | |||
| GPT-4 | Autonomous driving | 18000000.00 | ✓ |
| Framework | Gap | |||||||
|---|---|---|---|---|---|---|---|---|
| EU AI Act Annex III | 10 | 0.05 | 0.020 | 0.050 | 1.8 | |||
| NIST AI RMF | 5 | 0.10 | 0.010 | 0.030 | 3.0 | |||
| FDA SaMD | 8 | 0.05 | 0.010 | 0.020 | 4.5 |
| (Le Cam) | (nonparametric) | ||
|---|---|---|---|
| 0.01 | 0.3780 | 15 | 10,000 |
| 0.02 | 0.3638 | 27 | 20,000 |
| 0.05 | 0.3474 | 61 | 50,000 |
| 0.10 | 0.3326 | 111 | 100,000 |
| 0.15 | 0.3206 | 155 | 150,000 |
| 0.20 | 0.3093 | 192 | 200,000 |
Uncertainty Calibration
Uncertainty calibration aligns model confidence and predictive intervals with observed correctness and outcome frequencies.
See all 264 papers