When Privacy Moves ML-Mediated Decisions On Device: Information and Incentive Misalignment in Auctions
Organizations: Skelf Research
Abstract
Moving ML-mediated decision making onto privacy-preserving clients decentralises the economic decision along with the inference. Shared budget constraints then depend on information that cannot be globally current, creating an information-structure failure that conventional pacing is not designed to solve. We study this information misalignment in an auction-logic-faithful on-device simulation with 36 campaigns and 50 devices. Accounting is in dimensionless integer score units; no currency semantics are claimed. Across 30 paired demand paths, proportional Even pacing overspends 17.77% after one tick of staleness and 1,669.31% after 50 ticks under the original 20-times budget pressure. The effect does not depend on that severe a budget: at two-times pressure, 50-tick overspend remains 106.95%. A visible-budget no-sale guard makes zero-lag compliance exact at this score-unit granularity, yet leaves 11.88% overspend at one tick because other devices' debits remain invisible. A declared bursty, heterogeneous-device sweep retains a strictly increasing mean lag curve. We derive a finite-window expected excess-debit bound under conditional charge caps and find positive paired slack in every bounded-value cell. A second, incentive misalignment arises when the ML/pacing score transformation is allowed to change payment units: 98.23% of rival auctions at one tick admit a profitable deviation. An executable implementation-level counterexample isolates the runner-up's multiplier in the winner's price. Critical-base-bid payment is per-auction DSIC conditional on current multipliers, but does not establish dynamic truthfulness and does not repair base-value ranking disagreement.
Figures & tables
| deterministic | calibrated-synthetic | |||
|---|---|---|---|---|
| Even | PI | Even | PI | |
| 0 | ||||
| 1 | ||||
| 2 | ||||
| 5 | ||||
| 10 | ||||
| empirical (%) | bound (%) | paired slack [95% CI] | |
|---|---|---|---|
| 1 | 17.7731 | 70.4754 | 52.7024 [51.3435,54.0613] |
| 2 | 50.4252 | 145.6363 | 95.2111 [93.7322,96.6900] |
| 5 | 189.9383 | 359.9642 | 170.0258 [168.2188,171.8328] |
| 10 | 479.2772 | 717.1772 | 237.9001 [235.3658,240.4344] |
| 25 | 1346.1324 | 1788.8165 | 442.6841 [438.9671,446.4011] |
| 50 | 1669.3075 | 2357.8528 | 688.5453 [684.7028,692.3878] |
Appendix figures & tables1 asset
Supplementary material from the paper’s appendix.
Appendix
| original | perturbed | |
|---|---|---|
| 0 | ||
| 1 | ||
| 2 | ||
| 5 | ||
| 10 | ||
| 25 |