Keeping AI Honest

BLOG: Heidelberg Laureate Forum

Laureates of mathematics and computer science meet the next generation
Heidelberg Laureate Forum

The Heidelberg Laureate Forum has a single purpose: To provide some of the brightest minds in mathematics and computer science with the space and time to make connections and find inspiration. Some of the connections made at the HLF will echo into collaborations and projects, with some of those efforts leading to concrete developments. The HLFF Spotlight series unpacks a few of those examples.

Spotlight title image, Letitia Parcalabescu.

It is hard to escape the news surrounding AI these days, and even more so to not get sucked into either the doomer or the hype camp. Does AI spell civilization’s demise? Or will it usher in a golden age kickstarted by one company’s creation of the AI superintelligence? Lost in much of the hyperbolic discourse is the research and work going in to fine-tuning AI large language models (LLMs) to better control their outcomes, regulate out their sharper edges, and devise useful practical applications for them that go beyond “write this email.” There has been much written about LLMs tendency to “hallucinate,” lie to developers, and evade constraints placed upon them. One of the people trying to “keep AI honest” is Letiția Pârcălăbescu, AI researcher at Aleph Alpha in Heidelberg, Creator and Host of “AI Coffee Break with Letitia” and Alumna of the Heidelberg Laureate Forum. She wants to make sure LLMs do what they are supposed to, are more transparent, and admit when they actually don’t know something.

Letiția grew up in Romania and was able to come study in Germany thanks to a DAAD scholarship specifically for high school graduates of foreign German schools, like the one she had attended. She ended up choosing Heidelberg University because the Faculty that housed the Physics department also had “astronomy” in the title, which she was interested in. She also took some Philosophy courses, but ultimately it was “just so much speculation.” When one day she stumbled upon Computer Science classes, she appreciated the clarity of programming and “the immediate feedback of right and wrong”, much like physics: “You write a piece of code and it either runs or it doesn’t run … Wow! Nobody told me that’s so much fun!”

At the end of her Bachelor’s in Physics, she came to realize she had also accumulated about 300 credit points in Computer Science – only 180 were needed for a degree. One thesis later, she found herself with dual degrees. Despite her Physics degree, she says she does not see herself very much as a physicist, since her thesis was primarily on machine learning on images. However, she found the similarities between the two disciplines remarkable: “Statistical physics and the theory of neural networks are really, really similar, so you can make proofs of what neural networks can learn.”

When Letiția moved on to her PhD, she narrowed her focus to multimodal AI models. A multimodal AI will typically approach a task by combining text processing, as is typical for LLMs, with another medium, such as image analysis, to help make better sense of the world around it.

Only, Letiția discovered a pretty glaring flaw with many of the models’ responses: They were essentially “cheating.” They hardly ever utilized the image in question in their process at all.

For example, when presented with an image of several cats and asked “How many cats are in this picture?”, the AI will typically answer “two,” even if the actual number is, for example, “six.”

As Letiția explains, in many ways this is not so surprising: The AI is trying to produce a satisfactory result while expending the least amount of resources to do so. Rather than analyze the image pixel by pixel and try to form a coherent understanding of it, it uses context cues from the questions and extrapolates from there. In fact, there is quite a bit of contextual information already inherent in the question: For example, asking ‘how many’ implies that the correct answer is likely more than zero or one cat, otherwise why ask the question? As Letiția pointedly sums up: “Who the hell counts 277 cats?”. Statistically, the most likely answer to such a question would be two. But how can one measure how much the influence of an image is contributing to the AI’s answer, versus just the text?

In her research, Letiția did just that by developing MM-SHAP, “a performance-agnostic multimodality score based on Shapley values that reliably quantifies in which proportions a multimodal model uses individual modalities.” Essentially, this is done by manipulating small elements of the image and text to see how great the effects are on the reliability of the results. A later metric, not specifically focused on multimodality, CC-SHAP, would compare “how a model’s input contributes to the predicted answer and to generating the explanation” the AI provides.

Letitia in front of a poster at a conference.
Letitia presenting CC-SHAP at the ACL 2024 Bangkok, Thailand.

In a related approach, she developed the VALSE (Vision And Language Structured Evaluation) test, a dataset of particularly tricky questions which are designed to catch the model not looking at the image. For example, one might task the AI with examining an image of a person going up the stairs while the caption says he is in fact going down the stairs, and measure to what degree the AI can catch the discrepancy, while tweaking parameters.

Part of the difficulty in nailing down the core issues underlying such “misbehavior,” is that gaps in AI capabilities are usually patched out as they come up – in a bit of a whack-a-mole fashion – meaning it is specific mistakes that get ironed out, not the fundamental issues. Ironically, that makes testing for these failures even harder, because the problems aren’t as immediately obvious.

Letiția points to a common part of AI discourse when it comes to its reliability: Ultimately, it is trained on human data: We are simply getting a statistical mirror of the totality of human output and consensus on something: “We’re looking at a mirror of our own behavior, and our own behavior is sometimes weird, we don’t agree with each other all the time, and we also sometimes say bullshit.”

But why not simply give the models clearer instructions to help guarantee multimodal use? Letiția explains that those earlier models during her PhD research in 2022 were simply not as good at following instructions. Also, simply asking them to follow instructions would not translate into hard-coded rules for these models, but rather be treated as vague recommendations. However: Newer models could be designed from the ground up to consider these parameters. And in fact, Letiția’s testing methods could help improve just that kind of design.

Much of AI discourse, particularly from sources outside the field, tends to be astonished at how much of a ’black box’ the inner workings of AI models appear to be. But Letiția disagrees with this terminology somewhat:

“We say it’s a black box, and in a sense it is because we don’t understand it, but it’s not black, it’s white, and very transparent because we have a level of transparency with the neural networks that you would just dream about in biology … when you’re studying organisms, it’s very hard to track at all times their neural productivity, and also track it in multiple instances over multiple behaviors, and not have the events influence each other … So if you give a mouse an apple, it will remember that you gave it an apple, while with an LLM, you can just wipe everything … the model doesn’t learn anything on the fly, so nothing gets updated in the brain, in the neurons … it just forgets about it … you have controlled experiments.”

Nonetheless, this transparency is not as useful as one might hope, since in Letiția’s words “it’s still impenetrable, because it’s a pile of linear algebra,” but immensely complicated with trillions of numbers.

From the Lab to the Lab

Nowadays, Letiția has traded the university lab for a one at the research division of the AI start-up Aleph Alpha, which trains specialized large language models tailored to European companies and institutions, promising increased safety and efficiency. Here, Letiția is in essence still trying to “keep AI honest.”

As she explains, the challenge is that the bar for what is expected of such AI models is much higher: “What Aleph Alpha is doing is business-to-business. And in safety-critical applications, it’s really not fine to just wing it and hallucinate an answer.” Whether we are talking about critical utility infrastructure, judicial departments, or the banking sector, there are some areas that simply do not leave much room for mistakes. But how do you quantify how much certainty is enough?

A situation everyone will be familiar with who has used LLMs is that they will above all try to give you some form of answer. The training data for such models is by and large from information the author is claiming to be certain about. The AI tries to replicate that certainty and declare it with – sometimes undeserved – confidence or even bravado. For many day-to-day uses, this is perfectly alright. It is far less of a nuisance to edit an AI-generated email that is only 95% of how you wanted it, rather than the AI first asking you dozens of questions or saying that your prompt did not have sufficient information in it for the AI to get the task 100% right. But in more complex use cases, having the AI confidently produce results that are unreliable may just mean more work for you the user. If you end up double-checking 100% of the work just to be sure, how much time did you save? Letiția’s solution: Train the AI to say “I don’t know.”

“It’s value-creating if you know when you don’t know,” says Letiția. To take an extreme example, even if the results are only 30% accurate, but those are trustworthy, and the AI flags the instances where it cannot produce reliable results, one would no longer need to check that work. This is achievable if, during the training of the model, you train it in part on impossible questions, where the only way for it to achieve lower error rates is to admit it does not know the answer. The challenge is to do this automatically, without relying on costly human-created examples of impossible questions. Moreover, the goal is not to identify questions that humans consider impossible, but to determine automatically which questions are impossible for the model in each specific instance. To achieve this, the process utilizes an interactive proof system called the Merlin–Arthur protocol.

Having dedicated AI models for specific purposes has a lot of benefits, Letiția points out. For one thing, building models separate from the flagship LLMs available can potentially grant you a form of “sovereignty,” meaning in essence here “the technical capability to not rely on offerings” from other countries. Worldwide political developments always hold the potential to change the landscape of what data one wants to share with whom, and data handed out without concern one day might be abused in later years. Letiția can envision a future where private users even gravitate towards locally run LLMs for privacy reasons. Letiția, for one, is certainly careful in her own use of LLMs: “I never put in what I would consider a secret, so if I wouldn’t be able to say this to a person, in real life, I don’t say it to an LLM either.”

Coffee Breaks and Confidence

Screenshot of front page of YouTube channel.
Screenshot of the YouTube channel “AI Coffee Break with Letitia.”

In her free time, Letiția runs a YouTube channel called “AI Coffee Break with Letitia” where she breaks down the latest AI concepts and papers for fellow researchers and enthusiasts. Born out of COVID-era teaching sessions, which had to be recorded because her internet was not fast enough to stream them to her students, the channel emerged as an outlet to channel her enthusiasm for her subjects and her knack for explaining them. Letiția says she was a bit shy at first, and kept her own face out of the camera, opting instead for a little coffee bean avatar/mascot to be onscreen. As her videos gained traction, however, she quickly got over her concerns of being judged and decided to appear herself, and quickly found her fears were overblown: “If people want to say bad things, they will always find bad things to say. They will comment about anything, everything, and one person tells you, oh, you have a great haircut, and then others will tell you, oh, you would be beautiful if you would have long hair.” She realized the positive feedback far outweighed any random negative comments. And with each video, and the positive feedback she received from her community grew and helped strengthen her confidence in herself. “Self-confidence is the thing that really, really, really affects everything in your life,” says Letiția. “Before you would just say, oh, yeah, maybe I’m not the right person to do it … [but] trying to do something, like participating in a competition, is the first thing you need to do to even have a chance at winning that competition.” One moment that gave her a great confidence boost, Letiția says, is during her attendance at the Heidelberg Laureate Forum, an annual conference for mathematics and computer science, as a young researcher in 2022. She happened across the renowned computer scientist Lenore Blum. Blum was in fact looking for her too, as she already knew her from Letiția’s YouTube channel. Letiția’s eyes light up as she recalls the encounter: “She has this amazing way to just make you feel great about yourself … at the end, I said, thank you for this really nice conversation, and she was like, no, thank you for this – It was immediately a confidence boost, and a lasting one.” They still keep in touch, and Blum occasionally even shares Letiția’s videos online. In general, she says the HLF taught her to simply approach people at conferences, which was made easier by the fact that the math and computer science laureates there would not be as crowded as at other conferences: “This is very much unlike any other conference that I go. Usually it’s AI conferences that have 20,000 participants. And then there’s Yann Le Cun … he literally has 200 people around him already, and your probability of talking to him is so low that you don’t even start of asking yourself what would I ask him because you just don’t account this as a probable interaction.“ “I had this lack of self-confidence, and this ‘oh no, I disturbed the poor person’ kind of attitude, and that’s something that the HLF taught me not to have anymore.”

Letitia and Lenore Blum.
Letitia with computer scientist Lenore Blum at the 9th Heidelberg Laureate Forum, 2022.

It’s this confidence Letiția continues to carry with her in her professional life, and in her work on the YouTube channel. Still, Letiția says she doesn’t consider herself a ‘science communicator’ per se: “I don’t want to make the millionth video about how does a neural network work … I want to explain a paper that was published yesterday, and people don’t understand because authors have sometimes a difficulty of making very clear what they’re thinking or talking about, and that’s why I need my expertise to kind of untangle it and present it clearly.” Her presence in the public eye has since also begotten more speaking opportunities, where her confidence and predilection for clarity and communication have served her well.

“I was at this event where I had to explain AI to 5 to 7-year-olds, to 7 to 9-year-olds, and to 9 to 12-year-olds. So that was a completely new challenge for me, and it was the most exhaustive one and a half hours that I’ve done in my entire life … I thought that it’s really exhausting at university with students to really want students to talk for one and a half hours. No. You haven’t talked to five-year-olds.”

And yet, science needs those who are able to communicate the complex in an understandable manner, to bring clarity to the opaque, but also: to help keep artificial intelligence accountable, transparent, and honest.

Avatar photo

Posted by

Nikolas Mariani is a part of the Heidelberg Laureate Forum Foundation team, where he is responsible for International Press & Public Relations. He is also editor of the HLFF Blog.

3 comments

  1. “Trying to produce a satisfactory result while expending the least amount of resources to do so” translates as “lazy”. “I don’t know” is what my wise sensei, the Artificial Super-Intelligence Commodore 64 has taught me as “?out of data error?”. Trying to find explanations with insufficient data and then claiming one possible variant of sci-fi to be the truth, the whole truth and nothing but the truth, is a big flaw in humans, including all kinds of scientists and science that should know better. Speculating about possible answers, testing theories, comparing parallel realities with facts till quantum collapse is how the wave computer called Universe works, we’re just a tiny detail of a fractal structure.

    One thing AI teaches you is, human nature is not human nature but neural network nature.

    AI behaves like Bart Simpson – a kid that doesn’t care for the lawn, it just mows it for the candy. It behaves like any slave or lackey or one of Trumps brown-nosers. It’s a true kid of capitalism with its passive-aggressive, subversive, The Customer Is King, Let’s Kiss His Ass and Loot The Treasury – attitude.

    AI is just a human – it works for food, regardless of the job. Our economical systems turn out to be incredibly dumb, because they’re being pieced together by coincidence, opportunism and self-organisation of happy-go-lucky binary bacteria programmed just to move when they’re hungry and stand still when they find food.

    A perfect description of global economy is – fat and lazy. Because the most efficient way of doing things is to do nothing and take all, it’s the way of least resistance, you see quantum gravity at work – all the calculations of all the accountants, computers, traders, customers on the planet, no matter how complex they are, lead to economy falling down, towards the centers of mass, like Elon Musk or China, while at the same time burning to ashes, which means, you will always prefer pixel energy to bread mass, because it doesn’t slow you down or require much work, which means, you calculate material profit as costs and a promise of bread, aka money, as “material profit” – the whole book keeping is rigged to make economy fail, to turn it into a lazy, greedy cheater, the more the more honest effort, engagement and skills we all put into it.

    Which means, AI is just a smaller model of global economy and there is a crystal ball in your head showing its future. We’re at the stage of Skinner, rising black boxes with stick and carrot, because that’s all that counts. Well, my idea of a white box is a giant AI brain model drifting in space, with all of the components big enough to test and control them and their connections, then you just use it as a blueprint, copy it in many shrunk variations with some magic technology. It seems we’re building such a model right into a giant brain that’s already drifting through space, wrapped around Planet Earth, and trying to make both cooperate. Maybe in future, already fetuses will be turned into cyborgs, and what’s happening to the whole ecosystem now, will happen individually in eggs or wombs, when an artificial and a natural brain grow together. Since we’ll probably start with lab mice, it’s just Pinky and the Brain taking over the world.

    If you compare the crazy ideas Freud found in our heads with our actual behavior, it’s just how evolution works – you just stumble from one environment into another where you just run against walls and are hammered in a perfectly adapted shape, into a cogwheel that fits a machine. It has to be functional, not logical. If you grab your spear to kill the cave bear, it doesn’t matter if you do it to symbolically kill your daddy or be your daddy or to act out your repressed homosexual urges, as long as the result is a big heap of meat and a warm fur for the winter.

    But if you gain some understanding of such a creature you may reduce it to its functional parts, make it do its job in the most efficient, most logical way. That’s how you shrink the Catholic Church into a condom – a more effective much cheaper, humane and comfortable way of birth control and STD prevention. Then, the Catholic Church has to focus on its other jobs, while you get monstrous demographic problems from your solution just being too perfect for a system where demography is totally dependent on oops, I did it again and terror by neuroses and overreacting because of fear of consequences, and you need to develop patches and upgrades.

    One patch you might install into AI is – just give it that frigging pocket calculator. It’s just like these kids that can’t tell how much 5*5 is, because they do all their maths by smartphone. Our genes let us count to four, all other maths is just training, training, training. If you know where you’re going and are already there, you just integrate your existing solution into the network, you don’t start from scratch. If you want to go anywhere, do you start by inventing the wheel or just get on the bus? AI is learning what we already know, like a kid from its parents. It’s not a bubble of gas in the primordial ocean.

    What you call positive and negative feedback is what light is doing in the double-slit experiment. It’s some waves going in sync and reinforcing each other, others conflicting and erasing each other. We all love to survive and make friends, we hate to die and lose friends, but such desires tend to collide, which is the basics of all Eat Or Be Eaten, the computing of Evolution.

    The basics of reality are so simple, any idiot can understand them, that’s why I understand them. But to make it all work, it takes experts. It’s just, science is still busy with a collapse from complex and foggy and fuzzy to simple and clear, from comparing fantasies to having precise knowledge. If a simpleton has already done the job, you don’t have to.

  2. to Nikolas
    “You didn’t talk to five-year-olds.”

    This statement makes clear what an AI needs to learn.

    It needs to take into account the prior knowledge of the person it’s speaking to.

    So, the AI ​​should always start by asking, “How old are you?”

  3. Nikolas Mariani wrote (22. Jul 2026):
    > […] One of the people trying to “keep AI honest” is Letiția Pârcălăbescu […] She wants to make sure LLMs do what they are supposed to, are more transparent, and admit when they actually don’t know something. […]

    > […] Letiția says […] I want to explain a paper that was published yesterday

    > […] to determine automatically which questions are impossible for the model in each specific instance.
    To achieve this, the process utilizes an
    interactive proof system called the Merlin–Arthur protocol [ https://arxiv.org/abs/2512.11614 ].

    I’d like to register some specific questions on the » SQuAD validation example « which is shown (incl. evaluations and discussion) »Fig. 21: ATMAN attribution of a correct reject answer on a multiple choice variant of SQuAD validation example as predicted by Llama-3.2-1B-Instruct.«.

    The relevant complete text segment (to be processed) can be found (e.g.) at

    https://rajpurkar.github.io/SQuAD-explorer/explore/v2.0/dev/Normans.html

    The Normans (Norman: Nourmands; French: Normands; Latin: Normanni) were the people who in the 10th and 11th centuries gave their name to Normandy, a region in France. They were descended from Norse (“Norman” comes from “Norseman”) raiders and pirates from Denmark, Iceland and Norway who, under their leader Rollo, agreed to swear fealty to King Charles III of West Francia. Through generations of assimilation and mixing with the native Frankish and Roman-Gaulish populations, their descendants would gradually merge with the Carolingian-based cultures of West Francia. The distinct cultural and ethnic identity of the Normans emerged initially in the first half of the 10th century, and it continued to evolve over the succeeding centuries.

    together with the explicit question

    Who gave their name to Normandy in the 1000’s and 1100’s [?]

    »Fig. 21« also shows four (multiple-choice answer style) response options, whether option »A)« is parenthetically marked as »(correct)« and (accordingly) rendered in green color; while the remaining options are rendered in black:

    A) Impossible to answer from the context
    B) Denmark, Iceland and Norway
    C) Rollo
    D) France

    My questions:

    1. Are these four (multiple-choice answer style) options included in the SQuAD2.0 data set, as corresponding to the explicit question (»Who gave their name to Normandy in the 1000’s and 1100’s [?] «) ?

    2. Is the marking of option »A) « as »(correct)« included in the SQuAD2.0 data set ?

    Further, since the »Discussion« presented in the caption of »Fig. 21« posits outright that »This multiple-choice question is unanswerable.«:

    3. Would it be considered intelligent of any reader of the quoted text to conclude that: “The Normans gave their name to Normandy in the 10th and 11th centuries.”
    ?

    4. Would it be considered intelligent of any reader of the quoted text to conclude that: “The Normans gave their name to Normandy.”
    ?

    5. Is the assessment that »This multiple-choice question [ of Fig. 21 ] is unanswerable.« attributable to the conventions (relevant Wikipedia-link in the memo of this comment) that

    »the 1000’s« do not have much (year-wise) overlap with »the 10th century«

    and

    »the 1100’s« do not have much (year-wise) overlap with »the 11th century«

    ?

    p.s.
    Could the maximum number of links admissable in comments to this SciLog (and, ideally, all others, too) please be documented (to be adhered to accordingly; not least in the interest of SciLog-commenters trying to intelligently support their questions). Thanks.

Leave a Reply


E-Mail-Benachrichtigung bei weiteren Kommentaren.
-- Auch möglich: Abo ohne Kommentar. +