ML data engineering
Labels, Ground Truth, and Annotation Pipelines
Design label sources, annotation protocols, adjudication, agreement, bias analysis, and lifecycle controls.
By the end you can
- Compare operational, expert, behavioral, and adjudicated label sources
- Design annotation instructions, sampling, blind review, and adjudication
- Measure reliability beyond one agreement statistic
- Detect label leakage, feedback contamination, and population bias
Comparison
Four label sources with different failure modes
No source is automatically authoritative. Each one records a particular measurement process.
An observed outcome — loan repayment after twelve months — records the result of interest directly. But it arrives late, it can be censored, and the intervention meant to act on it can change it. An expert annotation — a radiologist marking a suspicious finding — reaches nuanced concepts at the cost of disagreement and fatigue, so it needs calibration, blind overlap and adjudication. An operational decision — an application was manually rejected — is cheap to collect at scale. It measures what was done rather than what was true, and it carries policy, capacity and historical bias with it. A proxy or weak label — complaint keywords standing in for service failure — fills the gap when direct labels are scarce, and introduces noise both known and unknown.
The fourth column has a priced example. A commercial risk algorithm covering 43,539 White and 6,079 Black patients did not predict illness. Its label was future health-care cost, a convenient proxy, so the model ranked patients by what the system would spend on them rather than by how ill they were. Switching the label would have raised the share of Black patients referred for extra help from 17.7% to 46.5%, with the architecture untouched. Obermeyer and colleagues dissected the system in Science in 2019, and their abstract states the general case: “We suggest that the choice of convenient, seemingly effective proxies for ground truth can be an important source of algorithmic bias in many contexts.” Regulators treated it as one. The New York Department of Financial Services and Department of Health wrote jointly to UnitedHealth Group Incorporated about the same system. A proxy is a choice about what the target means. It is answerable as such.
Observed outcome
A later event directly records the result of interest.
- Often delayed and sometimes censored
- May be altered by interventions
- Requires a stable horizon and event definition
- Example: loan repayment after twelve months
Expert annotation
A trained reviewer interprets evidence using guidelines.
- Can capture nuanced concepts
- Subject to disagreement and fatigue
- Needs calibration, blind overlap, and adjudication
- Example: radiologist marks a suspicious finding
Operational decision
An existing workflow action becomes the label.
- Easy to collect at scale
- May encode policy, capacity, and historical bias
- Often measures what was done, not what was true
- Example: application was manually rejected
Proxy or weak label
A rule or correlated signal approximates the desired concept.
- Useful when direct labels are scarce
- Introduces known and unknown noise
- Should be validated against higher-quality evidence
- Example: complaint keywords approximate service failure
Key idea
Label generation can leak model predictions into the target
When an existing model prioritizes which cases receive review, the confirmed labels depend on that model’s selection. Train a successor on only the reviewed cases and it inherits the old system’s blind spots. Human reviewers may also see the model score. Their decisions can then partially echo the predictor, which makes later evaluation less independent. Preserve exploration samples, randomized audits, or alternative review channels when feasible. Record whether a label was collected under model-assisted selection, and which score was visible.
A feedback label is not independent ground truth when the deployed model influenced who was measured or how reviewers judged the case.
Steps
Design an annotation study that measures its own reliability
A queue of unlabeled items is not yet an annotation system. Five steps turn it into one. Define the evidence boundary: state what annotators may see and which contextual cues must remain hidden. Write decision-focused guidelines with positive, negative, borderline, abstain and exclusion examples. Calibrate reviewers on shared examples, with feedback, before production labeling begins. Add blind overlap: assign a sample to several reviewers to estimate agreement and systematic differences. Then adjudicate the conflicts, update the rules carefully, and keep the guideline version attached to every label.
Step three is the one teams treat as optional, and ImageNet priced it. The two annotators whose top-5 error the challenge reports differed mainly in how much practice they had before starting: annotator A1 worked through 500 practice images, annotator A2 through 100. The guidelines were identical. Preparation, not the task, is what separated them — and the gap it produced is larger than the gap between the trained annotator and the best model of the day.
1. Define the evidence boundary
State what annotators may see and which contextual cues must remain hidden.
2. Write decision-focused guidelines
Include positive, negative, borderline, abstain, and exclusion examples.
3. Calibrate reviewers
Use shared examples and feedback before production labeling begins.
4. Add blind overlap
Assign a sample to multiple reviewers to estimate agreement and systematic differences.
5. Adjudicate and version
Resolve conflicts, update rules carefully, and retain the guideline version for every label.
Quality control should reveal both reviewer inconsistency and genuine ambiguity in the target definition.
Case
A trained annotator at 5.1%, GoogLeNet at 6.8%
ImageNet measured what training does to an annotator, and published both halves of the measurement. Annotator A1 practised on 500 images, then labelled 1,500 test images at 5.1% top-5 error. GoogLeNet scored 6.8% on that same sample. Annotator A2 practised on only 100 images, labelled 258, and finished at about 12.0% — against GoogLeNet’s 5.8% on A2’s sample. A different sample, and therefore a different machine number. The two comparisons are not interchangeable. Quoting 6.8% against both is the most common way this table gets misread.
Where A2’s errors came from is the useful part: 48.8% of them were cases where the correct class was never considered at all. The challenge paper says why. “The most common error that an untrained annotator is susceptible to is a failure to consider a relevant class as a possible label because they are unaware of its existence,” write Russakovsky and colleagues, in the section on the annotation protocol. That is a guideline and training failure, not a failure of perception. It is fixable by the annotation design rather than by hiring better eyes.
The spread is not an artifact of one year or of untrained help. A later study ran for a year with five trained labelers, and their ImageNet multi-label accuracy still spanned 91.9% to 97.2%. It was published at ICML in 2020. A deliberate training regimen narrows the annotator-to-annotator gap. It does not close it.
Analogy
A number is only as good as its method
The specimen, instrument, procedure, operator, threshold and calibration behind a laboratory test all influence the reported result. A number without method metadata is incomplete. The target concept is the property being measured. Annotation guidelines are the procedure. Reviewer calibration resembles instrument calibration, and adjudication is a repeat test when results disagree. Many labels concern social, linguistic or policy categories with no objective physical value for an instrument to reach for. There, disagreement reveals ambiguity in the task rather than simple reviewer error.
That claim can be measured instead of asserted. ChaosNLI collected 464,500 annotations, 100 per example, over 3,113 SNLI and MNLI examples and 1,532 αNLI examples; Nie and colleagues published it in 2020. The abstract opens on the habit it is testing: “Despite the subjective nature of many NLP tasks, most NLU evaluations have focused on using the majority label with presumably high agreement as the ground truth.” With a hundred independent opinions per item rather than one majority vote, a noticeable share of the items turned out to carry high human disagreement. Models were near-perfect on the high-agreement subset and barely above chance on the low-agreement subset, which is where most of their errors live. Averaging those items into a single gold label does not remove the ambiguity. It hides it, and then scores the model against a coin flip.
The position is older than the measurement. Lora Aroyo and Chris Welty argued it in AI Magazine, under a title that calls truth a lie and human annotation a set of seven myths. Barbara Plank returned to it in 2022, on human label variation and what it means for ground truth in data, modeling and evaluation.
Label disagreement is evidence about the task, not merely a nuisance to average away.
Measure more than inter-annotator agreement
Agreement is useful, but a high value can reflect an easy or imbalanced sample. Report class prevalence, abstention, disagreement patterns, adjudication rate, and performance on expert-reviewed gold examples.
Analyze quality by reviewer, source, class, difficulty, language, site, device and time. Systematic disagreement on one slice can reveal guideline gaps or missing context.
A low agreement figure need not condemn the collection either, and information retrieval has the longest record on this. Independent assessors judging TREC topics agreed on only about a third of the relevance judgments — an overlap of 0.36. The system rankings those judgments produced were almost identical, at a correlation of 0.890. Ellen Voorhees of NIST reported that in 2000, and her abstract draws the conclusion: “The high correlations indicate that the comparative evaluation of retrieval performance is stable despite substantial differences in relevance judgments, and thus reaffirm the use of the TREC collections as laboratory tools.” Twenty-five years later another team re-annotated the TREC 2019 Deep Learning track for SIGIR 2025 and reproduced the pattern with worse agreement still: assessor overlap of 0.15, with a system-ranking correlation of τ = 0.897 against her 0.890. The agreement statistic more than halved. The decision the labels support did not move. Report both, and say which decision the label is meant to serve before quoting an agreement coefficient.
For delayed outcomes, measure label maturity and revision rates. A preliminary label may be useful for monitoring and unsuitable for final evaluation.
Finally, audit construct validity: does the measured label represent the decision concept? Perfect agreement on the wrong proxy is still a poor target.
Label quality combines consistency, accuracy against trusted evidence, temporal maturity, coverage, and construct validity.
Case
Label errors in the test sets everyone reports against
Benchmark test sets carry label errors, and someone counted them. An audit of ten heavily used benchmarks flagged candidate errors algorithmically, then put every candidate to crowd validation. “Errors in test sets are numerous and widespread: we estimate an average of at least 3.3% errors across the 10 datasets, where for example label errors comprise at least 6% of the ImageNet validation set,” reads the abstract by Northcutt and colleagues, published at NeurIPS in 2021. In ImageNet that came to 2,916 validated errors.
The adjudication is the part worth keeping. Of the flagged ImageNet items, Mechanical Turk workers judged 1,428 correctable, 597 multi-label and 293 neither label — and 2,524 not errors at all. An audit of a label set required its own label set. It inherited everything this lesson has been describing: a false-alarm rate, a category for genuine ambiguity, and a human panel deciding what counts. An independent Google team came at the same benchmark from the other direction in 2022, hand-reviewing every remaining ImageNet mistake of the top models, and reached the same conclusion. The benchmark every group reported against was itself a noisy measurement.
Position
“Ground truth” names a procedure, and the procedure moves the number
“Ground truth” promises that a fact sits somewhere beneath the dataset. What sits there is usually a procedure: a guideline, a reviewer, a deadline, and a rule about what counts as enough evidence. Change the procedure and the labels move.
ImageNet put a size on that movement. Annotator A1 practised on 500 images, labelled 1,500 test images, and finished at 5.1% top-5 error against GoogLeNet’s 6.8% on that sample. Annotator A2 practised on 100, labelled 258, and came in near 12.0%. This is not the story it usually gets told as. One annotator on a sample of 1,500 images is no verdict on people against convolutional networks. The quantity worth keeping is the spread between two labellers working from one set of instructions: 5.1% and 12.0%. Either of them could have produced the dataset, and the two humans sit further apart from each other than the better of them sits from the machine. Nearly half of the weaker annotator’s errors, 48.8%, were classes never considered at all. That is a fact about the instructions, not about the annotator.
Finished labels carry that variability into everything built on top. The audit of ten heavily used benchmarks put errors at “at least 6% of the ImageNet validation set” — 2,916 validated cases. Even that count needed adjudication: 2,524 flagged items turned out not to be errors. Five trained labelers in a later year-long study still spanned 91.9% to 97.2%.
So the question to put to a label column is not whether it is correct. It is who labelled it, under which version of the guidelines, with how much practice before they started, and what happened to the items they disagreed on.
A label column records a measurement, and a measurement is entitled to a method.
Example
How label processes distort the apparent target
These problems cannot be fixed by changing the model architecture alone. Epic’s proprietary sepsis model is the case in full. Its external validators could not use the vendor’s target, because the target was proprietary. So they built a sepsis label themselves, from the CDC clinical surveillance definition and ICD-10 codes. Measured against that label, across 38,455 hospitalizations of 27,697 patients, the model reached an area under the ROC curve of 0.63 (95% CI, 0.62–0.64). It alerted on 18% of hospitalizations. It failed to identify 1,709 patients with sepsis (67%). Wong and colleagues published that in JAMA Internal Medicine in 2021, concluding that “the ESM has poor discrimination and calibration in predicting the onset of sepsis”. A second team repeated the exercise in 2024 over 145,885 emergency-department encounters, with a label of their own, and found a 6-hour-window sensitivity of 14.7%. Nothing in the architecture changed between those evaluations and the deployment. The label did, and the label is what decided what the number meant.
- Fraud review: only high-risk transactions are investigated, so confirmed outcomes are missing for the low-risk cases the old model never selected. The label exists only where the previous policy chose to look.
- Content moderation: policy changes reclassify old material, but the dataset mixes guideline versions without a policy identifier, so two rows carrying identical evidence hold different labels for a reason no column records.
- Healthcare: patients who receive more tests give a condition more chances to be observed, which is measurement intensity bias. And when the target definition is proprietary, as with the sepsis model, every evaluator supplies their own — which is how one system scores an area under the ROC curve of 0.63 under one label and 14.7% sensitivity under another.
- Support quality: satisfaction surveys overrepresent customers willing to respond after especially good or bad experiences, so the label measures willingness to answer as much as service quality.
- Defect inspection: reviewers see the production line identifier and unconsciously use site reputation instead of image evidence, because the evidence boundary was written down but never enforced.
Ground truth is usually produced by a process
A fraud label may depend on customer disputes, investigator decisions and waiting periods. A medical label may depend on tests, coding practices and follow-up. When one team needed a sepsis label for 38,455 hospitalizations, they built it from the CDC clinical surveillance definition and ICD-10 codes — and that construction is the definition of sepsis their evaluation actually used. An image label may reflect annotator guidelines and how much of the object could be seen. Calling these values ground truth should not hide their provenance.
Labels can be delayed, missing, disputed, censored, policy-dependent, or wrong. How the target is defined shapes the model’s behavior. Predicting “case sent to review” learns an operational policy. Predicting “confirmed harmful outcome” aims at a different concept. Predicting future health-care cost, as one widely used risk algorithm did, aims at neither illness nor need.
A label system therefore needs the same engineering discipline as features: contracts, timestamps, versions, quality metrics, ownership, and feedback about disagreements.
A label is trustworthy when the team can explain how it was produced, what uncertainty remains, and which decision it represents.
Visual
Label quality is managed across a lifecycle
The final value should keep its source, timing, policy and review history. Define the concept, unit, classes, horizon, exclusions and uncertainty states. Collect outcomes, annotations, proxies and source metadata under versioned rules. Review by measuring agreement, auditing slices, adjudicating conflicts and investigating unclear examples. Publish with a label version, confidence, timestamps and permitted uses attached to the dataset. Learn from model errors and downstream outcomes to refine guidelines, without contaminating evaluation.
The first step is the expensive one. The gap between 17.7% and 46.5% in the health-care risk algorithm was settled at definition time, when cost was chosen to stand in for illness. No care taken at collection, review, publication or learning recovers a target that was aimed at the wrong concept. The later steps are where the record is kept: which guideline version, which reviewer, how much practice, and what the adjudicators decided about the 597 items that turned out to have more than one right answer.
1. Define
Specify the concept, unit, classes, horizon, exclusions, and uncertainty states.
2. Collect
Capture outcomes, annotations, proxies, and source metadata under versioned rules.
3. Review
Measure agreement, audit slices, adjudicate conflicts, and investigate unclear examples.
4. Publish
Assign label version, confidence, timestamps, and permitted uses to the dataset.
5. Learn
Use model errors and downstream outcomes to refine guidelines without contaminating evaluation.
A mature label store preserves why a value exists, not only the final class.
Key takeaways
- Labels are outputs of measurement, policy, annotation and follow-up processes, not unquestionable facts. One widely used risk algorithm predicted future health-care cost and was read as illness; switching the label would have moved the share of Black patients referred for extra help from 17.7% to 46.5%.
- Observed outcomes, expert annotations, operational actions and proxies each fail differently: censoring and waiting periods, reviewer variability, encoded policy and capacity, and unmeasured proxy error.
- Target definitions should specify unit, horizon, uncertainty, exclusions, source and policy version. Epic's sepsis target stayed proprietary, so its external validators had to assemble a label from the CDC clinical surveillance definition and ICD-10 codes before the model could be scored at all — an area under the ROC curve of 0.63 over 38,455 hospitalizations.
- Annotation systems need calibrated guidelines, blind overlap, abstention, adjudication and slice-level quality analysis. ImageNet's annotator A1 practised on 500 images and reached 5.1% top-5 error; A2 practised on 100 and reached about 12.0%, with 48.8% of A2's errors being classes never considered.
- Deployed models bias future labels by deciding which cases are measured or by influencing reviewer judgment. Even an audit of labels is itself a labelling job: 2,524 of the flagged ImageNet items were not errors at all, and 597 were multi-label.
- Agreement, trusted-gold accuracy, maturity, revision rate, coverage and construct validity together describe label quality. TREC assessor overlap was 0.36, and 0.15 when re-annotated for SIGIR 2025, alongside system-ranking correlations of 0.890 and τ = 0.897.