Skip to content
AI.info

Evaluation

Selective Prediction, Abstention, and Risk–Coverage

Evaluate abstaining systems through coverage, selective risk, fallback quality, subgroup burden, and operational delay.

By the end you can

Nine benchmarks out of ten give abstention no credit

A model may improve accuracy from 85% to 97% after answering only half the requests. That can be valuable if the remaining cases receive a safe, timely fallback. It can also be misleading if evaluation silently drops them.

That silence has been counted. Ten influential language-model evaluations were checked one by one, drawn from the major leaderboards: GPQA, MMLU-Pro, IFEval, Omni-MATH, WildBench, BBH, MATH (L5), MuSR, SWE-bench and HLE. Nine of the ten grade strictly correct or incorrect, and give no credit at all for abstaining. Only WildBench offers partial credit for indicating uncertainty. Under that arithmetic a model that always guesses outscores an otherwise identical model that says “I don't know”. A guess can score. A refusal cannot.

That count comes from Kalai and colleagues, in a September 2025 paper called Why Language Models Hallucinate. Their remedy is a scoring instruction rather than a modelling one: “The numerous primary evaluations must be adjusted to stop penalizing abstentions when uncertain.” The fault they name is in the scoreboard, not in the model.

Selective prediction measures quality together with the fraction of cases receiving an automated answer.

The denominator must include the decision not to decide.

Case

Two percent error, bought with four in ten cases

A selective classifier can sit on top of a network that is already trained. It lets the user, not the network, name the error rate. Geifman and El-Yaniv built one in 2017. Their method “allows a user to set a desired risk level”, and at test time “the classifier rejects instances as needed, to grant the desired risk (with high probability)”. On ImageNet they report that “an unprecedented 2% error in top-5 ImageNet classification can be guaranteed with probability 99.9%.” The coverage that buys is “almost 60% test coverage”.

Four in ten cases go somewhere else. That pathway is the rest of the system. The 2% is also conditional on the cases the classifier agreed to answer. It cannot be laid alongside a full-coverage number as though the two described the same test set.

Figure

A guaranteed risk level drawn as what it costs: the share of the test set answered, the share answered wrongly, and the share sent somewhere else.

Example

The 38 scans IDx-DR would not read carried the same disease

A deferred queue can hold exactly the cases you least want to lose. FDA's De Novo summary for IDx-DR, granted on 11 April 2018, shows one. The pivotal study enrolled 900 participants at 10 primary care sites. Only 819 could be fully analysed — an analysable fraction of 92%, 95% CI 90–93%. The headline sensitivity of 87.4% and specificity of 89.5% are computed on those answered cases alone.

The interesting number is in the other column. For 38 participants the device returned an “insufficient image quality” output instead of a screening result. The disease was no rarer among them: “In the 38 participants with AI system insufficient image quality, the prevalence of mtmDR was 10/38 (26%), comparable to the mtmDR prevalence in the fully analyzable dataset.” Prevalence in the answered population was 23.8%. Abstaining removed the cases from the metric. It left the disease exactly where it was.

  • Answered cases: sensitivity 87.4% and specificity 89.5%, measured only on the 819 participants of 900 the device agreed to read.
  • Deferred cases: 38 participants received an “insufficient image quality” output instead of a screening result.
  • Prevalence in the deferred group: 10/38 (26%) had more-than-mild diabetic retinopathy, against 23.8% in the answered population — the abstained cases were not the healthy ones.
  • Second published account: Abràmoff and colleagues report the same 900-subject trial in npj Digital Medicine, with sensitivity 87.2%, specificity 90.7% and an imageability rate of 96.1% (95% CI, 94.6–97.3%).
  • Combined verdict: safety is the answered performance plus whatever happens to those 38, since roughly a quarter of them had the condition the screening exists to find.

Visual

Three outcomes, not two

Abstention adds a pathway that changes the system. IDx-DR does not emit a binary. Its range of available device outcomes is three: mtmDR detected, mtmDR not detected, and insufficient quality. The third outcome is not an error state to be tidied away in analysis. It is a case the product still has to service, with a person attached to it.

FigureProcess · 4 steps
  1. 1. Automated answer

    The model acts directly on cases that pass the acceptance policy.

  2. 2. Deferred case

    The system requests more evidence, waits, or routes to another process.

  3. 3. Fallback resolution

    A person, rule, second model, or later event resolves the deferred case.

  4. 4. Combined outcome

    Total quality includes automated and fallback decisions, delay, and burden.

Comparison

Risk–coverage curves, named in 2010

Selective systems trade breadth for residual error, and that pair of quantities has a datable origin. The name “selective classification”, for classification with a reject option, was fixed in 2010 by El-Yaniv and Wiener in the Journal of Machine Learning Research. They traced the idea back to Chow in 1957 and 1970. They also named the trade-off the columns below describe: “The essence in selective classification is to trade-off classifier coverage for higher accuracy. We term this trade-off the risk-coverage (RC) trade-off.”

A decade later the definition was still the field standard. Kamath and colleagues call it exactly that in 2020: “The risk-coverage curve provides a standard way to evaluate selective prediction methods (El-Yaniv and Wiener, 2010).” Coverage and selective risk are citable constructs with a fifteen-year paper trail, not house vocabulary. Neither of them, by construction, says anything about the rejected cases.

FigureComparison · 3 columns

Coverage

Fraction of eligible cases receiving the model’s direct prediction.

  • Higher means broader automation
  • Can differ by subgroup
  • Depends on rejection policy
  • Should include eligibility rules

Selective risk

Error or loss among accepted cases.

  • Usually falls as coverage shrinks
  • Can hide deferred-case harm
  • Needs uncertainty bands
  • Must match the accepted population

System risk

Outcome across accepted and deferred pathways.

  • Includes fallback errors
  • Includes delay and cost
  • Supports product decisions
  • Cannot be inferred from accepted cases alone

Key idea

Uncertainty score is not a universal difficulty measure

Maximum probability, entropy, ensemble disagreement, distance, or conformity scores can rank uncertainty differently. They may also be confidently wrong under distribution shift.

Two rejection rules on the same model, at the same accuracy target, do not answer the same number of questions. Kamath and colleagues showed it in 2020 on a question-answering model trained on SQuAD and tested on mixtures of SQuAD and five other QA datasets. They compared a trained calibrator against thresholding the model's own softmax probability, MaxProb: “Our method answers 56% of questions while maintaining 80% accuracy; in contrast, directly using the model's probabilities only answers 48% at 80% accuracy.” The paper's figures are 56.1% coverage against 48.2% at the same 80% accuracy on answered questions. The whole of that difference is down to the rejection rule, because models are overconfident on out-of-domain inputs. Same model, same accuracy target, worse product. The score was the whole difference.

The rejection rule can also be trained instead of bolted on. Existing mechanisms, Geifman and El-Yaniv observed in 2019, are “based mostly on a threshold over the prediction confidence of a pre-trained network.” Their SelectiveNet instead “is trained to optimize both classification (or regression) and rejection simultaneously, end-to-end”, and they report “a consistently improved risk-coverage trade-off over several well-known classification and regression datasets”. Where the rejection rule comes from is a design decision, not a detail.

Evaluate the rejection rule on realistic failure modes. Avoid calling every low-confidence case “hard” without examining why.

A rejection score is another model component with its own failure modes.

Cutting coverage in half widened the gap between groups

A system may achieve equal accepted-case accuracy while deferring one language, device type, or demographic group far more often. Those users experience longer waits, more documentation, or less automation. The aggregate curve looks better while it happens.

Abstaining can widen a gap instead of closing it. That was measured across five vision and NLP datasets in 2021 by Jones and colleagues: “In this paper, we find that while selective classification can improve average accuracies, it can simultaneously magnify existing accuracy disparities between various groups within a population, especially in the presence of spurious correlations.” On MultiNLI, moving from full coverage to 50% average coverage took worst-group accuracy from 65% to 75%. The second-to-worst group went from 77% to 95%. Both groups improved. The distance between them grew.

On CelebA the worst group did not improve at all. Its accuracy fell as coverage fell. The model was most confident exactly where it was most often wrong for that group, so the rejection rule kept the answers it should have declined. An independent team found the same shape in regression: “the performance of a minority subgroup can decrease while we reduce the coverage”. That was Shah and colleagues, in 2022.

Report coverage, selective risk, fallback outcome, and delay by critical slice. Equal accuracy after filtering does not imply equal service, and lowering coverage is not by itself a safety measure.

Who gets deferred is part of the product behavior.

Analogy

An airport lane that sends some bags to secondary inspection

An automated scanner clears routine bags and routes the ambiguous ones to secondary inspection. Safety is a property of both lanes, never of the scanner alone.

A bag in the second lane waits a few minutes. A person deferred by a model may be waiting on a diagnosis, a payment, or an appeal, and may be deferred every time. Nurses in eleven clinics in Thailand used a deployed deep-learning diabetic-retinopathy screener. Beede and colleagues watched them work, and reported it in 2020: “We find tensions between the model's thresholds for data quality, and the quality of data that arise from an imperfect, resource-constrained environment.” The system refused images that fell below its quality threshold. MIT Technology Review, reporting on the same deployment, wrote that “more than a fifth of the images were rejected” and that “Patients whose images were kicked out of the system were told they would have to visit a specialist at another clinic on another day.”

That is what the second lane cost there. Not a few extra minutes behind a screen, but another clinic on another day, borne by the patients whose images the threshold rejected. Deferred cases stay inside the evaluation for exactly that reason.

A safe primary lane requires a competent secondary lane.

Steps

Evaluate an abstaining system end to end

Keep accepted and rejected populations connected throughout analysis. For one device class a binding regulation already demands it. FDA wrote the abstention output into the rule when it created the device type IDx-DR established: 21 CFR 886.1100, “Retinal diagnostic software device”, Class II. Special control (b)(2)(i) reads: “Clinical performance testing must evaluate sensitivity, specificity, positive predictive value, and negative predictive value for each endpoint reported for the indicated disease or condition across the range of available device outcomes.” For IDx-DR that range is three outcomes: mtmDR detected, mtmDR not detected, and insufficient quality. The abstention cannot be dropped from the evidence. It can only be reported alongside the rest.

The fallback pathway is regulated too. Another special control requires labelling to warn that the device “provides a screening diagnosis only and that it is critical that the patient be advised to receive follow-up care”. That is a requirement about what happens after the device speaks, or declines to. Steps 3 and 4 below are that regulation restated as ordinary evaluation practice.

FigureProcess · 5 steps
  1. 1. Define eligibility

    State which cases enter the selective policy and which are excluded earlier.

  2. 2. Sweep rejection

    Plot selective risk against coverage with uncertainty.

  3. 3. Audit deferred cases

    Describe reasons, severity, subgroups, and reference outcomes.

  4. 4. Measure fallback

    Include accuracy, delay, cost, capacity, and failure recovery.

  5. 5. Choose a service policy

    Set coverage targets and escalation rules that meet overall requirements.

Key takeaways