MLOps
Model Quality Monitoring, Drift, and Delayed Labels
Monitor model behavior with leading indicators, delayed outcomes, slice analysis, drift diagnosis, and explicit uncertainty.
By the end you can
- Separate input drift, prediction shift, calibration change, and outcome degradation
- Design leading indicators without presenting them as substitutes for labels
- Evaluate delayed, censored, or selectively observed outcomes
- Choose investigation and intervention policies from a causal failure hypothesis
The model may be wrong for weeks before the label exists
A hospital readmission model produces scores today. The confirmed outcome arrives thirty days later. That thirty-day window is not a modelling convention someone chose. It is a payment rule.
Medicare judges hospitals on condition-specific 30-day risk-standardized unplanned readmission measures for six conditions: AMI, COPD, heart failure, pneumonia, CABG, and elective THA/TKA. The Hospital Readmissions Reduction Program behind those measures was created by section 1886(q) of the Social Security Act, and it began cutting payments on 1 October 2012, the first day of fiscal year 2013. The measures are calculated over a rolling performance period. CMS states the consequence on its own programme page: “The payment reduction is capped at 3 percent (that is, a payment adjustment factor of 0.97).”
That cap is not theoretical. In the fiscal year that began in October 2021, 2,499 hospitals were penalised, the average penalty was 0.64 percent, and 39 hospitals lost the full 3 percent. Those counts come from Jordan Rau's KFF analysis of the penalty data, “10 Years of Hospital Readmissions Penalties”.
So the team sees inputs, score distributions, overrides and workflow load immediately. True performance arrives thirty days later, for some patients only, and is then aggregated over a rolling window before it touches anything. Monitoring under delayed labels is an inference problem. Leading indicators tell the team where to look first. They do not certify degradation, and they do not certify safety.
Predict first
How well did the deployed model discriminate?
This path has come back to one proprietary sepsis model several times. It was in wide use in US hospitals when an outside team validated it on 38,455 hospitalizations at one academic medical centre. Its score is meant to rank patients who will develop sepsis above those who will not. On the usual scale, 0.5 means the ranking is no better than a coin toss and 1.0 means it is perfect.
Recall it before reading on, without looking back. Where did the external validation put it: below 0.70, between 0.70 and 0.85, or above 0.90?
Settle on an answer, then read on — the next section is the reveal
Case
A deployed sepsis model missed two thirds of its cases
A widely implemented proprietary sepsis model was finally checked by someone other than its vendor. The cohort was large: “27 697 patients undergoing 38 455 hospitalizations”. Wong and colleagues published the external validation in JAMA Internal Medicine in June 2021, and the headline was a single number: “The ESM had a hospitalization-level AUC of 0.63 (95% CI, 0.62-0.64)”.
The number that matters to a ward is the one underneath it. “The ESM also did not identify 1709 patients with sepsis (67%) despite generating alerts for an ESM score of 6 or higher for 6971 of all 38 455 hospitalized patients (18%), thus creating a large burden of alert fatigue.” Two thirds of the sepsis cases missed. Nearly one stay in five alerted. A dashboard reporting only the area under the curve would have shown 0.63 and nothing about which two thirds the model lost.
FigureInteractive
A proportion bar splits the sepsis patients in the external validation of the Epic Sepsis Model: 67% — 1,709 patients — were not identified, leaving the 33% the model did find. A second proportion bar splits the 38,455 hospitalizations by alert: 6,971 of them carried a score of 6 or higher, the paper's 18%, against 31,484 with no alert, while two thirds of the sepsis cases raised none. Cards below give the cohort and the headline metric: 27,697 patients, 38,455 hospitalizations, and a hospitalization-level AUC of 0.63 with a 95% confidence interval of 0.62 to 0.64. The single AUC hides which two thirds the model lost.
Visual
Evidence arrives on several timelines
A monitoring programme should state which claims are possible at each delay. The readmission measure sits in the third band, not the first. Thirty days pass before an outcome exists. A rolling performance period passes before it is aggregated. Only then does a payment adjustment apply, capped at 3 percent. Nothing observable on the day of the score can stand in for that.
Immediate
Service health, feature validity, model identity, scores, fallback, and workflow load.
Short delay
Human review, overrides, complaints, near-term proxies, and sampled adjudication.
Outcome delay
Confirmed labels, calibration, utility, subgroup performance, and missed cases.
Long horizon
Behavioral adaptation, feedback loops, long-term harm, and policy effects.
Example
A proxy improves while the real outcome worsens
A commercial risk-prediction algorithm ranked patients for enrolment in high-risk care management. Industry estimates put the reach of tools in its class at roughly 200 million people in the United States each year. An audit published in Science on 25 October 2019 found what it was really predicting: health care costs, used as a proxy for health need. Judged on the proxy, it worked. Obermeyer and colleagues state the result plainly in their abstract: “Thus, despite health care cost appearing to be an effective proxy for health by some measures of predictive accuracy, large racial biases arise.”
The size of the gap is the point. At the 97th-percentile threshold, removing the racial gap that proxy produced would, in the authors' simulation, raise the fraction of Black patients automatically identified for the programme from 17.7% to 46.5%; actually training on chronic conditions instead of cost moved the Black share of the highest-risk group from 14.1% to 26.7%. On the same day the study appeared, the New York State Department of Financial Services and Department of Health wrote jointly to David S. Wichmann, CEO of UnitedHealth Group Incorporated, about Optum's Impact Pro. The letter told him that “neither you nor any other healthcare or insurance entity may produce, rely on, or promote an algorithm that has a discriminatory effect.”
- Proxy signal: The algorithm predicted health care costs, and by some measures of predictive accuracy it predicted them effectively.
- Hidden confounder: Cost and health need are not the same quantity, and the distance between them is not the same for every group of patients — which is where the large racial biases arise.
- Delayed outcome: With the racial gap at each risk score removed, as the authors simulated, the same 97th-percentile threshold would have auto-identified 46.5% Black patients, not 17.7%.
- Incorrect response: Accuracy on the proxy was read as evidence the system worked, in a class of tools that industry estimates apply to roughly 200 million people in the United States each year.
- Better design: Test the proxy against the outcome it stands in for, subgroup by subgroup, and expect the finding to come from outside — this one arrived as an external audit in Science and a regulator's letter on the same day.
Comparison
Monitoring signals support different claims
Treating every alert as “model drift” encourages the wrong fix. The three families of signal answer different questions, and only one of them is close to correctness. Even that one is not enough alone. A hospitalization-level AUC of 0.63 is an outcome-label statistic, and it still needed 1,709 missed patients and an 18% alert rate placed beside it before anyone could say what the model was doing to a ward.
Data and score signals
Reveal distribution, coverage, freshness, and routing changes.
- Fast and widely available
- Useful for localization
- Do not measure correctness directly
- Can trigger investigation
Human and workflow signals
Reveal overrides, queue burden, complaints, and process adaptation.
- Connect system to use
- Can be biased by interface or incentives
- Often available before labels
- Need denominator and capacity context
Outcome labels
Measure task performance and utility when representative and mature.
- Closest to correctness
- May be delayed or censored
- Can be selectively observed
- Require cohort and label-quality analysis
Drift is evidence of change, not a diagnosis
Input drift may reflect seasonality, acquisition changes, source faults, or a legitimate population transition. Prediction shift can arise from input change, model routing, threshold change, or calibration. Outcome degradation can occur without large marginal feature shifts.
Google Flu Trends is the case where this was counted rather than asserted. It was built to predict CDC influenza-like-illness reports, and it drifted for two years while the model itself sat still. Lazer and colleagues wrote in Science in March 2014 that “GFT also missed by a very large margin in the 2011–2012 flu season and has missed high for 100 out of 108 weeks starting with August 2011”. By February 2013 it was predicting more than double the CDC's proportion of ILI doctor visits. They attribute the failure to “algorithm dynamics”. Google made 86 changes to search in June and July 2012 alone, so the inputs kept moving because the vendor kept changing the product that generated them. Their most deflating comparison is the baseline: even 3-week-old CDC data projected current flu prevalence better than GFT did.
The monitor should connect signals to a failure hypothesis and test the affected slices, time windows and decision pathways before choosing an intervention. A hundred misses in a hundred and eight weeks is a pattern. The diagnosis was upstream of the model.
Analogy
A farmer reads the field weeks before the harvest
A farmer walks the field weeks before harvest. Leaf color, soil moisture, pests and growth rate are useful leading indicators, but the final yield remains unknown. A greener field after extra fertilizer may still produce poor grain if another constraint dominates.
Inspecting a field changes nothing about which plants reach the harvest. A deployed model has the opposite property. It chooses which cases receive an action, and so chooses which outcomes ever become observable. A declined loan neither repays nor defaults. Its harvest is one nobody gets to weigh.
Predictive policing is where that property has been proved rather than intuited. A 2018 paper on runaway feedback loops opens with the mechanism: “Such systems have been shown susceptible to runaway feedback loops, where police are repeatedly sent back to the same neighborhoods regardless of the true crime rate.” A system retrained on the crime its own dispatches discover is reading its own harvest. Ensign and colleagues built a mathematical model of the process, proved why the loop occurs, and showed that resident-reported incidents attenuate it. They do not remove it. Removing it takes intervention. An earlier Oakland study by Lum and Isaac, of recorded drug crimes, found that targeted policing “would have been dispatched almost exclusively to lower income, minority neighborhoods”.
Leading indicators narrow hypotheses; mature outcomes decide whether the model delivered the intended result.
Key idea
Selective labels can make the monitor optimistic
When the system decides which cases receive an action, labels may exist only for the selected cases. Approval systems observe repayment for approved applicants. Alerting systems investigate only flagged events.
Naive performance estimates then describe the observed subset, not the intended population. Use exploration, external audits, counterfactual methods, or explicit scope limitations where appropriate.
The problem has a name and a paper behind it. Five researchers named the selective labels problem in 2017, and their example is judicial bail: “we observe the outcome of whether a defendant fails to return for their court appearance only if the human judge decides to release the defendant on bail”. The labelled cases are the ones the judge already chose, so the model is scored on a sample the incumbent decision-maker assembled. Their answer is a method rather than a caveat. They “develop an approach called contraction which allows us to compare the performance of predictive models and human decision-makers without resorting to counterfactual inference”.
A label is not representative merely because it eventually arrived.
Steps
Investigate a quality alert
Start with attribution and data validity before changing model parameters. The five steps below run from asset verification to the choice of intervention.
The last step is easier when its options were written down before the alert fired. FDA's final guidance on predetermined change control plans for AI-enabled device software functions was announced in December 2024 and reissued in August 2025. The notice of availability says what such a plan should contain: “This guidance recommends that a PCCP describe the planned AI-DSF modifications, the associated methodology to develop, validate, and implement those modifications, and an assessment of the impact of those modifications.” A manufacturer that has specified all three in advance can then make those changes without a new marketing submission for each one. Step 5 becomes a decision inside an agreed envelope, not an argument held under time pressure.
1. Verify assets and inputs
Confirm model, policy, features, population, and monitoring code.
2. Localize the change
Analyze time, cohort, source, score band, fallback, and workflow slice.
3. Test hypotheses
Distinguish fault, legitimate shift, policy effect, proxy change, and model degradation.
4. Wait or sample deliberately
Use mature cohorts, adjudicated samples, or controlled exploration for labels.
5. Choose the intervention
Repair data, change policy, recalibrate, retrain, contain, or continue observing.
Example
Clicks went up after the redesign
A proxy alert like the cost-for-need case in this lesson is easiest to see in a simpler setting: a product-ranking model judged day to day by click-through, with purchases arriving later. The shop, the dates, the rates and the return window below are invented.
- Verify assets and inputs: the model version, the features, the monitoring code and the population are all unchanged. One thing did change: a site redesign on 1 March made every product tile larger and easier to tap.
- Localize the change: click-through rose 12%, on mobile only, in every score band, starting on 1 March. A model improvement would not respect the date of a front-end release that precisely.
- Test hypotheses: the old model, still serving 10% of sessions under the new design, shows the same 12% rise. The proxy moved because the interface changed how clicks are produced — the ranking did not get better. That is the shape of the cost proxy too: a measure that tracks the outcome under one mechanism and drifts away under another.
- Wait or sample deliberately: purchases are only final after a 14-day return window, so the team waits for the first mature cohort instead of reading the click chart. Purchases per session come in at 3.1%, against 3.2% before the redesign: no gain, perhaps a small loss.
- Choose the intervention: the model is not retrained or promoted on the click rise. Click-through is re-baselined from 1 March, and release gates for ranking changes are tied to mature purchase cohorts, with clicks kept as an early-warning signal only.
Every alert should state the strongest justified claim
“Feature distribution changed” is a precise statement. “The model is bad” is not justified until the evidence connects the change to behavior or outcomes under the intended population.
Supervisors have written down the same discipline. Revised interagency guidance on model risk management was issued jointly by the Federal Reserve, the OCC and the FDIC on 17 April 2026, superseding earlier versions from 2011 and 2021. Its section on ongoing model monitoring defines the activity against a named list of causes: “Ongoing model monitoring involves an evaluation of the extent to which a model is performing as expected given potential changes in products, exposures, activities, clients, data relevance, or market conditions.” Where a model no longer performs as expected, the guidance says the situation “may warrant overlays, adjustment, or redevelopment”.
Read the scope before borrowing the authority. The guidance says it is expected to be most relevant to banking organisations with over $30 billion in total assets. And it is supervisory guidance rather than a binding rule: the agencies state that it does not set forth enforceable standards or prescriptive requirements. A monitoring runbook should say what each signal can and cannot establish, and what evidence is needed next. That includes being exact about what a cited authority actually requires.
Key takeaways
- Drift indicates change but does not identify the cause: Google Flu Trends missed high for 100 of 108 weeks while the model stood still and the search product moved.
- Leading indicators support investigation and containment, not proof of correctness — a hospitalization-level AUC of 0.63 hid 1,709 missed sepsis patients.
- Proxy metrics can predict their own target effectively and still be the wrong target: cost predicted well, and removing the racial gap it produced, in the authors' simulation, moved Black patients auto-identified at the 97th percentile from 17.7% to 46.5%.
- Delayed labels require cohort maturity, denominator discipline, and uncertainty; Medicare's 30-day readmission measures run over a rolling performance period before a payment reduction capped at 3 percent applies.
- Selective labels can make observed performance unrepresentative of the target population, because the incumbent decision-maker chose which cases ever get a label.
- Monitoring statements should match the strongest claim the evidence justifies, and cited authorities should be quoted at their actual scope.