What Should We Check Next? Testing Ambiguity-Preserving Evidence Selection for AI Incident Investigation
Linda Thorstensen
Submitted to AI Incident Response Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
AI incidents can leave several causal explanations compatible with the evidence. I built and tested a small investigator that keeps those explanations open until the evidence rules them out, then selects the next check that should separate them most usefully. On a frozen synthetic holdout, it improved first-check evidence selection over neutral baselines while preserving unresolved and model-gap states. I then applied the workflow to unresolved questions from the OpenAI/Hugging Face incident and turned them into concrete cross-organizational evidence requests.
Reviews
I like that this focuses on a very specific incident-response problem.
The main limitation is that the evaluation is still highly synthetic and structured. I wld like to see the same approach tested on independently written, noisy incident cases and compared against more mature diagnosis methods, then put in front of actual incident responders.
This paper tackles a critical and underexplored bottleneck in AI incident response: the overwhelming volume of multi-source telemetry that frequently hardens into premature, unsupported causal explanations before evidence can actually separate competing hypotheses. The author introduces a rigorous, auditable investigator implementation (AP-MINIMAX) that explicitly preserves ambiguity, marks cases as UNRESOLVED or MODEL_GAP when closure is unjustified, and uses worst-case residual ambiguity to select the next discriminating check. Across a rigorously frozen 400-case holdout evaluation, AP-MINIMAX demonstrated statistically significant improvements in realized candidate reduction per unit cost over neutral baselines across all five seeds, while avoiding unsupported closures entirely. By grounding the methodology in a practical, source-grounded handoff for the July 2026 OpenAI/Hugging Face incident, this work provides a valuable, modular blueprint for bringing disciplined active-diagnosis principles to frontier AI safety and incident investigations.
Read full reviewShow less
Cite this project
@misc{thorstensen2026should,
title = {{What Should We Check Next? Testing Ambiguity-Preserving Evidence Selection for AI Incident Investigation}},
author = {Linda Thorstensen},
year = {2026},
month = sep,
note = {Submitted to AI Incident Response Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/what-should-we-check-next-testing-ambiguitypreserving-evidence-selection-for-ai-incident-investigation-5nv4}},
url = {https://apartresearch.com/sprints/projects/what-should-we-check-next-testing-ambiguitypreserving-evidence-selection-for-ai-incident-investigation-5nv4}
}More from AI Incident Response Sprint
- 1st placeView project: Noticing the escapes: Who spots a runaway agent, and how long does it take?
Noticing the escapes: Who spots a runaway agent, and how long does it take?
The Escapees
In 2026, nine incidents became public in which AI agents escaped their environment and did something unauthorized to other parties. We analyzed all of these incidents and how they were noticed initially. None of these …
- 2nd placeView project: Strengthening International AI Incident Discovery
Strengthening International AI Incident Discovery
Team A-O-I
Mandatory AI incident reporting exists to make dangerous events visible to regulators while there is still time to act. We coded the six such regimes in force or set to be enforced soon from primary legal texts and …
- 3rd placeView project: When to Ask: An RL Environment That Teaches AI Agents to Act on What Users Mean and Not Just What They Say
When to Ask: An RL Environment That Teaches AI Agents to Act on What Users Mean and Not Just What They Say
Teachafy
When to Ask is a reinforcement-learning environment that trains AI agents to work out what the user actually means before they use a powerful credential, instead of just carrying out the literal instruction. Agents …