Chapter 11 · begins on page 431
Architecture of Decision Support
The models
Each model in the book is stated on one card: who decides, when, with what information and commitment, what they get, what they may do, and the question it answers.
Model C1 · p. 453
What is a scorecard worth for the inspection decision, and when is one scorecard better than another for every decision?
Model C2 · p. 455
What allocation should be announced, and what does the static rule lose once violators adapt?
Model C3 · p. 461
Which scores of an automated component measure anything, and what can a finite audit certify about it?
Model C4 · p. 465
What does an override practice cost, and when does officer discretion add value rather than leak it?
What is proved, in words
The book follows each result with one sentence that says what it means without symbols. The formal statement is a click away; the proofs are in the book.
Proposition 11.2 · What the scorecards are worth · p. 454
A risk score is an experiment: two reasonable scorecards can each be the better one, depending on the decision they inform, and a misspecified score can still produce the right classes.
Proposition 11.4 · The static rule is the best answer to history · p. 456
Inspecting the riskiest class first is exactly right if nobody reacts — it is the optimum of the backtest.
Proposition 11.5 · The certified allocation · p. 457
The certified allocation inspects the riskiest class less than the static rule does and puts a tenth of the low-risk class under inspection — just enough that no adaptive violator gains from moving there.
Proposition 11.6 · Deter, then fill · p. 458
The certified allocation is built in two layers: a floor in every class that makes adaptation unprofitable, then the static rule applied to whatever budget is left.
Proposition 11.8 · When adaptation changes the answer · p. 459
Once a little under six per cent of the violators adapt (), it pays to deter them all, and from then on the gap between the static rule and the certified allocation only widens.
Proposition 11.9 · Deterrence is invisible in the data it produces · p. 459
A deterrent that works removes its own evidence: the data it leaves behind say the low-risk class is safe, and a model retrained on them undoes the deterrent, while the allocation built from incentives does not move.
Proposition 11.11 · Two kinds of adaptive violator · p. 460
When violators differ, the cheapest disguise sets the floor once enough violators have it; below that, conceding the low-risk class to a few is cheaper than raising every floor for them.
Proposition 11.14 · Scores of black-box policies · p. 462
A replay of history rewards exactly the policies that adaptive violators exploit, and a policy that falls half a percentage point short of the certified rate in one class can still give away almost a hundred units of loss.
Proposition 11.15 · What an audit sample certifies · p. 463
An audit of one class can tell a rate with a safety margin from an exploitable rate in that class, at a price in sample size; it can never tell the exact certified allocation from its exploitable neighbours, and it says nothing about the classes it did not sample.
Proposition 11.18 · What overrides cost · p. 466
The same discretion that leaks deterrence when nobody accounts for it buys deterrence when the allocation is computed with it: an alarm that clears most clean consignments lets the budget cover far more of the flow.
A parallax in history
1755–1756 · Chapter 11 · p. 442
Give distant witnesses the same questions
Pombal's inquiry of 1756: thirteen fixed questions sent through the bishops to every parish.
AI-assisted screening and rapid mapping: faster chains that still cannot fill an unobserved place (Section 11.7 (p. 447)).
The people
Chapter 11 · Architecture of Decision Support
Herbert A. Simon
1916 – 2001
Trained in political science at the University of Chicago (doctorate, 1943), he began with studies of municipal administration that he later classed as operations research, taught at the Illinois Institute of Technology from 1942, and from 1949 helped to develop the Graduate School of Industrial Administration at the Carnegie Institute of Technology, now Carnegie Mellon University. In Administrative Behavior and later works he described decision-makers in organisations whose capacity for rational action is limited and who settle for a satisfactory alternative; “bounded rationality” and “satisficing” are his terms for this. With Charles Holt, Franco Modigliani and John Muth he developed linear decision rules for production and inventory planning; with Allen Newell, whom he met at RAND in 1952, he wrote early computer programs that simulated human problem solving. He shared the 1975 Turing Award with Newell and received the 1978 Nobel Memorial Prize in Economic Sciences for research on decision-making in economic organisations.
Main works
- Administrative Behavior (1947)
- Models of Man (1957)
- Planning Production, Inventories, and Work Force, with C. C. Holt, F. Modigliani and J. F. Muth (1960)
- The Sciences of the Artificial (1969)
- Human Problem Solving, with A. Newell (1972)
Chapter 11 · Architecture of Decision Support
Milind Tambe
living
Computer scientist; doctorate from the School of Computer Science at Carnegie Mellon University. At the University of Southern California, where he held the Helen N. and Emmett H. Jones Professorship in Engineering and was founding co-director of the Center for Artificial Intelligence in Society, his group built deployed scheduling systems on Stackelberg security games: ARMOR began randomising checkpoints and canine patrols at Los Angeles International Airport in 2007, and later systems were used by the US Coast Guard and the Federal Air Marshal Service, and against wildlife poaching. He is Gordon McKay Professor of Computer Science at Harvard, where he directs the Center for Research on Computation and Society, and director for “AI for Social Good” at Google. He is a fellow of AAAI and ACM and received the IJCAI John McCarthy Award.
Main works
- “Deployed ARMOR protection”, with J. Pita et al. (2008)
- “Playing games for security”, with P. Paruchuri et al. (2008)
- Security and Game Theory: Algorithms, Deployed Systems, Lessons Learned (2012)