Table of Contents
Fetching ...

Auditing Fairness under Model Updates: Fundamental Complexity and Property-Preserving Updates

Ayoub Ajarra, Debabrota Basu

TL;DR

This work studies fairness auditing under adaptive model updates, introducing a PAC auditing framework powered by an Empirical Property Optimization (EPO) oracle. It shifts focus from reconstructing the original model to identifying a prospect class of property-preserving post-update models, and introduces the SP-dimension to quantify the complexity of admissible updates for Statistical Parity. The framework provides finite-class sample guarantees and, for infinite classes, demonstrates the need for SP-dimension-based analysis since infinite VC classes are not auditable under SP. Empirical results on COMPAS and Student datasets show accurate reconstruction of the prospect class and reliable SP estimates with favorable runtimes, illustrating practical applicability for ongoing fairness monitoring amidst model drift.

Abstract

As machine learning models become increasingly embedded in societal infrastructure, auditing them for bias is of growing importance. However, in real-world deployments, auditing is complicated by the fact that model owners may adaptively update their models in response to changing environments, such as financial markets. These updates can alter the underlying model class while preserving certain properties of interest, raising fundamental questions about what can be reliably audited under such shifts. In this work, we study group fairness auditing under arbitrary updates. We consider general shifts that modify the pre-audit model class while maintaining invariance of the audited property. Our goals are two-fold: (i) to characterize the information complexity of allowable updates, by identifying which strategic changes preserve the property under audit; and (ii) to efficiently estimate auditing properties, such as group fairness, using a minimal number of labeled samples. We propose a generic framework for PAC auditing based on an Empirical Property Optimization (EPO) oracle. For statistical parity, we establish distribution-free auditing bounds characterized by the SP dimension, a novel combinatorial measure that captures the complexity of admissible strategic updates. Finally, we demonstrate that our framework naturally extends to other auditing objectives, including prediction error and robust risk.

Auditing Fairness under Model Updates: Fundamental Complexity and Property-Preserving Updates

TL;DR

This work studies fairness auditing under adaptive model updates, introducing a PAC auditing framework powered by an Empirical Property Optimization (EPO) oracle. It shifts focus from reconstructing the original model to identifying a prospect class of property-preserving post-update models, and introduces the SP-dimension to quantify the complexity of admissible updates for Statistical Parity. The framework provides finite-class sample guarantees and, for infinite classes, demonstrates the need for SP-dimension-based analysis since infinite VC classes are not auditable under SP. Empirical results on COMPAS and Student datasets show accurate reconstruction of the prospect class and reliable SP estimates with favorable runtimes, illustrating practical applicability for ongoing fairness monitoring amidst model drift.

Abstract

As machine learning models become increasingly embedded in societal infrastructure, auditing them for bias is of growing importance. However, in real-world deployments, auditing is complicated by the fact that model owners may adaptively update their models in response to changing environments, such as financial markets. These updates can alter the underlying model class while preserving certain properties of interest, raising fundamental questions about what can be reliably audited under such shifts. In this work, we study group fairness auditing under arbitrary updates. We consider general shifts that modify the pre-audit model class while maintaining invariance of the audited property. Our goals are two-fold: (i) to characterize the information complexity of allowable updates, by identifying which strategic changes preserve the property under audit; and (ii) to efficiently estimate auditing properties, such as group fairness, using a minimal number of labeled samples. We propose a generic framework for PAC auditing based on an Empirical Property Optimization (EPO) oracle. For statistical parity, we establish distribution-free auditing bounds characterized by the SP dimension, a novel combinatorial measure that captures the complexity of admissible strategic updates. Finally, we demonstrate that our framework naturally extends to other auditing objectives, including prediction error and robust risk.
Paper Structure (44 sections, 23 theorems, 87 equations, 6 figures, 2 tables, 1 algorithm)

This paper contains 44 sections, 23 theorems, 87 equations, 6 figures, 2 tables, 1 algorithm.

Key Result

Lemma 0

Let $\epsilon, \delta \in (0,1)$, $m: (0,1)^2 \to \mathbb{N}$. Suppose that the following holds: Then, $\mathcal{A}$ is $(\epsilon, \delta)$-weak auditor for statistical parity with a sample complexity.

Figures (6)

  • Figure 1: Grey shapes represent objects unknown to the auditor, while blue shapes denote model classes known to the auditor. The model class under audit is unknown, whereas the strategic model class is given to the auditor. In weak auditing, the auditor seeks a model in the strategic class with the same group fairness value as the audited model. In strong auditing, the auditor aims to characterize the set of all models in the strategic class that share the same group fairness value.
  • Figure 2: A schematic of black-box auditing with prospects.
  • Figure 3: Illustration of SP dimension for the case of non-homogeneous classifiers in $\mathbb{R}^2$
  • Figure 4: Comparison of errors in statistical parity estimation and prospect ratio across different sample sizes.
  • Figure 5: Illustration of prospect class for linear classifiers. Group 1 (yellow) and Group 2 (green) represent the two protected groups. Any classifier in the region delimited by $f_1$ and $f_2$ has the same statistical parity value.
  • ...and 1 more figures

Theorems & Definitions (41)

  • Definition 1: Statistical Parity
  • Definition 2: Weakly $\mu$-auditable class
  • Definition 3: Strongly $\mu$-auditable class
  • Lemma 0: Strategic Lemma
  • Theorem 1: Agnostic weak auditability
  • Example 1
  • Definition 4: Group-Traces of a strategic class
  • Lemma 2
  • Definition 5: SP dimension
  • Example 2
  • ...and 31 more