Equation 1 · Building a Deployment Safety System That Actually Holds
What does this equation mean?
Read the formula alongside the article passage below. Each part has a deeper page with its role in the equation, the supporting passage and nearby citations.
This equation states an equality: the expressions on both sides have the same value under the article’s assumptions. Read the equation part by part below; each part has a contextual explanation and a link to its mathematical background.
Read it piece by piece
=
The expressions on both sides represent the same quantity under the stated assumptions.
See an illustrated explanation →subtraction
Subtract the following term or group from the preceding one. A leading minus marks a negative quantity.
Denominator: TPR × pi + FPR × (1 - pi)
The complete quantity below the fraction bar; it must be nonzero for this division.
How to interpret it
With a fixed numerator, increasing a nonzero denominator reduces the fraction. Read it with the definitions, units, and assumptions supplied by the article.
What the article says around this equation
The cost is measurable and it is not small, even for a genuinely well-built classifier, and the reason is arithmetic rather than a flaw in any particular model. Suppose a classifier catches 98% of genuinely harmful requests and wrongly flags only 1% of benign ones — numbers that would read, on a slide, as a strong result. If the true base rate of harmful requests in real traffic is low, say one in two thousand, which is the ordinary case for a general-purpose product, precision — the share of flagged requests that are actually harmful — is . where and are the true- and false-positive rates and is the base rate. Plugging in = 0.98…
Read the full surrounding passage
The cost is measurable and it is not small, even for a genuinely well-built classifier, and the reason is arithmetic rather than a flaw in any particular model. Suppose a classifier catches 98% of genuinely harmful requests and wrongly flags only 1% of benign ones — numbers that would read, on a slide, as a strong result. If the true base rate of harmful requests in real traffic is low, say one in two thousand, which is the ordinary case for a general-purpose product, precision — the share of flagged requests that are actually harmful — is . where and are the true- and false-positive rates and is the base rate. Plugging in = 0.98 , = 0.01 and = 0.0005 gives a precision of roughly 4.7%: more than nineteen out of twenty flagged requests are false alarms, even though the classifier’s headline accuracy sounds close to perfect. This is not a defect specific to content classifiers — it is the same base-rate arithmetic that governs any low-prevalence screening problem — but it is routinely missed by teams who read a classifier’s reported accuracy as the whole story and are then surprised when a human review queue fills up almost entirely with benign traffic. The practical consequence is that a review queue’s staffing and a classifier’s threshold are not separate decisions; tightening one without budgeting for the other either buries reviewers in false alarms or leaves flagged traffic unreviewed, which defeats the point of flagging it.
Sources cited in the article section
These citations give research context. Read each source to check which claims it supports.
Return to Building a Deployment Safety System That Actually Holds