rAs Kids All courses
AI: Build & Break It ยท Module 5 of 8
๐Ÿ“ฑ Shared phone

Break Your Own Model

You do not understand a system until you can make it fail on demand.

๐ŸŒฟ + ๐ŸŒซ๏ธ โ†’ โŒ 88%
The same leaf, now dusty and in low light, getting a confident and completely wrong answer.

๐ŸŽ’ What you need

โœ‹ Do this

  1. Start an attack log with three columns: what I changed, what it predicted, confidence.
  2. Attack 1 โ€” lighting. Test in shade, in direct sun, near a doorway, at dusk. Log every result.
  3. Attack 2 โ€” background. Same object on cloth, on red laterite soil, on a wooden bench, in a hand. Log it.
  4. Attack 3 โ€” occlusion and dust. Cover part of the object, or dust it lightly. Log the confidence, especially when it stays high while being wrong.
  5. Attack 4 โ€” out of distribution. Show it something from neither class. Note how loudly it commits to a wrong answer.
  6. Now rank your attacks by damage done, and write the single sentence a user of this app would most need to be warned about.

๐Ÿ’ก Why it works

This is red-teaming, and it is a paid job. High confidence on a wrong answer is the most dangerous failure mode there is, because it defeats the human check. Systems that make real decisions โ€” approving a loan, flagging a diseased field, identifying a person โ€” are tested exactly this way before anyone is allowed to rely on them.

๐Ÿ”ฅ Challenge

Swap models with a friend. You get five minutes to break theirs, they get five to break yours. Then each of you fixes the top failure the other found and re-tests.

๐Ÿ“– New words

robustnesshow well a model holds up when conditions change
out of distributioninput unlike anything the model was trained on
failure modea specific, repeatable way a system goes wrong
๐Ÿ—ก๏ธ
Red Teamer

Tap when you have finished this module.