Signed Compression Progress on a Sealed Audit is Goodhart-Resistant
TLDR
Proves that signed compression progress on a sealed audit is Goodhart-resistant, with telescoping reward and finite-audit bounds, validated by experiments.
Reasoning
The paper provides a rigorous theoretical proof and empirical validation on ARC-TGI, showing resistance to reward hacking. Strengths include clear formalization and mechanization; weakness is limited scope to sealed audits and specific model classes.
Read-first score
Read-first score 49.3, weighted from topical fit, citation, graph, method, reproducibility, and recency signals. Original total remains 17.
Field roles
Rank sensitivity
Stability: volatile; rank range: 402.
Keyword Scores
Deep Analysis
Innovations
- Formal proof that signed decrease of a fixed sealed-audit loss yields telescoping reward equal to endpoint audit improvement, making it Goodhart-resistant.
- Finite-audit bound with false-positive budget: cumulative empirical reward ≤ true audit improvement + 2Δ_n(F,δ), where Δ_n is the uniform audit deviation of the model class.
- Identification of failure modes: clipping, scoring on agent's own stream, high-capacity model on reusable panel, or neural class with vacuous Δ_n.
- Lean 4 mechanization of the structural core (telescoping, finite-audit bound, finite Gibbs, entropy floor).
- Experiment suite on ARC-TGI grid-transformation generators with adaptive holdout attacks.
Methodology
The paper provides a theoretical analysis defining intrinsic reward as the signed decrease of a fixed sealed-audit loss, proving a telescoping property that ties cumulative reward to endpoint audit improvement. For finite audit panels, a bound using uniform audit deviation Δ_n is derived. Experiments are conducted on ARC-TGI grid-transformation generators with adaptive holdout attacks to test signed progress against clip-farming, stream leakage, noisy-TV curiosity, and reusable audits.
Key Results
Finite-audit deviation scales as n^{-0.527}; signed progress resists clip-farming, stream leakage, and noisy-TV curiosity; naive reusable audits are exploitable by black-box scalar feedback, while standard release defenses keep the attack below the 2Δ_n threshold.
Limitations
- The guarantee disappears if progress is clipped, scored on the agent's own stream, exposed to a high-capacity model on a reusable panel, or applied to a neural class that makes Δ_n vacuous.
- The result relies on a sealed audit and uniform deviation bound; it may not hold for non-finite model classes or without proper audit mechanisms.