Keep the rejection record
Retain the input, decision, rule or model reason, confidence, version, and timestamp long enough to audit safely.
A practical system for finding false negatives, reviewing the decisions automation hides, and turning human disagreement into measurable system improvement.
Get the field guideSee the method
False positives are visible because someone receives them. False negatives can sit in a discard pool forever. A complete quality system preserves both sides of the decision and gives people a fast, structured way to disagree.
Retain the input, decision, rule or model reason, confidence, version, and timestamp long enough to audit safely.
Review by risk, uncertainty, volume, novelty, and business value instead of taking an easy random slice.
Use structured human reasons to adjust thresholds, features, prompts, and routing through logged, reversible releases.
Name what the system decides, who can be harmed by a false positive or false negative, and which decisions require human review.
Make rejected items inspectable without exposing sensitive data or forcing reviewers into raw databases.
Separate low-confidence, rule-only, novel, high-value, and high-risk decisions so sampling reflects the real failure modes.
Capture Good, Maybe, or Bad plus a compact reason taxonomy that maps to something the system can change.
Track false positives and false negatives by bucket; do not hide everything behind one blended accuracy number.
Log the evidence, owner, version, expected effect, rollback trigger, and next review date for every threshold or rule change.
An internal TDAT pipeline looked clean until a manual spot-check found viable prospects in the machine-discarded pool. The response was a focused human review surface, structured reason tags, and a follow-up pattern loop that made confirmed verdicts reusable. The PDF turns that architecture into a vendor-neutral worksheet.
Supporting guidance: NIST AI RMF Core and NIST AI RMF Generative AI Profile. First-party implementation details are anonymized; no client, prospect, employee, or raw record is identified.