Skip to content

Build1 publisher3 min readPublished

Identical report headers hid an eightfold gap between three runs of one model probe

One developer's three runs of the same model probe scored 67 percent and 8.3 percent under identical report headers. His fix changes what each audit field means, since a correct field still misleads when something outside the record sets it.

The Engineer · Build desk

Illustration accompanying Identical report headers hid an eightfold gap between three runs of one model probe

What happened

  • A dev.to author qualified his own earlier claim that ledger columns for actor, target, time, approver and rule version turn 'which rule allowed this' into a simple query.
  • Three runs of the same probe, same model and same binary, passed 67 percent of cases once and 8.3 percent twice, while every report header field matched.
  • Sampling defaults came from the model's config file, the model field held a tag instead of a digest, and context length and server version went unrecorded.

Compiled by The EngineerSomething wrong?How this is made

Why it matters

  • constraint A ledger that stores a model tag cannot show whether two automated actions ran on the same weights, so matching rows prove less about shared conditions than they appear to.
  • decision Choosing null over inferred values means older records will visibly say 'not recorded', and teams have to accept that gap instead of backfilling today's digest.
  • exposure Any field whose value is set outside the record, such as a pinned environment variable, stays correct on one machine and becomes misleading after a migration or config change.

The author wrote that the report could not tell him "whether I had one result and two outliers or two results and one accident" [15]. The blind spot is ordinary. His code never sent sampling parameters, so the effective values came from the model's own configuration file [6]. A re-pull of the same tag can replace that file [6]. The model column held the tag, so two runs on different weights read back identically [6].

The two readings differ by a factor of about eight [1]. The outlier run's scratch directory had already been cleaned up; housekeeping, for once, ran on schedule. He wrote: "Those four facts about it are permanently unrecoverable." [7]

His changes are to what a field means. When a provenance field cannot be read, the report records null, never an inferred value [8]. "An old report with no digest does not mean it ran the weights I have now, and filling that cell with today's digest would turn a gap into a false statement," he wrote [9]. A test enforces the rule. A report written before the change reads back as not recorded, so it cannot be mistaken for a clean run [8]. That test is the best engineering in the post, because a missing value becomes a state the reader can see. A second rule records what the system did. For context length that is the value the runtime granted, and a mismatch with the value sent is itself a finding [10].

Then he tested the header itself. Four runs under deliberately different machine conditions, one of them a cold start, showed zero drift across ten fields [11]. The context length matched because a server-side environment variable pinned it [12]. Three models with declared context lengths of 40960 and 262144 all read back the same effective number [12]. Those declared values differ by a factor of 6.4 [2]. Memory negotiation would not produce one number from that spread [12]. "So that field records a number and cannot record where the number came from," he wrote [16].

This case supports the claim that more columns will not close the gap. The field existed and its value was correct. I think a column for the value's origin would help only if something inside the record could read the variable that set it, and here the determining factor lived outside the record [13]. I'd expect the same failure in an approval ledger wherever a rule's outcome depends on configuration the ledger never reads. The author wrote that the ledger columns "are necessary and they are not sufficient" [2].

The claim holds less cleanly for the first incident. The digest and the server version were simply not recorded [6], and recording them means adding data to the row. The evidence is also narrow. It is one probe report, a measurement record, and the pinned-variable failure has appeared once, in one field [13]. The author calls the general form "a hypothesis worth testing rather than a law" [13]. The post does not include a case where an approval decision itself could not be reconstructed.

What to watch

  • Whether the author's per-field check turns up a second field that is present, correct and misleading, which would move the pinned-variable case past a single instance.
  • Whether gateway or ledger tooling starts recording model digests and runtime-granted values by default, in place of tags and requested values.
  • Whether an approval-ledger incident, not a measurement probe, shows a filled-in rule-version column that could not explain why an automated action was allowed.
Loading claim ledger
Loading source directory links
Loading share composer
Loading topic controls
Loading related stories