ConceptAdvancedQuality, Cost & Token Economics / Leading vs lagging indicators for AI / #23

How do you avoid alert fatigue with probabilistic metrics?

How do you avoid alert fatigue with probabilistic metrics? Commit to a side, then say who pays for each kind of wrong answer.

The direct answer
Widen the alert band instead of adding more alerts. A probabilistic drift score is noisy by nature, so a tight fixed cut-off manufactures false alarms out of ordinary market noise. Once the team learns to wave the whole page through, the one real alert gets waved through with it, and that is worse than a slightly wider band that occasionally catches a small problem a few hours late.
Do this, in order
  1. Replace the fixed drift cut-off with a volatility-adjusted band.Why: a band that widens on loud market days and tightens on quiet ones stops treating ordinary noise as an emergency.
  2. Reject the instinct to add more alerts or finer sub-thresholds.Why: more alerts on the same noisy signal multiplies the dismissal problem instead of solving it.
  3. Back-test the new band against a golden set of confirmed past incidents before it ships.Why: a probabilistic threshold needs an eval set behind it, not a guess about what feels calmer.
  4. Recalibrate the band every time the rebalancing model itself changes version.Why: a new model version shifts the whole distribution of normal behavior, so last quarter's band is calibrated to a model that no longer exists.
  5. Track how often the on-call analyst acknowledges an alert without opening it.Why: that number catches the fatigue building up weeks before it causes a real miss.
  6. Set a kill criteria that tightens the band again, on purpose, when the evidence says so.Why: without a stated trigger, a wide band is just a hope, not a decision anyone can defend.

How to answer this, stage by stage

Nobody is grading whether you know the word "threshold." They are grading whether you can name who eats the cost on each side and commit to one before you're asked to. Six moves get you there.

1
Ground it in one real product and person
Say it like this
"Let's make this concrete. Fenrose Capital runs an AI engine called Ballast that watches every client's portfolio and fires an alert when it drifts too far from its target mix. Camren Sundvik runs the on-call risk desk that reads those alerts."
Why this works
A tradeoff about "alerts" in the abstract invites a hedge. One system, one person, forces a real pick.
2
Say your structure out loud
Say it like this
"I'll run this through PICK. Pick a side first, say who feels each kind of wrong answer, find which cost is the one that actually breaks the system, then give the line that would make me tighten it back up again."
Why this works
Naming the method in one breath tells the interviewer you have a way to commit, not just an opinion.
3
Commit to the position before the reasoning
Say it like this
"My pick is: widen the band. Don't add more alerts, don't add a second review step, widen the actual threshold Ballast alerts on. I'll tell you why in a second, but that's the answer."
Why this works
"It depends" fails this question. Saying the pick first, with no hedge, is the whole point of PICK's P step.
4
Name who feels each kind of error
Say it like this
"Too tight, and Camren gets paged eighteen hundred times a week for drift that's just normal market noise. She learns to swipe them away without reading. Too wide, and a real problem, a smaller one, runs a few hours longer before anyone catches it."
Why this works
Naming both sides in the person's own units, pages and hours, stops the answer from floating at the level of "false positive rate."
5
Turn the asymmetry into the real reframe
Say it like this
"Here's the asymmetry. A slow catch on a small problem is bounded, you know roughly how bad it can get and it's recoverable. A team that's trained itself to dismiss alerts on reflex has silently turned the whole alerting system off, and you don't find out until the one day it mattered."
Why this works
This is the line the whole answer turns on. Skip it and "widen the band" sounds like a guess instead of a judgment call.
6
Close on the kill criteria, not a blank promise
Say it like this
"I'd tighten the band back up the moment a back-test against confirmed past incidents shows we'd have missed more than one in twenty of them, or the moment any account over two hundred fifty thousand dollars runs with live drift for more than a trading day. Short of that, the band stays wide."
Why this works
A number the pick would actually flip on is what separates a real decision from stubbornness.
If you remember one thing A dismissed alert and a missing alert cost the same thing. The team that widens its band on purpose, with a number that would make it tighten again, still has an alerting system. The team that lets its band stay tight until nobody reads it anymore has already lost one, they just haven't noticed the bill yet.

Let's learn

What happens when the thing meant to warn you gets so loud that everyone stops hearing it?

Fenrose Capital is an investing app that manages your money for you. Its engine, called Ballast, checks every client's portfolio against a target mix, say sixty percent stocks and forty percent bonds, and rebalances it when the real mix drifts too far away. Ballast doesn't just rebalance quietly. It also raises an internal alert any time a portfolio's drift crosses a line, so a human can glance at anything unusual before money actually moves.

Alerts fired per week, tight fixed band vs volatility-adjusted band
1,800 0 1,800 95 Tight 2pp fixed band Volatility-adjusted band
A fixed two-point drift cut-off fires about 1,800 times a week across Fenrose's forty thousand accounts. A band that widens with normal market noise and tightens back down when markets are calm cuts that to about 95, without changing what counts as a real problem.

The engine used to alert on a simple rule: if any account drifted more than two percentage points from its target mix, page the on-call risk desk. That rule made sense on a quiet day. Markets aren't quiet every day. On a day with a Fed announcement or a sharp rate move, ordinary portfolios drift two or three points just from normal price swings, nothing wrong with any of them.

A number that is right on a quiet day is wrong on a loud one, and markets are loud more often than the rule assumed.

Here is the turn. Say it plainly: the extra pages were never the real problem. The real problem is what Camren Sundvik, who runs the on-call risk desk, started doing about them. For the first few weeks she opened every alert and checked it. Within two months she was opening maybe one in twenty, and acknowledging the rest in a batch without reading them, because on most days, ninety-seven of every hundred pages were normal noise.

Knowledge spark: what is a volatility-adjusted band? Instead of one fixed number for everyone every day, the alert threshold moves with how much the market is actually swinging that day. On a calm week the band tightens back down. On a loud week, when normal accounts naturally drift more, it widens so the alert isn't judging every portfolio against a quiet day's yardstick.

At its worst, this looks like nothing at all, right up until the day it doesn't. Nobody at Fenrose saw a crisis building. They saw a risk desk staying on top of its queue, alerts cleared fast, no backlog. The real cost sat one layer down, in how carefully any single page was actually being read.

The decision that mattered Setting one fixed drift cut-off for every account, every day, regardless of how much the whole market was moving that day. It made sense when Ballast managed a few hundred accounts and someone could eyeball every page. It stopped making sense once the same rule was firing thousands of times a week against ordinary noise.

What I would leave alone: a portfolio drifting because the client added new money last week, or because a single stock in it had one unusually good day, doesn't need any of this. Those moves are already explained by an obvious event sitting right next to them in the log. The mistake was never having any alert. It was having exactly one alert setting for everything, whether the day was calm or the whole market was moving at once.

The lesson: a probabilistic signal needs a band that respects how much noise is normal that day, not a single line drawn once and left there. Draw the line too close to normal, and the team that reads it will teach itself, honestly and reasonably, to stop reading it.

Now here is the same thing as a story

The short version sits above. Read on for the Thursday a client's real problem sat inside 1,800 pages nobody was actually reading anymore.

Camren had run the risk desk at Fenrose for two years, and she was good at it. Give her an alert and she could tell inside thirty seconds whether it was a client who'd just added money, a stock having a wild day, or something Ballast itself had gotten wrong. She trusted her own read more than she trusted the dashboard, because the dashboard, at the start, was quiet enough to actually look at.

The first few months of Ballast's launch, the pager buzzed maybe forty times a week. Camren opened every one. Most were nothing. A few needed a quick note to a client's advisor. It felt like the system was doing its job, and so was she.

Fenrose grew fast that year. More accounts, more money moving, and markets got louder too, a string of rate decisions that had half of Wall Street's portfolios drifting on the same Tuesday. The fixed two-point rule didn't know any of that. It just kept counting drift the same way it always had, on a quiet March morning or a chaotic September one.

The habit that had kept Camren sharp thinned out in three beats. First, the page count crept from forty a week to four hundred, and she started skimming subject lines instead of opening every one. Second, she noticed that on the loudest market days, nearly everything in her queue was noise, so she started clearing those days in bulk, five or six clicks and the queue was empty. Third, a "mark all reviewed" button that engineering had added as a convenience, meant for the rare day the whole team was out sick, quietly became the thing she reached for most Fridays.

Hand sketched comparison diagram titled Two ways a rebalancing alert can be wrong. Left panel, a calm gauge icon, labeled band too wide, caption small drift runs a few hours longer then gets caught. Right panel, a tipped red scale icon, labeled band too tight, caption Camren learns to wave the whole page through, real drift hides in the noise.
One side of this tradeoff costs a few extra hours. The other side costs the whole habit of actually reading the page.

The trigger wasn't a crash. It was a Thursday like any other. A data feed that fed Ballast a client's bond holdings broke quietly overnight, and for three days the account's real allocation drifted eleven points away from target while the feed kept reporting stale numbers underneath it. Ballast alerted on it, correctly, twice. Both alerts landed inside a batch of 1,800 that week, a week the whole market had been jumpy anyway, and both got cleared with the rest.

A client called on the fourth day, confused about a statement that didn't match what her advisor had told her. That's how it surfaced. Not a dashboard. A phone call.

We did not lose one alert. We lost the habit of believing any of them.

Before anyone panicked, the team checked the boring explanation first: was the alert itself wrong, some bug in Ballast's drift math? It wasn't. The two pages that Thursday were accurate, clearly labeled, sitting in the log exactly where they should have been. The system had done its job. The queue around it had made doing that job cost too much attention to actually pay.

Fenrose's engineering lead pushed for the obvious fix first: add a second, stricter alert layer on top, so anything Ballast was really sure about got flagged twice. Camren pushed back. A second layer of alerts, on the same noisy signal, just means twice as many pages to learn to ignore. That idea got named and set aside, on purpose, before the real fix.

The real fix widened the band instead. Ballast's threshold stopped being a flat two points and became a number that moved with how much the broad market had swung that day, calculated off a rolling twenty-day volatility window. On calm weeks it tightened back down near two points. On loud weeks, when a two-point drift meant nothing, it opened up to four or five.

Confirmed real incidents caught, by band width tested against the golden set
100% 0% 2pp 4pp (shipped) 8pp 1pp
Tested against forty confirmed past incidents, an eight-point band would have missed too many real problems, the point where the pick should flip back. The four-point band that shipped still catches 96 percent of them, the amber line marks where it sits.

The old decision that set the two-point rule in place went back to Ballast's earliest days, when Fenrose had a few hundred accounts and markets moving in unison across the whole book was rare enough to ignore. Nobody wrote that rule down as temporary. Nobody revisited it once the account count, and the market's habit of moving as one, both grew past what a flat number could sensibly judge.

Run the same three days through the new band. On day one, the account's drift crosses the volatility-adjusted line the same as before, real and accurate. But that week the queue holds ninety alerts instead of eighteen hundred, and Camren is back to opening nearly all of them. She catches it same-day instead of on a phone call four days later. The data feed bug gets fixed by that afternoon. Three days of drift become a few hours.

One design asked the desk to read everything and made that impossible. The other asked it to read less, and made that actually work.

What I would tell myself, back when that two-point rule first shipped: a threshold that assumes every day is quiet will, on the first loud day, teach the person reading it that the alert means nothing. By the time you notice, the lesson has already been learned.

PICK, in one screen

This is a tradeoff wearing an operations question's clothes. Both a tighter band and a wider one produce a wrong answer sometimes, so PICK forces a side before it asks why.

P
Position. The pick, before the reasoning.
Widen the band to a volatility-adjusted threshold, not a fixed one. Stated first, no hedge, before a single reason is given.
I
Impact. Who feels each error.
Too tight: Camren, paged 1,800 times a week, learns to clear the queue without reading it. Too wide: a smaller real problem runs a few extra hours before anyone catches it.
C
Cost asymmetry. The one that actually breaks it.
A slow catch on a small problem is bounded, you can put a number on how bad it gets. Trained-in dismissal quietly disables the whole alerting system, and nobody knows until the day it mattered.
K
Kill criteria. What flips the pick back.
Tighten the band the moment a back-test against confirmed incidents misses more than one in twenty of them, or any account over two hundred fifty thousand dollars runs with live drift more than a trading day.

Two things worth naming directly, since this is where the real judgment sits. The rejected alternative was stacking a second, stricter alert layer on top of the existing one, so the surest cases got flagged twice. That got set aside on purpose: a second layer on the same noisy signal doubles the pages without fixing the reason Camren stopped reading them, it treats the symptom and leaves the actual cause, a threshold that doesn't know a loud day from a quiet one, untouched. The AI-specific failure worth naming by name is exactly the one this story lived through: a probabilistic signal treated like a deterministic one. Ballast's drift score is a confidence-weighted read on noisy market data, not a fact, and pinning a single hard cut-off to a number that moves for reasons having nothing to do with the client's account is what manufactured the false alarms in the first place. The guardrail is a rolling volatility-adjusted band, checked against a golden set of confirmed past incidents on a schedule, not a threshold set once and trusted forever. There's a real trade-off underneath the fix too, not a free lunch: a wider band means some real, smaller problems sit uncaught for a few extra hours before the next check catches them. Fenrose accepted that cost, on purpose, in exchange for a desk that still actually reads its queue.

And if you want to be sure it really works, try it somewhere else

Same four letters, a wind farm instead of a trading desk, and the same shape shows up with turbines instead of portfolios.

Cairnbrook Wind runs an AI system that watches vibration sensors on two hundred turbine gearboxes and pages a maintenance tech when a bearing's vibration signature drifts from its own healthy baseline. Neve Marlow leads the predictive-maintenance team.

P, position. Widen the vibration-alert band to account for normal wind-gust noise instead of adding a second sensor layer on every gearbox.
I, impact. Too tight, and techs get paged on every gusty afternoon, ordinary wind noise shaking readings past a flat cut-off, and learn to close tickets without a site visit. Too wide, and a bearing that's genuinely starting to fail gets caught a few days later than it could have been, on the next scheduled inspection instead of same-week.
C, cost asymmetry. A few extra days before a scheduled visit catches a wearing bearing is a bounded cost, the part isn't going to fail in a week. A crew that's learned to close every vibration ticket without checking is the same crew that closes the one ticket that was a real bearing about to seize, and that failure takes the turbine offline for a month instead of an afternoon.
K, kill criteria. Tighten the band back down the moment a back-test against confirmed past failures shows it would have missed more than one in twenty-five of them, or immediately, with no debate, for any offshore turbine where a failure means a boat crew and a multi-week repair window instead of a same-day site visit.

Where the extra catch-time actually goes, wide band vs tight band
30 days 0 3 days Wide band, caught next visit 25 days 4 days Tight band, ticket closed unchecked, seized
A wide band's worst case is a three-day wait for the next scheduled visit. A tight band whose alerts get closed on reflex stacks up: twenty-five days sitting in a dismissed queue, then four more days once vibration got bad enough to force an emergency shutdown, twenty-nine days of downtime instead of three.

Swap the trigger and it still runs.
Speed: an interviewer caps you at ninety seconds. Skip straight to the pick, state the position, name the asymmetry in one line, give the kill criteria, done.
Cost: engineering says a real volatility-adjusted pipeline is eight weeks out. Ship a coarse three-tier band, calm, normal, loud, off the current day's market data by hand, as the interim fix, not the tight fixed rule as a stopgap.
The model got better, for real: say Ballast's drift-scoring model itself gets more accurate this quarter. That's still not the same claim as "the band is calibrated." A better model can still sit behind a band tuned for the old model's noise level, and it needs its own recalibration pass, not a free pass because the underlying score improved.

Where people run it wrong.
They widen the band once and never back-test it against real incidents again, so a genuinely dangerous drift starts sliding through unnoticed.
They treat "fewer alerts" as the goal instead of "the real ones get read," and quietly trade away detection they never meant to trade.
They add a second review step instead of fixing the band, which just moves the fatigue to a different person on a different screen.

How to use it live. Open with the position, not the reasoning: "widen the band, don't add more alerts." That buys you the room to walk through the asymmetry calmly instead of talking yourself into a hedge halfway through.

Flashcards (click a card to flip it)

1 · THE FRAMEWORK
Which framework fits a "commit to a side" tradeoff question like this one?
Tap to flip
ANSWER
PICK: state the position first, name who feels each kind of error, find the real cost asymmetry, then give the kill criteria that would flip the pick.
2 · THE PEOPLE
Who is this answer about?
Tap to flip
ANSWER
Camren Sundvik, who runs the on-call risk desk at Fenrose Capital, an AI portfolio-rebalancing platform, watching alerts from its Ballast engine.
3 · THE REJECTED ALTERNATIVE
What fix did the team consider and set aside, and why did it lose?
Tap to flip
ANSWER
Stacking a second, stricter alert layer on top of the existing one. Rejected because doubling alerts on the same noisy signal doubles the pages without fixing why Camren stopped reading them.
4 · THE IMPACT
Name who feels each kind of error in this story.
Tap to flip
ANSWER
Too tight: Camren, paged 1,800 times a week, learns to clear the queue unread. Too wide: a smaller real drift problem runs a few extra hours before it's caught.
5 · THE ASYMMETRY
Which cost is the real one, and why?
Tap to flip
ANSWER
Trained-in dismissal. A slow catch on a small problem is bounded and recoverable. A desk that's learned to wave every page through has silently disabled the whole alerting system, and nobody finds out until it mattered.
6 · THE NUMBER
Fill in the blank: the fixed two-point band fired about ___ alerts a week. The volatility-adjusted band that replaced it fired about ___.
Tap to flip
ANSWER
1,800; 95. Nearly the same real incidents caught, at a nineteenth of the paging volume.
7 · THE KILL CRITERIA
What evidence would make you tighten the band back up, despite the fatigue risk?
Tap to flip
ANSWER
A back-test against confirmed past incidents missing more than one in twenty of them, or any account over two hundred fifty thousand dollars running with live drift for more than a trading day.
8 · CROSS-PRODUCT TRANSFER
Section 4 answers this same question again for a different product. Which product, and what's the parallel?
Tap to flip
ANSWER
Cairnbrook Wind's turbine vibration-alert system, led by Neve Marlow. Same PICK letters, a wide vibration band instead of a wide drift band, found the same way: the tight band's real cost is a crew that stops checking, not the alert itself.

Check yourself Score: 0 / 0

Multiple choice
1. What is the actual position taken in this answer?
  • A. Add a second, stricter layer of alerts on top of the existing ones.
  • B. Hire a second analyst to split the on-call load.
  • C. Widen the alert band to a volatility-adjusted threshold instead of a fixed cut-off.
  • D. Remove alerting from probabilistic metrics entirely.
Show hint
Check the direct answer at the top of the page.
Show answer
C. Widening the band, not adding more alerts, is the position stated first, before any reasoning.
True or false
2. True or false: the real problem in this story was that Ballast's drift alerts were often wrong.
  • True
  • False
Show hint
Check what the team found when they checked the two alerts that fired on the real incident.
Show answer
False. The two alerts about the real data-feed bug were accurate. The problem was that they landed inside 1,800 other pages that week, and Camren had stopped reading the queue closely enough to catch them.
Fill in the blank
3. Tested against the golden set of confirmed incidents, the band that shipped catches about ___ percent of real problems, at roughly ___ alerts a week instead of 1,800.
Show hint
Check the second chart in "Now here is the same thing as a story."
Show answer
96 percent; 95. Almost all the real catch rate, at a small fraction of the paging volume.
Short answer, name the rejected alternative
4. Why couldn't the team have just added a second, stricter alert layer instead of widening the band?
Show hint
Look at the paragraph right after the PICK grid, where the rejected alternative is named.
Show answer
Model answer: A second layer on the same noisy signal just doubles the number of pages Camren has to clear. It doesn't fix the reason she stopped reading them in the first place, a threshold that can't tell a loud market day from a quiet one. That's a dial, not a real fix.
Short answer, apply it yourself
5. Think of an app or tool you use that sends you notifications based on some kind of score or prediction (a fitness app, a spending app, a spam filter). What would "widening the band" look like for it, and what's the small cost you'd be accepting?
Show hint
Ask what counts as "normal" noise for that score, and what a slightly wider threshold would let through unflagged for a little while.
Show answer
Model answer: A spending app that pings you for every purchase over your daily average. Widening the band means only flagging purchases well outside your normal range for that day of the week, not just above a flat number. The cost: a slightly unusual but harmless purchase might not get flagged, and you notice it a few days later instead of instantly, which is fine, versus you muting the app entirely because it pings you for your regular coffee run.
True or false
6. True or false: once the volatility-adjusted band shipped, Fenrose never needed to check it against real incidents again.
  • True
  • False
Show hint
Check the priority list and the kill criteria stage of the walkthrough.
Show answer
False. The band needs recalibration every time Ballast's own model version changes, and a stated kill criteria, missing more than one in twenty confirmed incidents in a back-test, that would tighten it again on purpose.
Before you close the answer
Why this works
Tests whether you can commit to a side of a tradeoff and defend it with a real cost asymmetry, instead of hedging toward "add more monitoring." Most candidates answer alert fatigue by proposing more layers, which is exactly the instinct that makes fatigue worse.
Follow-up traps
"Isn't widening the band just hiding real problems for longer, on purpose?" Response: it's accepting a bounded, recoverable delay on the small stuff to keep the desk actually reading the page for the real stuff, and the back-test against the golden set is what keeps that delay from quietly growing past what's acceptable.

"What if the market stays loud for months, not just one bad week?" Response: the band is volatility-adjusted continuously, not set once, so a sustained loud stretch keeps the band wide the whole time, and the kill criteria, not a calendar, is what would bring it back down.
If pressed
The band isn't one number. It's built off a rolling twenty-day realized-volatility window per asset class, so a bond-heavy portfolio and a stock-heavy one get genuinely different bands on the same day, instead of one market-wide cut-off pretending every account moves the same way.
From U2xAI Academy

From answering questions to owning outcomes.

A live workshop where you ship a working AI agent, defend a launch decision, and walk away with a portfolio recruiters can't wave off, not just more questions to study.

  • A live AI agent you actually shipped
  • A launch decision you can defend under pressure
  • An interview-ready portfolio, not more flashcards
Know more