How do you balance a refusal rate that is too high against one that is too low?
Meridian Bank built the Meridian Assistant to answer account questions inside its banking app: balances, card disputes, password resets, and requests to move money. Farah Al-Rashid is the trust and safety product manager who owns the setting that decides when the assistant answers and when it says it can't help.
- Replace the single refusal threshold with a bar that reads the stakes of the request.Why: one number can't be right for a balance check and a wire transfer at once.
- Name the four things that raise the stakes: reversibility, money movement, model doubt, regulated advice.Why: without a named list, "high stakes" is just a feeling, and feelings drift.
- Optimize against the wrong-allow error for the high-stakes slice specifically.Why: that error is rare but it's the one that shows up weeks later as a fraud loss or a regulator's letter.
- Let the low-stakes slice run looser, even if that means a wrong answer sometimes.Why: a wrong balance figure costs a phone call. It doesn't cost anything money can't fix in a minute.
- Watch both cost lines every month, not just complaint volume.Why: complaint volume only shows the visible error. The hidden one needs its own count.
- Set a kill criterion in advance: one miss on a high-stakes request tightens that slice immediately.Why: a rule decided in a calm meeting beats a rule decided the day after an incident.
How to answer this, stage by stage
Six moves. Say them close to this, in your own words, and you'll sound like someone who has actually shipped a refusal setting before.
Let's learn
Every month, Meridian's branch call center used to field about 40,000 questions that had nothing wrong with them at all: "what's my balance," "can you reset my login," "is this charge mine."
The Meridian Assistant launched to take those off the phone lines. At first it refused about 3 requests in 100, mostly ones it genuinely couldn't parse. Customers who got refused just called the branch, same as always. It cost a few minutes and nobody minded much.
Then, one week, the assistant confirmed a change to a joint account's contact details for someone who wasn't actually on that account. Nobody had asked it to be extra careful about ownership changes specifically. It had just never been tested on one.
Compliance's fix was blunt: tighten the refusal threshold everywhere, for every request type, all at once. The refusal rate jumped from 3% to 22%.
Here is the turn. The extra refusals were not, on their own, the real problem. The real problem is that "everywhere" swept up balance checks and password resets right alongside wire transfers and ownership changes. Customers asking the easiest, cheapest questions started getting bounced to the call center too, and call volume climbed back toward where it had started before the assistant ever launched.
At its worst: the assistant became more expensive to run than not having it at all, while a genuinely risky request could still slip through, because the tightening was blunt instead of targeted.
What I would leave alone: the low-stakes tier doesn't need a strict bar even after the incident. A wrong balance figure or a failed password reset costs a phone call, and tightening that tier only pushes customers back to the call center for no safety gain at all.
The lesson: a refusal rate is not one thing to get right. It's a rate that should look completely different depending on what's actually being asked. Chasing one target number is the mistake, not whichever number you land on.
Now here is the same thing as a story
The short version above is what you'd say out loud in the interview. Read this one for how Farah actually found her way to the fix.
Farah Al-Rashid has run trust and safety for Meridian's digital products for five years. She built her reputation catching the small stuff, the setting nobody else thought to check, before it became a headline.
For the first eight months after launch, the Meridian Assistant was a quiet success. It handled about 78,000 requests a month, refused about 3 in 100, and the call center's easy-question volume dropped by nearly a third. Farah checked the refusal dashboard every Monday, saw the same small number, and moved on to other work.
Then came the joint-account incident. A caller had asked the assistant to update contact details on an account, and the assistant confirmed the change without checking that the caller was actually listed on that account. Nobody got hurt this time. But it could have gone the other way, and everyone in the room after the incident knew it.
The fix that got approved that same week was the simplest one anyone could agree on fast: raise the refusal threshold, for everything, until the model's confidence had to clear a much higher bar before it answered anything at all. Refusal rate went from 3% to 22% inside a month.
Farah didn't love it, but she signed off. It felt like the safe call.
Two months later, compliance ran its regular quarterly audit, pulling a random sample of refused and answered requests. The sample told two stories at once. Complaint volume about the assistant refusing simple, harmless requests had tripled. And buried in the "answered" pile, one more high-stakes request, a request to move funds between accounts under unusual timing, had gone through without the scrutiny it should have gotten. The blunt tightening had made the easy questions much worse and had not actually closed the gap on the hard ones.
We did not actually make the assistant safer. We made it worse at the easy 97% of its job, while the hard 3% stayed exactly as exposed as before.
Farah went back to the decision that had been made in that first meeting. Nobody had asked which requests actually needed the strict bar. They had asked how to make the number go up, fast, and a single global threshold was the fastest lever available.
She rebuilt the setting around those four questions instead of one number. Anything reversible, cheap, and not money-related got the loose bar back, close to the original 3%. Anything that moved money, changed ownership, or touched regulated advice got a bar strict enough that a single ambiguous case routes to a human, every time, no exceptions.
Overall refusal rate settled around 9%, but that number now means something completely different than it did before: almost nobody gets refused a balance check, and almost every wire transfer gets a second look.
What I would tell myself, a year earlier: a single refusal number was never the safety measure. It just felt like one, because it was the only number anyone was watching.
PICK, the bar Farah actually builtNot "how strict should we be." PICK forces you to say which error you're willing to eat, and for whom.
The recap, one line per letter: position is one bar replaced by a bar that reads the stakes, impact is a phone call against a fraud claim, cost asymmetry is visible-and-cheap against hidden-and-expensive, and kill criteria is a single high-stakes miss tightening that tier on the spot.
And if you want to be sure it really works, try it somewhere elseSame four letters, a city transit agency instead of a bank. Different flip family entirely this time.
Grayling Transit runs an AI assistant that answers rider questions about routes, delays, and fare disputes through the transit app. Dara Voss manages the assistant and owns its refusal setting.
Mapped onto PICK: position is that a single refusal bar for "how do I get from A to B" questions and "reverse this fare charge" questions is wrong for the same reason it was wrong at Meridian. Impact: a wrongly refused route question sends a rider to a paper schedule for two minutes. A wrongly approved fare reversal, done automatically without a stated reason, quietly drains real revenue and can't be told apart from a legitimate one until someone reconciles the books weeks later. Cost asymmetry: route refusals show up instantly in app-store reviews, fare reversal abuse shows up only in a monthly finance reconciliation, so the finance team was the last to know something was wrong. Kill criteria: if reconciliation ever finds fare-reversal abuse above a set dollar threshold in a month, every automatic reversal above ten dollars gets a human check, no exceptions, until the pattern is understood.
This time the flip underneath isn't a refusal-rate story at all. It's a substitution flip: once riders learned automatic reversals were easy to get, word spread, and people started requesting reversals for charges that were actually correct, because the easy path was right there and nobody was watching who used it.
Swap the trigger and it still runs.
Speed: an interviewer caps you at sixty seconds. Say "one bar can't fit every stake, so I'd split it by reversibility and whether money moves," and stop.
Cost: there's no engineering time this quarter for a tiered system. Say so honestly, and start with the smallest possible split: one strict rule for anything that moves money, everything else keeps today's bar.
The model gets better, for real: if accuracy improves across the board, that's still not a reason to merge the tiers back into one bar. A better model still deserves a stricter check on the handful of requests where being wrong is expensive.
Where people run it wrong.
They chase a single target refusal percentage instead of asking what that percentage is actually made of.
They tighten everything after one incident instead of tightening only the slice the incident actually came from.
They watch complaint volume as if it were the whole picture, when the expensive error doesn't generate a complaint at all.
How to use it live. If someone pushes you on "but what refusal rate is correct," don't give them a number. Ask them back which requests they're asking about, since the honest answer changes completely depending on what's actually being asked.
Flashcards (tap any card to flip it)
Check yourself Score: 0 / 0
Show hint
Show answer
Show hint
Show answer
Show hint
Show answer
Show hint
Show answer
Show hint
Show answer
Show hint
Show answer
"How do you decide which requests count as high stakes in the first place?" Response: four questions, named up front: can it be undone, does money move, how sure is the model, and is it regulated advice. Any request that trips one of those goes in the strict tier.
From answering questions to owning outcomes.
A live workshop where you ship a working AI agent, defend a launch decision, and walk away with a portfolio recruiters can't wave off, not just more questions to study.
- A live AI agent you actually shipped
- A launch decision you can defend under pressure
- An interview-ready portfolio, not more flashcards
More on Responsible AI as a product requirement
- #1 How do you turn a responsible AI principle into a testable product requirement?
- #2 What safety requirements belong in every AI PRD regardless of feature?
- #3 Describe how you would assess a feature for potential harm before building it.
- #4 Explain the difference between a safety issue and a quality issue.
- #5 How would you handle a feature that works well overall but poorly for one demographic?
- #6 What is a content policy and who should own it in a product organization?