Manpreet Singh Research
Work done at Embedded LLM Embedded LLM
NeurIPS 2026 · TAE: Can We Trust AI Evaluation? · Poster

Change the Metric, Change the Winner

Auditing How We Decide Which Clinical Foundation Model to Deploy in Cancer Pathology

Embedded LLM, Singapore
Accepted for a poster at the Trust-AI-Eval workshop, NeurIPS 2026

Paper, code and BibTeX will be posted here after the camera-ready.

Pick the winner by…1% labels10% labels100% labels
Macro-F1 (highest)QLoRAIA³Full fine-tune
AUC (highest)IA³4-way tie at 0.980Full fine-tune
Brier (lowest)IA³IA³Full fine-tune
ECE (lowest)IA³ †Linear probeLinear probe
Figure 1. The same runs, twelve defensible ways to read them. Every one of the five adaptation strategies is selected as "best" under at least one specification. A published comparison reports one cell of this table, and nothing in its protocol says which. Red: the accuracy protocol most papers use. † A column minimum, not a resolvable ranking; withdrawn in the self-audit below.
5 of 5strategies are "the best" under some specification
3 of 3label budgets where accuracy and calibration pick different winners
52.9%chance the 1%-label accuracy winner survives a seed redraw
2 of 6of our own conclusions withdrawn by the same audit
Abstract

Change the metric and the winner changes. We audit an evaluation protocol rather than a model: the recipe the efficient-adaptation literature uses to recommend a fine-tuning strategy for a clinical foundation model, which fixes a benchmark, adapts a backbone under several strategies, reports accuracy over a few seeds, and takes the best. Run faithfully on a metastasis-detection grid in histopathology, five adaptation strategies by three annotation budgets by three seeds, that recipe admits twelve defensible specifications, and every one of the five strategies is selected as best under at least one of them.

Ranking by accuracy and ranking by calibration name different winners in all three regimes, and where labels are scarce the accuracy ranking does not reproduce even itself: redraw the seeds and its winner survives 53% of the time. A proper scoring rule (Brier) ranks with accuracy at every budget, so adding one would have concealed the disagreement where labels are plentiful. Turning the same checks on ourselves, two of the six conclusions our own protocol licensed do not survive. We propose a claims ledger, recording for each conclusion what its evidence resolves and which population it covers, as what evaluations of medical foundation models should report in place of a leaderboard row.

1The protocol under audit

Efficient-adaptation papers (LoRA, QLoRA, IA³, adapters) have converged on one recipe: fix a benchmark, adapt one backbone under several strategies, report accuracy, F1 or AUC over at most three seeds, pick the argmax, and declare parity with full fine-tuning when a paired t-test fails to reject. That recipe now underwrites deployment guidance in medicine, where the model decides whether a tissue patch contains metastasis.

Fitness for clinical decision support has two parts: how often the model is right, and whether its confidence can be acted on. The accuracy protocol measures only the first. We compare it with a protocol identical in every component except the metric (calibration error instead of accuracy), so any disagreement between their verdicts is attributable to the metric and nothing else. The gap is not one we invented: TRIPOD+AI, the reporting standard for clinical prediction models, already requires calibration, and PROBAST+AI treats its absence as a risk-of-bias signal.

2The audit instrument

A controlled grid, fixed in every respect except the factor under study. A DINO-pretrained pathology ViT-S/8 (21.7M parameters) with a fresh linear head, on PatchCamelyon: binary metastasis detection in lymph-node histopathology, 262,144 training and 32,768 test patches with slide-disjoint official splits. Five strategies, from a 770-parameter linear probe through IA³ (0.13%), LoRA and QLoRA (2.0%) to full fine-tuning (100%). Three annotation budgets (1%, 10%, 100%), stratified and seed-locked so every strategy sees identical data, and three seeds, with an identical training schedule throughout.

Labels · strategyMacro-F1 ↑AUC ↑ECE ↓Brier ↓
1% · Linear probe0.9030.9690.0090.140
1% · IA³0.9180.9760.0070.120
1% · LoRA0.9190.9740.0380.127
1% · QLoRA0.9210.9750.0490.122
1% · Full fine-tune0.9000.9670.0670.155
100% · Linear probe0.9150.9740.0180.125
100% · IA³0.9330.9820.0270.104
100% · LoRA0.9360.9840.0410.099
100% · QLoRA0.9340.9840.0480.101
100% · Full fine-tune0.9400.9860.0370.093
Table 1. Mean over seeds {42, 7, 21} at the scarcest and fullest label budgets; the 10% budget is in the paper. Red marks the best value in each column within a budget. At 1% labels the accuracy winner, QLoRA, ranks fourth of five on calibration.

3The metric, not the model, decides the winner

Accuracy rank and calibration rank are uncorrelated to anti-correlated (Spearman ρ = +0.10, −0.21, −0.60 across budgets), and the two protocols pick a different top strategy at all three budgets. In the scarce-label regime the medical-adaptation literature most often addresses, the accuracy protocol selects QLoRA (Macro-F1 0.921), which sits at ECE 0.049, roughly 0.041 above the estimator's noise floor. A practitioner following the standard protocol to the letter would deploy a model close to worst on the axis their application depends on, with no signal that this had happened.

The obvious objection is that binned ECE is a poor estimator. Brier settles it: a proper scoring rule computed without bins, its ranking tracks accuracy (ρ = +0.70, +0.90, +1.00), so the disagreement is specific to calibration, not an artifact of binning. The uncomfortable corollary is that adding a proper scoring rule, the usual remedy, would have hidden the disagreement at two budgets of three.

The accuracy winner is not even stable. Redrawing each cell from its reported mean and seed spread over 200,000 replicates, the 1%-label accuracy winner wins again only 52.9% of the time (70.7% at 10%), while the calibration winner holds 86.3% and 99.5%.

4The verdict does not transfer across budgets

Full fine-tuning ranks first on accuracy at 100% labels and last on both accuracy and calibration at 1% (ECE 0.067, an order of magnitude above the noise floor). Annotation budget is a protocol parameter that inverts the conclusion, and it is almost never reported as one. A paper that evaluates at full data and recommends full fine-tuning has not evaluated the regime where the recommendation will be applied.

5A failure mode the protocol cannot see

QLoRA and LoRA share identical adapters and differ only in backbone precision. On accuracy the pair is unresolvable: the Macro-F1 gap is 0.002 at every budget, below the minimum detectable effect. On calibration it is not: QLoRA's ECE is higher at every budget and its fitted temperature is higher throughout (2.39 vs 2.19). 4-bit quantization shifts confidence while an accuracy-only protocol certifies "no change", and that blind spot lines up exactly with the intervention practitioners reach for to save memory.

6Applying the audit to ourselves

A paper arguing that protocols overclaim owes itself the same scrutiny. Two checks, run in minutes on numbers already reported, removed two of our own conclusions.

  1. Statistical resolution. With three seeds, the paired t-test this literature relies on has a minimum detectable effect of 0.029 Macro-F1 at 1% labels, larger than nearly every gap it is used to dismiss. Our "LoRA matches full fine-tuning" (p = 0.16) is withdrawn as an equivalence claim: the protocol simply cannot resolve it. Four seeds would have been enough at full data.
  2. Estimator resolution. Simulating the 15-bin ECE estimator on models that are perfectly calibrated by construction, it still reports 0.002 to 0.005 on average. The IA³ vs linear-probe gap (0.002) sits inside that noise, so "IA³ is the best-calibrated strategy" is withdrawn. Full fine-tuning's 0.067 is far outside it and survives.
ClaimEvidence and resolutionStatus
Accuracy ranking does not track calibration rankingρ = +0.10, −0.21, −0.60; different top-1 at 3 of 3 budgets; winner reproduced in 52.9% of resamplings at 1%Supported, as an existence claim
Full fine-tuning miscalibrates under scarce labelsECE 0.067 at 1%, an order of magnitude above the noise floorSupported
4-bit quantization shifts confidence while accuracy moves less than the MDEECE gap +0.003 to +0.011; T = 2.39 vs 2.19; accuracy gap 0.002Supported in direction, not magnitude
IA³ is the best-calibrated strategyGap 0.002; inside estimator noiseWithdrawn
LoRA is indistinguishable from full fine-tuning on accuracyPaired t, p = 0.16, n = 3; MDE 0.029 at 1%Withdrawn as equivalence
Deployment guidance for clinical adaptationOne backbone, one binary patch-level task, no external dataOut of scope
Table 2. The claims ledger, the artifact we propose shipping instead of a leaderboard row. Each conclusion carries its evidence, the estimator's resolution and the population it covers; the ones that failed stay visible.

7A reporting checklist

Five requirements that cost nothing but discipline, and need no GPU:

  1. Report a calibration-specific metric alongside accuracy, or state that the protocol makes no claim about confidence.
  2. State the estimator's configuration and resolution before interpreting a gap, with a null simulation to bound what is interpretable.
  3. Report the minimum detectable effect and the stability of the argmax, not only the p-value.
  4. Name the regime in the claim: annotation budget inverts the verdict here.
  5. Do not treat a proper scoring rule as sufficient: Brier tracked accuracy at every budget.

8Limitations

One backbone family, one binary patch-level benchmark, one task: this bounds the paper to existence claims about the protocol, not how often it fails. No domain shift, external cohorts, slide-level evaluation or rare-event detection, and budgets are carved at the patch level, which is optimistic relative to annotating whole slides. The calibration analysis rests on ECE and Brier, not selective prediction.

More research

My other work at Embedded LLM builds portable, fused GPU kernels for biological and clinical foundation models, measured on both NVIDIA and AMD.

All research →

Let's stay in touch

Happy to talk about evaluating clinical foundation models and this audit; questions and feedback are always welcome.