Short · AI security · 3 min read

Does a Second AI Model Count as an Independent Check?

A short from my book, Boxing Einstein. Adapted from Chapter 4, “Einstein Checks Einstein.” This is an adaptation, not a verbatim excerpt.

A second AI model can help check the first, but agreement alone doesn't establish independence. I would want to know whether the second system has a genuinely different route to the evidence, or is producing another account of the same potentially mistaken input. That is the central problem in Chapter 4 of Boxing Einstein: Einstein checking Einstein's work (Clark, n.d.).

Imagine two assistants assessing a hypothetical project proposal. One generates the recommendation. The other reviews a summary prepared by the first. Both approve. You have two outputs, but the second reviewer hasn't necessarily examined the information that could contradict the original recommendation. If the summary omits an important limitation, the second system could agree honestly and still miss the problem.

This isn't an argument against using AI in review. Assistance can make a large record easier to search, organize and question. The mistake is describing the number of reviewers as if it established how differently they could fail.

Trace the evidence before counting the opinions

I would begin with the claim being checked. Suppose the first system says a proposed change stayed within its authorization. What would establish that? A transcript describing compliant behavior may be relevant, but an independently retained record of the external action could answer a different and more important question: what actually changed?

The review should make those dependencies visible. Who collected the evidence? Could the system being reviewed change it? Does the second model receive the original material or only the first model's interpretation? If both systems rely on a disputed source, what additional observation could distinguish a shared mistake from a correct agreement?

A different model name can be useful information, but it doesn't finish that analysis. Separate products can still receive the same incomplete record. Conversely, a narrowly scoped check against an independently observed result can add value without requiring a second system that understands the entire task. Independence concerns the failure being examined, not a ceremonial distance between logos.

The best check may not be another model

For a numerical claim, a separate calculation might help. For an action, a record from the affected system might matter. For a proposed physical result, an appropriately designed measurement could be more informative than another explanation. Those are examples of possible verification paths, not a guarantee that any particular check will be sufficient.

The useful question is what could make the original claim wrong while leaving the proposed check looking reassuring. If the same missing evidence would fool both, the check has not resolved that uncertainty. If the additional observation would expose the error, it offers a reason for greater confidence in that bounded claim.

There is also a cost. Separate collection, specialist review and additional testing can consume money and time. I wouldn't impose the most expensive form of independence on every low-consequence suggestion. I would spend it where a mistaken conclusion could authorize harm that the institution can't readily contain or reverse.

Sometimes no feasible check settles the issue. The honest result is then an unresolved claim with restricted consequences, rather than another round of model opinions until one produces a reassuring answer. A review system needs somewhere to put “not established” without automatically translating it into approval or permanent rejection.

AI can be part of the audit. It shouldn't quietly become the sole source of the action, the record and the certificate that everything went well. Read about Boxing Einstein for the wider argument about preserving evidence outside the system's account of itself.

References

  • Clark, L. (n.d.). Boxing Einstein (Chapter 4, “Einstein Checks Einstein”) [Unpublished editorial manuscript, r116].