arXiv:2605.22964cs.LG2026-05

即使少量过参数化也使神经电路与Transformer的精确认证变得指数级困难。

Certification from Examples is Hard for Circuits and Transformers under Minimal Overparametrization

论文配图:Certification from Examples is Hard for Circuits and Transformers under Minimal Overparametrization
图 1 · 摘自论文原文
  • 通过增加一个门或常数级架构开销,使认证所需样本量指数增长。
  • 即便允许多项式错误数量,证书规模仍需指数级增大。
  • 真实训练的Transformer可能隐藏错误,难以被统一采样的样本检测到。

随着先进神经网络应用于推理与算法任务,精确性保障日益重要。然而,高平均准确率仍可能掩盖不一致行为。这促使了精确认证:确定能证明学习假设等于目标所需的最小标注样本集。我们发现,尽管某些假设易于认证,但即使是最小的过参数化也会使多个假设类别的认证指数级困难。对于深度≥2的阈值电路,增加一个额外门即可使证书大小随输入维度指数增长。我们对仅具常数架构开销的低精度Transformer也得到类似困难结果。我们还刻画了近似认证:允许多项式错误数量仍需指数级证书;而仅需常数相对误差的保证,可能隐藏指数级错误。实验上,我们研究了构造电路和训练的Transformer在识别二进制加法时的认证问题。构造电路验证了认证的指数障碍,而训练的Transformer分析表明,不完美模型可逃避大规模均匀采样证书候选集的检测。

原文摘要 · Abstract (English)

As state-of-the-art neural networks are deployed on reasoning and algorithmic tasks, exactness guarantees become increasingly important. However, high average-case accuracy can still mask inconsistent behaviors. This motivates exact certification, which asks for the smallest set of labeled examples needed to certify that a learned hypothesis equals the target. We show that while some hypotheses are easy to certify, even minimal overparametrization can make certification exponentially hard across several hypothesis classes. For threshold circuits of depth $\ge 2$, adding a single extra gate can force certificate sizes exponential in the input dimension. We show an analogous hardness result for log-precision Transformers with only constant architectural overhead. We also characterize approximate certification, showing that allowing only polynomially many mistakes still requires exponentially large certificates, whereas constant relative-error guarantees can hide exponentially many mistakes. Empirically, we study certification for constructed circuits and trained Transformers for recognizing binary addition. While the constructed circuits instantiate the exponential barrier for certification, the trained Transformer analysis shows that imperfect models can evade detection by large uniformly sampled certificate candidates.

神经网络认证过参数化Transformer复杂性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。