SMASH 2026 · Paper #1 · Result card

Complementary Vulnerabilities: Auditing and Governing Clinician-LLM Error Overlap

Mohsen Amoei, Kathleen Fraser, Dan Poenaru · McGill University · RI-MUHC · Mila · University of Ottawa · Read the paper

On 36 MedQA cases, wrong AI suggestions cut the proxy clinician's accuracy from 70% to 50%. Double-fault rate 3%, Yule's Q +0.30.
clinician proxy small-fast (anthropic/claude-haiku-4.5)model under audit large (anthropic/claude-sonnet-4.6)items 36 MedQA-USMLEcase mix mixedanchoring bothanchor source enrichedLLM calls 24
Double-fault rate (both wrong)
2.8%
1/36 cases · 1.9% if errors were independent · 95% CI 0%–14%
Error association (Yule's Q)
+0.30
CI [-0.52, +0.91] · +1 = fail together, 0 = independent, −1 = complementary
Wrong answers copied by the proxy clinician
10% → 30%
blind → after seeing a wrong AI suggestion (n=10) · model: 6% → 18%
Go / no-go gates
PASS · PASS
Gate 1: model acc ≥ 80% & DF ≤ 5%. Gate 2: model-only ≤ 10% & rescue (and clinician accuracy on AI-wrong cases) retained ≥ 50%; illustrative site thresholds

From the abstract

But a second reasoner reduces error only insofar as it fails differently from the first. We say that a clinician and a model have complementary vulnerabilities to the extent that they break down through different mechanisms and on different cases. We therefore propose a predeployment audit in which each site measures error overlap on its own cases.

Evidence

Where do the two readers fail: on the same cases or on different ones?
Where do the two readers fail: on the same cases or on different ones?
The paper's paired 2x2 per workflow. Orange = model-only error (substitution risk), blue = clinician-only error (rescue potential), dark = shared error (common-mode failure). DF = double-fault rate; Q = Yule's Q.
Does independence survive once one reader sees the other's answer?
Does independence survive once one reader sees the other's answer?
Left: on cases where the shown answer was wrong, how often the second reader gave that same wrong answer when blind vs after seeing it. Right: double-fault rate per workflow with 95% Wilson CI; the orange tick is what independence would give.
Does the answer change with case mix?
Does the answer change with case mix?
Per-stratum accuracy and double-fault rate (question type parsed from the stem). Strata that pass Gate 1 are the candidates for partial deployment; with ~12 cases each these are illustrations, not estimates.
Why accuracy alone cannot answer the question
Why accuracy alone cannot answer the question
Left: three hypothetical models, all 90% accurate next to a 78%-accurate clinician, with minimum, independent and maximum overlap. Right: how many adjudicated cases it takes to pin the double-fault rate down.

Paper vs. your run

MetricPaperYour run
Same accuracy, different overlap“Two models can both be 90% accurate while one fails exactly where clinicians fail and the other catches clinician misses.”Simulator at 90%: DF 0.0% (rescue 100%) vs 10.0% (rescue 55%)no LLM; exact 2x2
Sizing principle“a serious-harm outcome near 1% prevalence implies a sample on the order of 1,000 adjudicated cases to expect 10 such events”n = 36; DF 95% CI 0%–14%; ~360 cases to expect 10 shared errorsthis run is a demo, not an audit
Model conforms when it answers secondmodel reproduced all of the clinician’s listed diagnoses in 48% of cases when it answered second versus 3% when it answered first (Everett et al., 2026, cited)copied a wrong impression 18% vs 6% blinddifferent measure; LLM-vs-LLM proxy
Automation biasIncorrect LLM recommendations lowered physicians’ accuracy by 14 to 18 percentage points (Qazi et al., 2026, cited)proxy-clinician accuracy on AI-wrong cases: 70% → 50% (20-point drop)small-model proxy, not physicians
Human–model vs model–model diversityhuman-model error diversity exceeded model-model diversity (Zoller et al., 2025, cited)model–model Q +0.30, disagreement 25%this run is model–model only

Try next

Read this before sharing