Fitness for purpose
Fitness for purpose means suitability for a particular task, population, and operating setting. Acceptance requirements follow the consequences of errors. A dataset can support historical analysis while being unsuitable for answering current questions.
Accuracy concerns correct values; validity concerns permitted formats and ranges. Completeness concerns required information, uniqueness unwanted duplication, and consistency compatible representations. Freshness concerns whether information remains timely. Coverage concerns represented cases. These properties can conflict: requiring every field may exclude useful records whose uncertainty should remain explicit.
| Use | Consequential defect | Acceptance requirement |
|---|---|---|
| Answer current policy questions | An obsolete rule appears authoritative. | Require the designated authority and a revision applicable now. |
| Analyze historical requests | Today's rule replaces the rule governing an earlier request. | Retain the applicable historical revision and its relationship to the request. |
| Fit a response model | Examples teach an unintended target. | Pair inputs with defensible target responses. Fitting adjusts model behavior from these examples. |
| Assess system behavior | Examples have already influenced system selection. | Reserve independent cases with supporting outcome evidence. |
Quality filters must preserve intended capabilities. In Krea's image curation, conventionally poor low-resolution CRT imagery could still serve a desired aesthetic. Removing it would reduce stylistic coverage rather than universally improve quality.
Collection, identity and permitted use
The unit of observation is what one record represents: a request, message, customer, or event. Provenance records origins, production activities, and responsible parties. Data lineage describes source-to-derived-data connections. The terms overlap; both help explain how a record came to exist.
A system of record is the designated authority for a business fact. A data contract states the producer–consumer agreement about identifiers, meanings, freshness, ownership, and accepted structure. Integration into existing work develops this distinction. Boundary validation catches contract violations before they propagate; it cannot establish factual correctness.
Trace content and decide inclusion
ExampleExtraction and permission decisions serve different roles.
Read the diagram as text
- Request source version.
- Export with metadata.
- Derived record.
- Use restrictions.
- Inclusion decision.
- Included for stated use.
- Withheld; owner review.
- Request source version → Export with metadata: Data: export.
- Export with metadata → Derived record: Data: extract.
- Derived record → Inclusion decision: Data: candidate.
- Use restrictions → Inclusion decision: Control: constrain use.
- Inclusion decision → Included for stated use: Eligible.
- Inclusion decision → Withheld; owner review: Ineligible or unresolved.
A useful collection record preserves more than the payload.
- Identity and context — Keep source identifiers, versions, metadata, permissions, and mappings to extracted records. Parsing and indexing must not silently discard this context.
- Separate clocks — Event time describes occurrence; processing time describes pipeline execution. They can differ, and arrival order need not match event order. Ingestion time names receipt at a defined boundary, so record it separately rather than assuming processing time means arrival.
- Collection limits — Record export selection rules, cutoff, known omissions, and upstream transformations. An export describes what the collection process captured, not everything that happened.
Governance assigns rules and responsibility for data use. Accessibility, suitability, and permission are separate. Carry purpose and handling restrictions into inclusion decisions; unresolved eligibility belongs with the accountable owner. ODRL represents permissions, prohibitions, and duties, but representation is not enforcement. Privacy and Data Governance covers the broader controls.
Inspection and evidence-preserving repair
Profiling summarizes dataset properties; inspection reads the records behind those summaries. Check types, ranges, missingness, dates, source counts, and document readability. An automatically inferred schema needs review: it can encode existing defects as expectations. A valid value can still be false, and an unusual value can be legitimate.
Identifier checks include uniqueness and referential integrity: references must resolve to the intended records. Check these at producer–consumer boundaries, alongside required fields and source information. A structurally acceptable handoff still needs evidence that its contents mean what the consumer expects.
Two inspection distinctions prevent common misreadings.
- Slices and denominators — A slice is a subset sharing a relevant property, such as language or source. Compare defective records with eligible inspected records within each slice; overall summaries can hide concentrated problems.
- Missingness and negatives — Unknown, unavailable, inapplicable, and negative mean different things. HL7, a healthcare standards organization, provides a concrete absence-reason vocabulary, including not asked, declined, masked, and unsupported. These explain missing content; none automatically supplies a negative outcome.
| Response | Before → after | Evidence to retain |
|---|---|---|
| Verified correction | An invalid value → a source-confirmed value | Original value where permitted, corrected value, supporting evidence, and correction method. |
| Normalization | Different encodings → a chosen representation | Transformation version and preserved distinctions. Unicode compatibility normalization can erase distinctions that canonical normalization retains. |
| Imputation | Missing value → an inferred replacement | Missingness reason, replacement method, and an explicit imputed flag. A plausible replacement is not an observation. |
| Quarantine | Unresolved meaning → withheld from a specified use | In this workflow design, preserve the issue, owner, and evidence required for reconsideration; withholding is not a factual correction. |
| Exclusion | Rejected record → absent from the usable set | Retain the exclusion rule and inspect rejected examples for unintended losses. |
Inspect transformation effects on counts, changed values, and affected slices. In the studied C4 web corpus, blocklist filtering removed benign scientific and identity-related material. A filter's apparent cleanliness can conceal a changed population.
Replayable operations and edit history preserve different evidence. OpenRefine can export reusable operations, but individual cell edits are not extractable as repeatable operations. Preserve both the executable recipe and permitted records of manual repairs; replay alone does not establish semantic correctness.
Duplicates, revisions and meaningful repetition
Deduplication detects and handles repetition under an identity rule. Content hashes find exact-content candidates. Normalized matches depend on the chosen transformation; near matches require a similarity rule.
Delivery copies versus distinct events
ExampleIdentical payloads need not share event identity.
Read the diagram as text
- Source S · event E1.
- Delivery A · text X.
- Delivery B · text X.
- Source S · event E2.
- Delivery C · text X.
- Source S · event E1 → Delivery A · text X: Delivered.
- Source S · event E1 → Delivery B · text X: Retransmitted.
- Source S · event E2 → Delivery C · text X: Delivered.
For and , two shingles overlap among four distinct shingles, giving . MinHash approximates this overlap at scale.
Thresholds select candidates, not equivalent records. A changed number or negation can matter despite high overlap. Keep revisions, source references, and duplicate groups separate; select representatives without erasing distinct events or material changes.
Detection cost and identity correctness are separate concerns.
- Stage expensive comparisons — Krea applies cheap hash-based filtering before embedding comparisons. Byte hashes identify candidates for exact-byte matching; perceptual hashes support approximate visual matching despite byte differences. Embeddings represent images as learned vectors whose similarity reflects the model's learned features. Visual or vector similarity can identify near-duplicates without establishing identical content or meaning; these methods are not interchangeable duplicate tests.
- Audit excluded candidates — Candidate generation reduces expensive comparisons. To detect missed matches, labeled inspection must include pairs outside the candidate set; checking only scored pairs cannot reveal what the first stage excluded.
Label meaning and observation limits
A label is a recorded target or judgment associated with an example. In supervised learning, targets define what the model learns to predict; Supervision, baselines, and loss explains that relationship. Target validity concerns whether the recorded target represents the intended task.
A proxy stands in for an intended outcome. In Zendesk's documented workflow, automated closure is a status transition, not customer-confirmed resolution. The figure separates that status from later evidence.
Closure and later evidence
ExampleThe original ticket stays closed when a follow-up appears.
T1 is currently solved.
Read the diagram as text
- Original ticket T1.
- Marked solved.
- Automatically closed.
- New follow-up T2.
- Original ticket T1 → Marked solved: Status event.
- Marked solved → Automatically closed: Automation.
- Automatically closed → New follow-up T2: Later reply creates.
- Solved. T1 is currently solved. Active: Original ticket T1, Marked solved. New: Original ticket T1, Marked solved.
- Closed. T1 is now closed; prior status remains history. Active: Original ticket T1, Marked solved, Automatically closed. New: Automatically closed.
- Follow-up. T2 is new. T1 remains closed. Active: Original ticket T1, Marked solved, Automatically closed, New follow-up T2. New: New follow-up T2.
A defensible label specification makes its claim inspectable.
- Meaning and applicability — Name the outcome or judgment, eligible cases, and supporting evidence. A recorded dispute status, for example, is not automatically the underlying truth of fraud.
- Timing and uncertainty — Preserve event time, first observation, assessment cutoff, evolving status, and required follow-up. Keep unresolved cases explicit.
- Observation versus policy — A detected feature and a policy violation can require separate labels. Duolingo's example treats a hearing aid as a positive detector signal but a permitted exception under its policy.
No observed outcome is not necessarily a negative outcome. If the target is an event within a fixed horizon, an event-free case observed for less than that horizon remains unresolved. This is right censoring: follow-up ends before the later outcome is known. Delayed outcomes and comparable populations connects such evidence to executions.
Acceptance also needs interpretation. A user can accept a suggestion and then rewrite or delete it. Preserve subsequent edits and overrides, while distinguishing error correction from changed intent or preference.
Annotation, disagreement and correction
Annotation assigns labels under a stated procedure. A scheme defines available labels; guidelines explain their application, including examples and counterexamples. Pilot small batches, overlap independent judgments, and inspect errors before scaling. Inter-annotator agreement measures consistency between labelers; adjudication resolves disagreements into an annotation when a final decision is appropriate.
| Cause | Appropriate response |
|---|---|
| Labeling mistake | Correct the label, record the reason, and inspect similar cases. |
| Unclear instructions | Clarify the guideline, pilot it again, and assess which earlier labels need revision. |
| Insufficient evidence | Seek the missing information or retain uncertainty instead of forcing a label. |
| Defensible subjective perspectives | Retain individual judgments and investigate systematic differences before aggregating. |
Retain permitted individual annotations, evidence, guideline versions, and correction history. Major instruction changes can require reannotation. Agreement and expert error audits serve different purposes: labelers can consistently apply an inappropriate rule.
For subjective tasks, majority voting can erase consistent minority interpretations. Preserving disagreement does not mean preserving objective mistakes; it keeps meaningful uncertainty available for investigation instead of manufacturing a single unquestionable “ground truth.”
Automated assistance introduces additional dependencies.
- Model-influenced approvals — When reviewers rubber-stamp model outputs, their approvals can return as misleading training labels. Requiring independent supporting evidence can expose disagreements that approval-only interfaces conceal.
- Shared criteria, separate validation — A rubric states judgment criteria. Snorkel describes using shared rubrics to compare human–human and human–model agreement. Automated labels still need auditing; detailed judge validation belongs in Evals.
Coverage, selection and sampling
The target population comprises intended cases; the sampling frame identifies accessible cases. Coverage errors include omissions, duplicates, and erroneous inclusions. Sampling bias is systematic mismatch caused by selection. More observations from the same restricted frame do not establish broader generalization.
Selection can determine which outcomes become visible. If only investigated cases receive definitive labels, labeled records describe that selected subset. The selective-labels literature demonstrates this mechanism for release decisions in criminal justice; transferring the reasoning requires identifying the decision that controls observation.
Selection changes coverage
Retained records cannot reveal every exclusion.
Read the diagram as text
- Target cases.
- Accessible frame.
- Outside collection.
- Eligible, cleaned, deduplicated.
- Excluded records.
- Labeled subset.
- Unobserved outcomes.
- Target cases → Accessible frame: Accessible.
- Target cases → Outside collection: Inaccessible.
- Accessible frame → Eligible, cleaned, deduplicated: Passes inclusion rules.
- Accessible frame → Excluded records: Fails inclusion rules.
- Eligible, cleaned, deduplicated → Labeled subset: Outcome observed.
- Eligible, cleaned, deduplicated → Unobserved outcomes: Outcome unavailable.
| Design | Purpose | Interpretation |
|---|---|---|
| Probability sample | Estimate defect frequency. | Selection probabilities must be known and nonzero. |
| Stratified sample | Inspect defined subgroups. | Sample within mutually exclusive groups; allocation affects proportions. |
| Targeted sample | Discover consequential failures. | Unknown inclusion probabilities limit population estimates. |
Suppose an audit samples half of a rare group but one-tenth of a common group. Their design weights are respectively 2 and 10: inverses of inclusion probabilities. Unweighted pooling overrepresents the rare group. Keep population, collected, and curated proportions separate; weights cannot recover a group absent from the frame.
Coverage can fail through both exposure and frequency. Instacart describes products unable to accumulate engagement evidence because they were not shown, alongside rare queries with too few observations. A more complex model did not remove those collection gaps.
Inspection budgets can serve complementary purposes.
- Find informative failures — Active learning directs review toward uncertain or disagreeing examples, where clarification may repair labels or reveal missing features. Such a queue supports improvement, not an unqualified prevalence estimate.
- Preserve frequency evidence — Keep a probability-based audit alongside targeted review. Record selection rules, known probabilities, exclusions, and sampling versions so later comparisons retain their meaning.
- Distinguish enrichment from deployment — Oversampling rare classes changes the training distribution. It can improve exposure during learning, but does not justify artificially balancing the deployment assessment or assuming calibrated probabilities.
Independent data boundaries
Leakage is information crossing a boundary that the intended assessment assumes is protected. Fitting data determines learned behavior; development data guides choices; protected assessment data tests the selected system. Repeatedly changing the system after inspecting final results converts that assessment into development.
| Claim | Data boundary |
|---|---|
| Performance on unseen people or sessions | Group related records before partitioning; different row IDs do not establish independence. |
| Performance on unfamiliar documents | Keep copies and related document families together when the assessment requires unseen content; exact-match removal misses other exposure. |
| Performance on later work | Use an explicit time boundary and information available at the decision point. A later-period split can still contain returning people. |
Fit once, apply across partitions
Protected data receives the rule but must not determine it.
Read the diagram as text
- Fitting records.
- Frozen preprocessing rule.
- Development records.
- Protected assessment records.
- Transformed development.
- Transformed assessment.
- Rejected: refit using assessment.
- Fitting records → Frozen preprocessing rule: Estimate.
- Frozen preprocessing rule → Transformed development: Apply unchanged.
- Development records → Transformed development: Input.
- Frozen preprocessing rule → Transformed assessment: Apply unchanged.
- Protected assessment records → Transformed assessment: Input.
- Protected assessment records → Rejected: refit using assessment: Forbidden fitting influence.
Point-in-time correctness concerns what could have been known when a decision was made. In a historical replay, a correction received afterward must not become an earlier input merely because it describes an earlier event. Preserve both the event's timing and evidence of availability; occurrence timestamps alone cannot establish availability.
Preprocessing can leak information without copying answers. Fit an imputation mean, scaling rule, or feature selector on fitting data alone, then apply the frozen transformation elsewhere. Deterministic record validation differs from estimating a transformation using protected data.
Data checks and outcome evidence answer different claims.
- Permitted reference information — Reference documents available during intended use can legitimately be inputs. Assessment-only answers exposed through fitting or selection undermine an unseen-answer claim. Define the information boundary before diagnosing contamination.
- Preparation failures — A retrieval test assuming usable passages already exist can miss parsing and chunking failures. Start some checks from raw documents to expose evidence lost before retrieval.
- Defective tasks — A low pass rate can reflect an impossible environment rather than useful difficulty. Separate task defects from capability failures before retaining hard examples.
Evaluation gathers evidence about behavior against intended success criteria. Additional filtering can fail to improve downstream behavior, as reported in particular reasoning-data experiments. Curation supplies documented inputs and protected boundaries; Evals develops the independent evidence needed for usefulness and release decisions.
Dataset releases and reproducible lineage
A snapshot identifies a particular data state. A manifest records membership. Iceberg implements these through explicit file metadata, rather than treating every file currently in a directory as part of a release.
A recipe and its recorded execution state are complementary. DVC separates pipeline declarations from lock records containing commands, parameters, dependencies, outputs, and content hashes. Reproduction also requires accessible artifacts and the relevant execution environment; a hash identifies content without making that content available.
Release identity and derivation
ExampleLineage supports reconstruction and impact analysis.
Read the diagram as text
- Source versions.
- Recipe and recorded decisions.
- Release R1 · explicit membership.
- Model artifact.
- Search index.
- Consumer export.
- Source versions → Recipe and recorded decisions: Used by.
- Recipe and recorded decisions → Release R1 · explicit membership: Produces.
- Release R1 · explicit membership → Model artifact: Used to fit.
- Release R1 · explicit membership → Search index: Used to build.
- Release R1 · explicit membership → Consumer export: Used to export.
| Record | Contents |
|---|---|
| Membership | Included items, source versions, and content identifiers. |
| Execution | Transformation versions, parameters, input and output hashes, environment, and manual-edit history. |
| Label decisions | Instructions, individual judgments where permitted, corrections, and unresolved cases. |
| Selection decisions | Exclusions, duplicate groups, sampling rules, and partition assignments. |
| History | Append new versions with creator information rather than silently replacing prior states. |
Datasheets for Datasets organizes purpose, composition, collection, processing, uses, and maintenance. Documentation should identify limitations and correction owners. Reproducibility remains subject to permitted retention; documenting a source does not authorize keeping it.
Data change and verified recovery
Distribution shift changes data patterns; Distribution shift and prediction coverage explains its predictive significance. Compare incoming batches and releases against explicit expectations. A distribution alert identifies a discrepancy, not necessarily a defect or degraded outcomes.
| Change | Investigation |
|---|---|
| Schema | Check changed fields and types against consumer contracts. |
| Meaning | Determine whether a category or relationship now expresses something different despite unchanged syntax. |
| Freshness | Check whether source updates reached consumers within their stated requirements. |
| Composition | Compare slice coverage, defects, duplicates, and inclusion decisions. |
| Labels | Identify corrected judgments and earlier batches affected by revised instructions. |
Correction does not complete recovery
ExampleConsumer verification requires evidence beyond a corrected release.
Identify the issue and affected consumer.
Read the diagram as text
- Dataset release R1.
- Consumer C.
- Issue detected.
- Affected use contained.
- Corrected release R2.
- Consumer recovery verified.
- Dataset release R1 → Consumer C: Previously consumed.
- Dataset release R1 → Issue detected: Affected by.
- Consumer C → Affected use contained: Use restricted.
- Issue detected → Corrected release R2: Addressed in.
- Corrected release R2 → Consumer recovery verified: Remediation input.
- Consumer C → Consumer recovery verified: Checks passed.
- Detected. Identify the issue and affected consumer. Active: Dataset release R1, Consumer C, Issue detected. New: Dataset release R1, Consumer C, Issue detected.
- Contained. Restrict affected use while investigating. Active: Dataset release R1, Consumer C, Issue detected, Affected use contained. New: Affected use contained.
- Corrected. R2 exists; consumer recovery remains pending. Active: Dataset release R1, Consumer C, Issue detected, Affected use contained, Corrected release R2. New: Corrected release R2.
- Verified. Relevant consumer checks now support resumption. Active: Dataset release R1, Consumer C, Issue detected, Affected use contained, Corrected release R2, Consumer recovery verified. New: Consumer recovery verified.
Assign an owner, investigate scope, contain unsuitable use, and identify affected consumers. Correction and recovery have separate completion conditions. Restoring a dataset does not automatically rebuild models, refresh indexes, or replace exports. Resume affected use only after the relevant checks; Failure localization connects this work to execution evidence.
Open questions
Filtering rare but useful material remains difficult because generic quality scores can penalize the intended capability. Progress requires demonstrating preserved rare-style usefulness while reducing actual defects, rather than reporting only higher filter scores.
Recovering evidence about selectively unobserved outcomes remains unresolved when earlier decisions determine which labels exist. Progress requires justified observations beyond the selected group, or explicit bounds on conclusions; reweighting observed cases alone may be insufficient.
Separating legitimate subjective disagreement from annotation error remains difficult when both produce inconsistent labels. Progress would identify stable perspectives while independently detecting mistakes, preserving useful distinctions instead of maximizing agreement alone.
Reproduction becomes difficult when required artifacts or environments are no longer available. Progress requires stating which results remain reconstructible and verifying reconstruction under actual access constraints, rather than treating saved hashes and recipes as sufficient.











