Paper: 2607.09649 Authors: Mohadeseh Mollapour, Koorosh Aslansefat, Zeinab Dehghani, Bhupesh Kumar Mishra, Tejal Shah, Zhibao Mian Categories: cs.AI
The Gap
Concept-based explainable AI (think TCAV, Concept Bottleneck Models, or the wave of methods that decompose neural network reasoning into human-understandable concepts like “vessel tortuosity” or “optic disc pallor”) has made great strides in making models legible. You can now ask a medical imaging model “why did you flag this retina?” and get back something like “because of concept X with confidence 0.8.” That’s a huge improvement over opaque saliency maps.
But here’s the problem nobody’s really solved: just because a model says its reasoning involves concept X doesn’t mean concept X is actually driving the decision. Concept-level explanations can be plausible-sounding nonsense. SMILE (the predecessor) audits feature-level attributions by perturbing inputs and checking whether attribution maps behave consistently. It’s a solid idea. But it operates at the pixel/region level — it tells you whether your heatmap is reliable, not whether the *concept it claims to detect is the real causal story.
So the gap is: we have increasingly sophisticated concept-based XAI methods, but no model-agnostic, perturbation-based way to independently audit concept-level reliability. This paper fills that gap.
Concept-based XAI methods explain via
human-understandable concepts
|
v
But: concept outputs are treated as
ground truth -- no independent audit
|
v
Prior auditing (SMILE) works at
feature/pixel level, not concept level
|
v
[This paper: ConceptSMILE]
Extend perturbation auditing to concepts
|
v
Perturb regions --> measure concept shifts
--> fit surrogate --> score reliability
|
v
Result: concept reliability varies across
concepts and pathways (MedSAM vs VLM)
The Increment
One sentence: Before this paper, you could generate concept-based explanations and hope they were faithful; after this paper, you have a model-agnostic auditing framework that stress-tests concept explanations by perturbing inputs and measuring whether concept responses behave consistently.
Core Mechanism
ConceptSMILE works in five stages, flowing from raw input perturbation to a multi-dimensional reliability score.
Stage 1: Perturbation. Given an input image, the framework identifies the input regions that correspond to detected concepts (e.g., retinal vessels, optic disc). It then applies systematic perturbations to these regions — masking, noise injection, or occlusion — to create modified versions of the image.
Stage 2: Concept-Response Measurement. For each perturbed input, the framework runs the concept extraction pipeline (e.g., MedSAM segmentation or VLM semantic extraction) and records how each concept’s activation score shifts. This produces a dataset of (perturbation, concept-shift) pairs.
Stage 3: Locality Weighting. Not all perturbations are equally informative. The framework applies locality weighting — perturbations closer to the concept’s spatial region of interest get higher weight in the analysis. This ensures the audit focuses on whether the concept is locally sensitive to relevant inputs, not just globally correlated.
Stage 4: Surrogate Fitting. An XGBoost model is fitted on the weighted perturbation-shift data to approximate the local concept behavior. This surrogate acts as a simplified, interpretable model of how the concept extraction actually responds to input changes.
Stage 5: Reliability Scoring. The surrogate and original concept outputs are evaluated across five dimensions: attribution accuracy (does the concept attribution match ground truth?), surrogate fidelity (how well does the XGBoost approximate real behavior?), faithfulness (does changing the concept-relevant region actually change the concept?), stability (is the concept output consistent under minor perturbations?), and consistency (do related concepts behave coherently?).
Input Image
|
v
[Region Identification]
| \
v v
[Perturbation] [Original Concept Extraction]
| |
v v
[Perturbed Concept Extraction]
|
v
[Concept-Shift Measurement]
|
v
[Locality Weighting]
|
v
[XGBoost Surrogate Fitting]
|
v
[Reliability Scoring across 5 dimensions]
|
v
Report: attribution accuracy, fidelity,
faithfulness, stability, consistency
The Structural Metaphor: The Insurance Auditor
Imagine you’re an insurance company reviewing a client’s financial disclosures. The client (the XAI method) tells you “I’m solvent because of these five assets” — that’s the concept-based explanation.
ConceptSMILE is the auditor who doesn’t just read the disclosure. The auditor pokes at the books. They freeze one asset account (perturbation), watch whether the reported solvency shifts (concept-response measurement), and weight their attention toward assets that are actually material to the bottom line (locality weighting). They then build a simplified model (the XGBoost surrogate) of how the client’s reported financial health actually responds to changes in individual accounts. Finally, they score the disclosure on multiple dimensions: Are the reported asset values accurate? Does the simplified model match the real behavior? If you remove a claimed asset, does the picture actually change? Is the disclosure stable if you ask the same question twice? And do related accounts tell a consistent story?
The key insight is the same in both domains: you don’t trust disclosures at face value — you stress-test them with perturbations and measure whether the stated story holds up under scrutiny.
Key Concepts
-
Concept Attribution Accuracy: Think of this as “does the spotlight actually shine where the story says it shines?” When a model says “I detected vessel tortuosity in this region of the retina,” attribution accuracy asks: if you look at what the model actually responds to spatially, does it match that region? It’s like a witness pointing to a suspect in a lineup — the question isn’t just whether they point, but whether they’re pointing at the right person for the right reason. ConceptSMILE measures this by comparing the spatial sensitivity of concept extraction against ground-truth segmentations.
-
Surrogate Fidelity (R-squared): When a concept extraction method is complex (like a large segmentation model), it’s hard to reason about its behavior directly. So ConceptSMICE fits a simpler model — an XGBoost — on perturbation data to approximate how the real method behaves. Surrogate fidelity measures how good that approximation is. An R-squared of 0.85 means the XGBoost captures 85% of the variance in the real concept method’s responses. High fidelity means the audit conclusions are about the real method, not about a bad approximation.
-
Concept Faithfulness: This is the “does it actually matter?” test. If you perturb the region where a concept is supposedly detected, does the concept score actually change? If the model claims “vessel tortuosity drove my decision” but masking the vessel region doesn’t change the tortuosity score, the explanation is unfaithful. It’s the difference between someone saying “I stopped because of the red light” versus actually having stopped at the red light. Faithfulness is the causal link between the stated reason and the actual behavior.
Framework Shift
Before (mainstream): After (this paper):
+--------------------------+
| Independent Audit Layer |
+--------------------------+
| |
XAI Method --> Concept Explanation --> v v
(trusted at face value) Perturbation Reliability
Measurement Scoring
| |
v v
Surrogate Faithfulness
Fitting Stability
Consistency
Approach: explanation --> accept Approach: explanation --> test
From accepting concept explanations as ground truth to stress-testing them with perturbation-based auditing, the core shift is treating concept-based XAI outputs as claims to be verified rather than facts to be trusted.
Expert Assessment
Problem choice: This is a real and underexplored gap. The XAI community has been so focused on generating better explanations that the verification problem has lagged behind. As concept-based methods (CBMs, TCAV, prototype networks) get deployed in safety-critical domains like medical imaging, the question “is this explanation actually reliable?” becomes urgent. The timing is right — we’ve spent years building concept XAI methods and now need the quality assurance layer.
Method maturity: The approach is clever in its modularity — extending SMILE’s perturbation logic to concepts is a natural but non-trivial extension. However, the reliance on XGBoost as the surrogate raises questions: why XGBoost specifically? Would a simple linear model or a small neural network yield different fidelity scores? The locality weighting scheme is sensible but the paper could be more rigorous about sensitivity analysis on the weighting parameters. This is more “well-motivated engineering” than “surprising theoretical insight.”
Experimental integrity: The evaluation on retinal fundus images is appropriate and the comparison between MedSAM (spatial) and VLM (semantic) concept pathways is genuinely informative — showing that different concept types have different reliability profiles is a useful finding. The R-squared numbers (0.85 for MedSAM) are solid. One concern: the evaluation uses a single medical imaging domain. How sensitive are the reliability metrics to domain shift? The paper would be stronger with results on at least one non-medical domain to establish generalizability.
Writing quality: The paper reads clearly in its method description but the related work section is thin — it jumps from SMILE to the application without adequately positioning against other XAI auditing approaches (e.g., sanity checks for saliency maps, faithfulness metrics from the gradient-based literature). Section 4 (Results) would benefit from more qualitative examples showing *why certain concepts scored poorly on faithfulness — right now it’s mostly aggregate numbers without the storytelling that makes the paper memorable.
Verdict: weak accept — The gap is real, the method is reasonable, and the finding that concept reliability varies by pathway is genuinely useful. But the evaluation is narrow (one domain, one comparison) and the method’s novelty is incremental (extending SMILE to concepts rather than a fundamentally new framework).
Takeaways
Three things you can steal from this paper:
-
The auditing mindset for XAI: The most transferable idea is treating concept-based explanations as *claims to be verified, not outputs to be accepted. If you’re building any concept-based system (not just medical imaging), you can adopt this stress-test-then-trust workflow. Perturb your inputs, measure concept sensitivity, check for consistency.
-
The five-metric reliability scorecard: Attribution accuracy, surrogate fidelity, faithfulness, stability, and consistency form a useful vocabulary for evaluating *any explanation method. You don’t need to use ConceptSMILE’s specific implementation — you can adopt the metric framework and apply it with simpler perturbation experiments in your own domain.
-
XGBoost as an explanation auditor: Using a simple surrogate model to approximate complex concept extraction behavior, then auditing the surrogate rather than the complex model directly, is a practical engineering pattern. It’s much easier to reason about an XGBoost’s behavior than a large segmentation model. This idea transfers to any situation where you need to verify a complex system’s explanations.
论文: 2607.09649 作者: Mohadeseh Mollapour, Koorosh Aslansefat, Zeinab Dehghani, Bhupesh Kumar Mishra, Tejal Shah, Zhibao Mian 分类: cs.AI
缺口
概念级可解释AI(如TCAV、概念瓶颈模型等)近年来进展迅速,能把模型推理分解成人类可理解的概念——比如”血管迂曲度”或”视盘苍白”。模型现在可以告诉你:“我标记这张眼底图是因为概念X,置信度0.8。”
但一个关键问题长期被忽略:模型声称其推理涉及概念X,不代表概念X真的是决策的驱动因素。 概念级解释可以听起来很合理,实则是”合理但不真实的废话”。此前的SMILE框架通过扰动输入来审计特征级归因的可靠性,是个好思路。但它操作在像素/区域级别——它能告诉你热力图是否可靠,却无法告诉你热力图背后的概念故事是否可信。
因此,缺口在于:概念级XAI方法越来越复杂,却没有一个模型无关的、基于扰动的方法来独立审计概念级别的可靠性。本文填补了这个缺口。
概念级XAI方法用人类可理解的
概念来解释模型决策
|
v
但:概念输出被当作事实接受
没有独立审计机制
|
v
此前的审计方法(SMILE)作用于
特征/像素级,而非概念级
|
v
[本文: ConceptSMILE]
将扰动审计扩展到概念级
|
v
扰动区域 --> 测量概念响应偏移
--> 拟合代理模型 --> 评估可靠性
|
v
结论:概念可靠性因概念类型和
提取路径而异(MedSAM vs VLM)
增量
一句话: 这篇论文之前,概念级解释只能”生成然后祈祷”;之后,你有了一个模型无关的审计框架,能通过扰动输入、测量概念响应偏移来独立检验概念解释是否真的靠得住。
核心机制
ConceptSMILE分五个阶段运作,从输入扰动到多维度可靠性评分。
第一阶段:扰动。 给定一张输入图像,框架先识别与已检测概念对应的输入区域(如视网膜血管、视盘)。然后对这些区域施加系统性扰动——遮挡、噪声注入或区域替换——生成图像的修改版本。
第二阶段:概念响应测量。 对每个扰动后的输入,运行概念提取流程(如MedSAM分割或VLM语义提取),记录每个概念的激活分数如何变化。这产生了一组(扰动,概念偏移)数据对。
第三阶段:局部性加权。 不是所有扰动都同样有信息量。框架对空间上更接近概念感兴趣区域的扰动给予更高权重,确保审计聚焦于概念是否对相关输入具有局部敏感性,而非仅仅是全局相关。
第四阶段:代理模型拟合。 用XGBoost在加权扰动-偏移数据上拟合一个代理模型,近似概念提取的局部行为。这个代理模型充当概念提取方法实际行为的简化、可解释版本。
第五阶段:可靠性评分。 从五个维度评估代理模型和原始概念输出:归因准确性(概念归因是否匹配真值?)、代理保真度(XGBoost多好地近似了真实行为?)、忠实性(改变概念相关区域是否真的改变了概念?)、稳定性(概念输出在轻微扰动下是否一致?)、一致性(相关概念的行为是否协调?)。
输入图像
|
v
[区域识别]
| \
v v
[扰动生成] [原始概念提取]
| |
v v
[扰动后概念提取]
|
v
[概念偏移测量]
|
v
[局部性加权]
|
v
[XGBoost代理模型拟合]
|
v
[五维度可靠性评分]
|
v
报告:归因准确性、保真度、
忠实性、稳定性、一致性
核喻:保险公司审计师
想象你是一家保险公司的审计师,正在审查一位客户的财务报表。客户(XAI方法)告诉你”我有偿付能力,是因为这五项资产”——这就是概念级解释。
ConceptSMILE就是那个不只读报表、而是去捅账本的审计师。审计师冻结一个资产账户(扰动),观察报告的偿付能力是否发生变化(概念响应测量),把注意力集中在那些对底线真正重要的资产上(局部性加权)。然后,审计师建立一个简化模型(XGBoost代理),描述客户的报告财务状况如何响应单个账户的变化。最后,从多个维度打分:报告的资产价值准确吗?简化模型能匹配真实行为吗?如果移除一项声称的资产,整体画面是否真的变了?报表在重复询问下是否稳定?相关账户的说法是否一致?
这个比喻承重的核心是:无论是财务报表还是AI解释,你都不能只听故事就信——你必须通过扰动来压力测试,看叙事在质疑下是否站得住脚。
关键概念
-
概念归因准确性: 可以把它想成”聚光灯是否真的照在了故事说的地方”。当模型说”我在眼底图的这个区域检测到了血管迂曲”,归因准确性问的是:如果看模型实际在空间上响应的区域,是否匹配?就像目击者在指认嫌疑人——问题不只是他指了没有,而是他是否出于正确的理由指向了正确的人。ConceptSMILE通过比较概念提取的空间敏感性与真值分割来测量这一点。
-
代理保真度(R平方): 当概念提取方法很复杂(如大型分割模型)时,直接推理其行为很困难。ConceptSMILE用XGBoost拟合扰动数据来近似真实方法的行为。保真度衡量这个近似有多好。R平方0.85意味着XGBoost捕捉了真实概念方法85%的方差。高保真度意味着审计结论是关于真实方法的,而不是关于一个糟糕的近似。
-
概念忠实性: 这是”它真的重要吗?“的测试。如果你扰动概念声称被检测的区域,概念分数是否真的变了?如果模型声称”血管迂曲驱动了我的决策”,但遮挡血管区域后迂曲分数没变,那这个解释就不忠实。这是声称的原因和实际行为之间的因果联系——区别在于”我因为红灯停了”和”我真的在红灯那里停了”。
框架转变
之前(主流方法): 之后(本文方法):
+---------------------------+
| 独立审计层 |
+---------------------------+
| |
XAI方法 --> 概念解释 --> v v
(被当作事实接受) 扰动测量 可靠性评分
| |
v v
代理拟合 忠实性
稳定性
一致性
模式:解释 --> 接受 模式:解释 --> 验证
从将概念解释当作事实接受,到用基于扰动的审计来压力测试它们,核心转变是将概念级XAI输出视为待验证的声明而非可信的事实。
专家评审
选题眼光: 这是一个真实且未被充分探索的缺口。XAI社区一直聚焦于生成更好的解释,验证问题相对滞后。随着概念级方法被部署到医学影像等安全关键领域,“这个解释真的可靠吗?“这个问题变得紧迫。时机恰当——我们花了多年构建概念XAI方法,现在需要质量保证层。
方法成熟度: 方法的模块化设计是聪明的——将SMILE的扰动逻辑扩展到概念级是自然而有价值的延伸。但依赖XGBoost作为代理模型引发了疑问:为什么是XGBoost?简单线性模型或小型神经网络会不会给出不同的保真度分数?局部性加权方案是合理的,但论文可以对加权参数做更严格敏感性分析。整体来看,这更像是”动机良好的工程”而非”令人意外的理论洞见”。
实验诚意: 在视网膜眼底图像上的评估是合理的,MedSAM(空间)和VLM(语义)概念路径的比较确实有信息量——展示不同概念类型有不同可靠性配置是有用的发现。R平方数字(MedSAM 0.85)扎实。一个担忧是:评估只用了一个医学影像领域。可靠性指标对领域迁移有多敏感?如果能在至少一个非医学领域展示结果来建立泛化性,论文会更有说服力。
写作功力: 方法描述部分清晰流畅,但相关工作部分薄弱——从SMILE跳到应用之间,没有充分对标其他XAI审计方法(如归因图的sanity check、基于梯度的忠实性指标)。第4节(结果)需要更多定性示例来说明为什么某些概念在忠实性上得分低——目前主要是聚合数字,缺少让论文令人印象深刻的叙事。
判决: 弱接收 — 缺口真实、方法合理、概念可靠性因路径而异的发现确实有用。但评估范围较窄(单一领域、单一比较),方法的新颖性是渐进式的(将SMILE扩展到概念级,而非根本性的新框架)。
要点总结
从这篇论文可以”偷”走三样东西:
-
XAI的审计思维: 最可迁移的洞见是将概念级解释视为待验证的声明,而非可接受的输出。如果你在构建任何概念级系统(不只是医学影像),都可以采用这种”压力测试后再信任”的工作流。扰动输入、测量概念敏感性、检查一致性。
-
五指标可靠性记分卡: 归因准确性、代理保真度、忠实性、稳定性、一致性构成了评估任何解释方法的有用词汇表。不必使用ConceptSMILE的具体实现——可以采用这个指标框架,用自己领域更简单的扰动实验来应用。
-
XGBoost作为解释审计员: 用简单代理模型近似复杂概念提取的行为,然后审计代理模型而非复杂模型本身——这是一个实用的工程模式。推理XGBoost的行为远比推理大型分割模型容易。这个思路可以迁移到任何需要验证复杂系统解释的场景。