Risk · R-082 · Model Performance & Reliability

Miscalibrated confidence

The system presents uncertain outputs with unwarranted confidence, or gives no usable signal of uncertainty, so users cannot tell when to check.

Severity
Medium
Audience
Heads-of · Practitioner
Frameworks
Article 13 · Human-AI Configuration · Principle 3
Reviewed
2026-11-10

What it is

A well-calibrated system is right about as often as its stated confidence implies. Many are not: a classifier's high scores may be wrong more often than they suggest, and a language model writes with the same assurance whether it is correct or inventing. Calibration matters because people and processes use confidence to decide what to review.

How it happens

  • Scores are treated as probabilities without having been tested as such.
  • A generative model's fluent tone is read as certainty.
  • Confidence thresholds were set once and never checked against outcomes.
  • The interface shows an answer and hides the uncertainty.

Why it matters

Review effort is directed by confidence. If confidence is wrong, the cases that needed attention are passed and effort is spent elsewhere. It also feeds over-reliance, since a system that never appears unsure is trusted more than it should be.

Warning signs

  • High-confidence outputs are wrong at a noticeable rate.
  • No calibration analysis appears in the validation record.
  • The system never declines to answer or expresses doubt.
  • Referral thresholds have no documented basis.

Mitigating controls

Primary controls

Independent model validation Detective
Tests calibration as part of validation. A function independent of the developers tests each model's conceptual soundness, data, performance and limitations before approval and periodically afterwards, to a depth set by the model's tier.

Supporting controls

Human-in-the-loop review Preventive
Routes low-confidence cases to a person. Consequential AI outputs and decisions are reviewed by a competent person, with the time, information and authority to change them, before they take effect.
Information for deployers and users Directive
Tells users how far to rely on outputs. Those who operate and use an AI system receive current, usable instructions covering its purpose, performance, limitations, the meaning of its outputs and the oversight it needs.

Framework and clause references

FrameworkClauseTitle
EU AI ActArticle 13Transparency and provision of information to deployers Output must be interpretable by deployers.
NIST Generative AI Profile (NIST AI 600-1)Human-AI ConfigurationHuman-AI Configuration Appropriate reliance.
SS1/23: Model Risk Management Principles for BanksPrinciple 3Model development, implementation and use Model uncertainty.

Sources

EU AI Act: Regulation (EU) 2024/1689 European Union (EUR-Lex) · official text
SS1/23: Model Risk Management Principles for Banks Bank of England PRA · official text
NIST Generative AI Profile NIST · framework

Related terms

How to cite

Axiom Verity (2026). Miscalibrated confidence. Reference Library, R-082. https://axiom-verity.com/risks/miscalibrated-confidence. Reviewed 2026-11-10.