Skip to main content

How Confident Should You Be?

· 5 min read
Calvin Cheng
Shape what gets built and the value it creates.

Try to Break It First was about knowing where the system fails. This post is about confidence - how much to trust outputs when the system is nominally "working," and how that trust should change when the context changes. It is the readiness component people skip because green builds feel like permission.

Strip the story from the number and you do not get clarity - you get false certainty in a spreadsheet.

When the product is calibration, not the headline number​

At GoNetZero, leading product for enterprise carbon and sustainability software, the work was rarely a single number you could stamp and forget. Footprint calculations and related outputs sat inside compliance reports, commercial decisions, and public disclosures - for clients such as Singtel Data Centers and CMC Global. The deliverable had to include the story of how a figure was produced: boundaries, factors, data vintage, and how confidence in the output shifted as assumptions moved. Where estimates depended on models or scenarios, calibration was the product - communicating reliability as carefully as magnitude. Strip that story away and you do not get clarity. You get a number that travels into spreadsheets and becomes false certainty. A wrong number is bad; a right-looking number with the wrong confidence is worse, because it silences the questions that would have caught the drift.

Green builds are not confidence intervals​

Contrast that with how many teams treat AI-generated software artifacts today: the pull request merges, the ticket closes, the output looks fine. There is no built-in confidence interval for "this refactor is behavior-preserving" or "this summary matches the policy text." Yet downstream behavior treats those outputs as binary - ship or no ship - when the underlying reality is probabilistic.

Confidence calibration is the work of making that mismatch visible - not to paralyze shipping, but to prevent silent overconfidence. We worried about clients treating an estimate as an audit-grade fact because the UI made the number prominent and the caveats small - or about decisions made on point outputs when the underlying range was wide. The product response was design and language: put uncertainty where the eye goes, tie reliability to conditions, and make degradation legible when inputs wander from the envelope you tested against.

Consensus is binary; most AI outputs are not​

At Hedera, correctness under aBFT had a different flavor - the protocol was designed so that either you have consensus or you do not. Many AI outputs are not like that. They are "mostly right until they are not," and the boundary moves with prompt, context window, tool access, and data drift. The governance question is whether your organization has a shared language for that - or whether every consumer invents their own optimism.

Calibration is cultural, not only technical​

Years ago, training engineers and marketers on Python and analytics in Jakarta and at Gameloft, I watched the same tool land in different cultures. Some teams adopted clear ownership of the numbers - people could explain their analysis and defend it. In others, the tool became a black box that produced figures nobody wanted to own. The difference was not skill; it was norms. Confidence calibration is partly technical and partly cultural: do we reward looking certain, or do we reward being explicit about limits?

Making confidence legible​

The confidence conversation​

Before deployment, have the confidence conversation explicitly: under what conditions is this output reliable? What inputs degrade reliability? What should never be decided on model output alone? If the team cannot answer in a paragraph, you are not ready - regardless of benchmark scores.

Labels in production​

In production, lightweight confidence labels on AI-generated artifacts help downstream humans calibrate - not legal disclaimers, but honest signals: "generated without human review," "reviewed for intent by X," "numeric extraction - verify source cells." The point is to make the absence of guarantee visible.

The next human in the chain​

Think about the next human in the chain - often not the engineer who prompted the tool. Product, legal, and operations consume outputs packaged as answers. Calibration is partly a handoff problem: if the next person cannot see what was assumed, they will fill the gap with certainty. The fix is not more meetings; it is making assumptions and limits visible in the artifact itself.

Explicit limits speed decisions - because downstream humans stop arguing with ghosts.

Distribution shift and false certainty​

Finally, watch for distribution shift - are inputs still representative of what you built against? New document layouts, new APIs, new edge cases in data feeds: the model can keep "working" while silently becoming wrong more often. A simple periodic check - are we still in the envelope we tested? - catches a class of failures that postmortems call "obvious in hindsight."

Calibration is not pessimism. Teams sometimes hear "confidence" as "add friction." The opposite is true when done well - explicit limits speed up decisions because downstream humans stop arguing with ghosts. They know what they are allowed to treat as ground truth, what requires spot checks, and what requires human judgment by design. The most dangerous state is false certainty: everyone moves fast and nobody knows what they are betting on.

Failure-mode awareness tells you where it breaks. Confidence calibration tells you how much to trust it when it is not breaking. The next post covers the last readiness component: when it does break, how fast do you know - and does the organization actually learn?


The Other Dimension · Part 4 of 6 · Previous: Try to Break It First · Next: The Feedback Loop Is the Thing