RECAST: Model Reconstruction via Counterfactual-Aware Wasserstein Geometry under Limited Data
Xuan Zhao, Lena Krieger, Zhuo Cao, Arya Bangun, Hanno Scharr, Ira Assent
Abstract
Counterfactual explanations (CFs) help understand machine learning models by identifying minimal input changes that would lead to alternative model outcomes. Recent work demonstrates their utility for reconstructing black-box models, enabling third-party auditing of opaque decision systems for fairness and accountability. Still, CF-based reconstruction may suffer from decision boundary shifts, overfitting, and restrictive assumptions requiring online query access to target platforms. We propose REconstruction via Counterfactual-Aware waSserstein opTimization (RECAST) under limited data and restricted access, a behavioral surrogate model based on Wasserstein barycenteric prototypes. Our approach addresses decision boundary shifts by incorporating CFs as informative, though less representative, samples for both classes, maintaining high surrogate fidelity in low-sample regimes without requiring online access during reconstruction. To enhance fairness auditing, our method enables systematic group fairness diagnostics. Experiments on real-world datasets and various setups show that RECAST effectively achieves high fidelity and query efficiency, as well as stable results even when the access is limited and noisy.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 8e907c20-aea2-45ce-b17c-47b47b249239Builds on9
- Retiring Adult: New Datasets for Fair Machine LearningFrances Ding, Moritz Hardt, John Miller, Ludwig SchmidtNeurIPS 2021 · 671 citations
- Faster Wasserstein Distance Estimation with the Sinkhorn DivergenceLénaïc Chizat, Pierre Roussillon, Flavien Léger, François-Xavier Vialard et al.NeurIPS 2020 · 164 citations
- Stealing part of a production language modelNicholas Carlini, Daniel Paleka, Krishnamurthy Dj Dvijotham, Thomas Steinke et al.ICML 2024 · 157 citations
- Characterizing the risk of fairwashingUlrich Aïvodji, Hiromi Arai, Sébastien Gambs, Satoshi HaraNeurIPS 2021 · 35 citations
- Model Reconstruction Using Counterfactual Explanations: A Perspective From Polytope TheoryPasan Dissanayake, Sanghamitra DuttaNeurIPS 2024 · 17 citations
Related papers
- Fairness Aware Counterfactuals for SubgroupsLoukas Kavouras, Konstantinos Tsopelas, Giorgos Giannopoulos, Dimitris Sacharidis et al.NeurIPS 2023 · 14 citations
- Washing The Unwashable : On The (Im)possibility of Fairwashing DetectionAli Shahin Shamsabadi, Mohammad Yaghini, Natalie Dullerud, Sierra Calanda Wyllie et al.NeurIPS 2022 · 23 citations
- Faithful Model Explanations through Energy-Constrained Conformal CounterfactualsPatrick Altmeyer, Mojtaba Farmanbar, Arie van Deursen, Cynthia C. S. LiemAAAI 2024 · 7 citations
- Fooling SHAP with Stealthily Biased SamplingGabriel Laberge, Ulrich Aïvodji, Satoshi Hara, Mario Marchand et al.ICLR 2023 · 3 citations
- Active Fourier Auditor for Estimating Distributional Properties of ML ModelsAyoub Ajarra, Bishwamittra Ghosh, Debabrota BasuAAAI 2025 · 5 citations
