← All notes

Reading notes

Reading notes: "Black-box data" (Naef & Bronstein, 2026)

Paper: L. Naef and M. Bronstein, Black-box data: a new paradigm for biomedicine in the AI era, Chem. Sci., 2026, 17, 8327–8344. DOI: 10.1039/D6SC01189F · open access, CC BY-NC 3.0
Read: September 2026, from an ML engineer's point of view (no biology background).


TL;DR


How I approached it

  1. Tried to open the publisher PDF; the signed CDN link was too long to fetch, so located the paper by DOI and read the open-access HTML full text.
  2. Summarised the main argument, then separated what it claims from what it's selling.
  3. Went back through every concept I didn't follow and re-derived it with ML analogies (pretraining, active learning, implicit feedback), since I don't come from biology.
  4. Proposed my own fix for lab bias and stress-tested it.

Background terms

PDB (Protein Data Bank). The global public archive of experimentally determined 3D structures of proteins, DNA and RNA, founded in 1971. Over 200,000 structures, each months to years of lab work. AlphaFold was trained on it. The paper's point: AlphaFold worked partly because this dataset already existed, built by structural biologists for their own reasons. Most other areas of biology (drug binding, toxicity, cell behaviour) have nothing comparable.

"Quantity is quality" (a phrase the paper borrows from Aviv Regev). Flips "quality over quantity". Humans need a few clean points to reason from; models can average over millions of noisy points. Their evidence: an MNIST classifier still exceeds 90% accuracy with 100 wrong labels per correct one, as long as there are enough correct labels in absolute terms.
Catch: this holds for random noise. Biological noise is often systematic (a whole lab's batch skewed the same way). More biased data doesn't average out; it makes the model confidently wrong.


Core idea: what makes data "black-box"

How black-box a dataset is = how far the thing you measure is from the thing you want, i.e. how much model machinery sits between the raw readout and the answer. It's a spectrum:

End of spectrumWhat happensExampleML analogy
Barely black-boxYou measure the target directly, but noisily; ML denoises itTest an unpurified drug molecule; ML cleans up false hitsDeblurring a photo: still the same photo
Fully black-boxYou measure something different, only indirectly related; the relationship is learned implicitlySplash RNA with a cheap chemical that reacts with its floppy parts; 40M such readings teach a model to predict 3D shapePretraining an LLM on next-word prediction when you want QA

The paper's pitch: biology should deliberately generate cheap "next-word-prediction-style" data instead of only expensive, directly labelled data.


The seven tricks

#TrickPlain versionML analogy
1Low-resolution readoutsMeasure a sparse, cheap version: "these two parts of a protein are within ~30Å" for a few pairs (crosslinking mass spec) instead of the full 3D structureMasked autoencoders / inpainting
2Amplifiable signalTag each variant with a DNA barcode, test a million at once in one tube, count surviving barcodes by sequencingOne batched pass instead of a million separate calls
3Latent pretraining dataTrain on abundant, indirectly related data; fine-tune on scarce direct labelsLLM pretraining → fine-tuning
4Hypothesis-free screensTest 100,000 random candidates instead of 500 expert picksRandom sampling for coverage vs a biased curated distribution
5Proxy readoutsPhotograph liver cells in a dish after drug exposure to predict real toxicityTraining on a proxy metric; Goodhart risk if it drifts from the target
6Skip the cleaningTest crude reaction mixtures without purifying; the model absorbs the extra false positives/negativesTraining on raw web crawl
7Signal in missing data"Failed" measurements carry information: missing NMR peaks indicate the protein is moving (→ Dyna-1); mutations never seen in nature are probably harmful (→ AlphaMissense)Implicit negative feedback in recommenders

Common thread: accept worse individual data points in exchange for vastly more of them, and let the model do the reconstruction.

Trick 2, explained simply

The marathon analogy. Instead of timing a million runners one by one, pin a bib on each and run one race. At the finish line, count bibs.

Relative sturdiness works too, and it's how the real experiment (MEGAscale, Rocklin lab) runs. Run the pool at increasing enzyme doses; the dose at which half a variant's tags disappear becomes its stability score. Comparing near-identical variants (one building block changed) shows which positions matter; the paper cites over 776,000 such measurements.
Caveats: within-tube comparisons are reliable, cross-experiment ones need calibration (batch effects again); PCR copies some tags slightly better than others (sampling bias); scores saturate at the extremes, so ranking is only meaningful in the middle range.


The paper's outlook

  1. Lab-in-the-loop. The model picks what it's unsure about, the lab runs those experiments, retrain, repeat. Active learning with a lab as the labelling service.
  2. Share raw data, not conclusions. Standardised repositories of raw readouts with full experimental metadata (early examples: OpenBind, the Diffuse Project).
  3. Experts still matter. Choosing which cheap measurement actually contains signal is a design decision, not something scale solves.
  4. Clean data for evaluation. Training tolerates noise; testing doesn't. Pretrain noisy, fine-tune and benchmark clean.
  5. Science flips order. From understand → encode → simulate to encode → simulate → understand via mechanistic interpretability. Example cited: an Alzheimer's biomarker (DNA fragment length) extracted from a trained model's weights.

Critique: the narratives it's pushing

  1. Conflict of interest. Both authors hold equity in Proxima Bio, whose business is exactly "cheap noisy data + foundation model"; its platform is the headline example for Trick 1. Bronstein is also on Recursion's advisory board (Trick 5's headline example). Disclosed, but the paper reads as a company thesis.
  2. Their own evidence cuts against them. AlphaFold 3 still depends on MSAs and a geometry-inspired architecture, and more general models do worse. The Bitter Lesson hasn't finished playing out even in their flagship domain.
  3. "More noisy data wins" assumes random noise. The support is MNIST with random label flips. Lab noise is mostly systematic, which the paper's own Trick 7 implicitly admits.
  4. Old ideas, new label. DNA barcoding, Cell Painting, CMap/L1000 and shotgun sequencing are 10–25 years old. The taxonomy is useful; "new paradigm" oversells it.
  5. Expensive clean data doesn't disappear. If clean data is needed for benchmarking and post-training, cost moves rather than vanishes. They never estimate how much is needed.
  6. The interpretability promise is thin. Rests on a couple of examples, one from a company blog post.

My idea: removing lab bias, and where it breaks

Proposal. Label every data point with lab-level and operator-level metadata, use cheap models to learn each source's bias automatically and subtract it, or use robots to remove human variance.

What holds up. Rich metadata (operator, reagent lot, instrument, date, plate position) is cheap and underdone. That's where batch effects hide.

What breaks.

Stronger version. Automated labs with forced overlap: shared reference samples and controls on every plate, randomised placement, deliberate replication across sites. Metadata falls out as a side effect, and correction models get something to calibrate against. The robot's real value is making good experimental design cheap enough to always do.


Relevance to Badger Evidence

This atlas is built from exactly what the paper calls data "produced as a byproduct of scientific inquiry": values extracted from published tables. Two of our own findings line up with the critique above:

Open question for this project: can extracted literature data carry enough lab/assay metadata to act as the "shared reference" layer, e.g. compounds measured by many labs as natural bridging samples?