Tutorials › Quantitative Systems Pharmacology (QSP) › Acceptance Criteria and Failure Rules for Qualification

Verification, Validation and Independent Validation · Tutorial 770 of 799

Acceptance Criteria and Failure Rules for Qualification

Learn to turn a QSP qualification claim into prespecified, measurable acceptance criteria and a transparent decision rule.

Advanced 12 min read

What You'll Learn

  • Define acceptance criteria in relation to the model’s intended use and domain.
  • Select prediction-error metrics and thresholds with explicit units and denominators.
  • Distinguish empirical prediction-interval coverage from nominal coverage.
  • Combine quantitative performance gates with critical qualitative failure rules.
  • Report pass, fail, or inconclusive outcomes without changing criteria after seeing results.

Why Qualification Needs Prespecified Rules

Validation evidence does not determine its own meaning. A prediction error that is acceptable for exploratory prioritization may be unacceptable if it could change a dose-selection decision. Likewise, an apparently good average can conceal a failure in a population or outcome that matters to the intended use. Qualification therefore requires criteria that are chosen before validation results are examined, with a clear rule for combining them.

The claim being assessed should identify the model version, population, intervention or regimen, outcomes, prediction times, and decision context. It should also specify the domain in which the qualification claim applies. The earlier material on defining the domain of applicability is relevant here: performance outside the evaluated domain is not established by passing criteria within it.

Definition: An acceptance criterion is a prespecified, observable condition that validation evidence must meet for a particular qualification claim. A failure rule identifies evidence that prevents qualification, even if other criteria are met. An inconclusive result means that the available evidence does not support either a pass or a fail under the prespecified decision rule.

A defensible plan distinguishes the claim, the performance measure, the threshold, the analysis set, and the consequence of meeting or missing the threshold. Thresholds are not universal properties of a model class; they depend on the scientific use, the measurement scale, and the consequences of prediction error. They must be justified in context rather than selected because a particular model happens to meet them.

Specify Quantitative Criteria in Context

For observed values \(y_i\) and corresponding predictions \(\hat{y}_i\), the signed prediction error is \(e_i=\hat{y}_i-y_i\). Positive values indicate overprediction and negative values indicate underprediction. For \(n\) validation outcomes, common summaries include mean error, mean absolute error (MAE), and root mean squared error (RMSE):

$$ \text{Mean error}=\frac{1}{n}\sum_{i=1}^{n}e_i,\qquad \text{MAE}=\frac{1}{n}\sum_{i=1}^{n}|e_i|,\qquad \text{RMSE}=\sqrt{\frac{1}{n}\sum_{i=1}^{n}e_i^2}. $$

Mean error describes signed bias, while MAE and RMSE describe error magnitude. RMSE gives relatively greater influence to large errors because errors are squared. Each is expressed in the units of the outcome. A relative error can aid comparisons across scales, but its denominator and handling of values near zero must be specified; dividing by an observed value near zero can produce unstable percentages.

A threshold-based criterion can be more directly interpretable than an average. For example, a plan might require a specified proportion of predictions to be within a prespecified tolerance. The tolerance must have a meaningful scale and a justified connection to the use of the model. If an endpoint is critical, an overall average should not substitute for a rule on that endpoint or its relevant subgroup.

Worked Example: Applying Error Criteria to Biomarker Predictions

Suppose, hypothetically, that a QSP model predicts a biomarker concentration at a prespecified time for five independent validation cases. The observed concentrations are 100, 80, 50, 40, and 20 units; the predictions are 108, 70, 57.5, 50, and 18 units. Before examining these results, the team specified both a median absolute percentage error no greater than 15% and at least 80% of predictions within 20% of the observed value. For this example, all observed values are sufficiently far from zero for this percentage calculation to be meaningful.

The absolute percentage errors are \(100|\hat{y}_i-y_i|/y_i\): 8%, 12.5%, 15%, 25%, and 10%. Sorted, they are 8%, 10%, 12.5%, 15%, and 25%, so the median is 12.5%, below the 15% limit.

Four of the five errors are at most 20%, giving \(4/5\times100=80\%\). This meets the second criterion exactly. Under the stated two-part rule, both criteria are met. The conclusion is limited to these hypothetical cases and this specified prediction setting; it does not establish performance outside the qualification domain.

Coverage Criteria and Their Uncertainty

A prediction interval is an interval produced by the model for a future outcome under a specified prediction procedure. Its nominal level, such as 90%, is a model-based target under the assumptions of that procedure; it does not guarantee that exactly 90% of a finite validation sample will fall inside. Empirical coverage is the proportion of observed validation outcomes lying within their corresponding prespecified prediction intervals.

$$ I_i = \begin{cases} 1, & \text{if } y_i \text{ lies within the prediction interval for case } i,\\ 0, & \text{otherwise,} \end{cases} \qquad \widehat{C}=\frac{1}{n}\sum_{i=1}^{n}I_i. $$

If the validation cases are independent and share a common probability \(q\) of being covered, each \(I_i\) is a Bernoulli variable with mean \(q\) and variance \(q(1-q)\). Therefore,

$$ E(\widehat{C})=q,\qquad \operatorname{Var}(\widehat{C})=\frac{q(1-q)}{n}. $$

This shows why empirical coverage is noisy when the sample is small. The derivation relies on independence and a common coverage probability; repeated observations from the same participant or markedly different subgroups may not satisfy these assumptions. A plan should define the unit of analysis, the interval construction, the coverage target, and any subgroup-specific checks in advance. Coverage alone is also insufficient: very broad intervals can achieve high coverage while providing little useful predictive precision.

Worked Example: Checking Empirical Interval Coverage

In a hypothetical validation set of 20 independent outcomes, each model prediction is accompanied by a prespecified 90% prediction interval. The acceptance rule requires at least 80% empirical coverage, with coverage reported as a percentage and uncertainty described. Seventeen observed outcomes fall inside their intervals.

The empirical coverage is

$$ \widehat{C}=\frac{17}{20}=0.85=85\%. $$

Thus the observed coverage meets the 80% point-estimate criterion. It does not show that the true coverage is exactly 85%, nor does it establish that the nominal 90% level is calibrated in every relevant setting. With only 20 outcomes, uncertainty is substantial: a 95% Wilson interval for the underlying coverage proportion is approximately 63.9% to 94.7%. If the plan instead required the lower confidence limit to be at least 80%, this result would not pass that stricter rule. The acceptance plan must say which rule applies before the data are reviewed.

Combine Criteria Without Hiding Critical Failures

Qualification is usually better represented by a set of gates than by a single composite score. A plan may include an overall error limit, a coverage target, requirements for important subgroups or prediction times, and qualitative conditions such as correct direction of response. Each gate should name the data to which it applies and whether it is mandatory. A critical failure rule should state the failure condition precisely enough that assessors can apply it consistently.

For example, a critical rule could identify a maximum tolerable underprediction for an outcome whose low predicted value might lead to a harmful decision. Another could specify that a predicted response must have the correct direction across a prespecified dose contrast. These are not generic thresholds: their rationale and operational definition belong in the qualification plan. Any qualitative assessment should use an explicit rubric, define who evaluates it, and record the evidence supporting the judgment.

A practical decision rule distinguishes three outcomes. A pass requires all mandatory criteria to be met and no critical failure. A fail occurs when a prespecified critical failure is observed or a mandatory criterion fails under the stated rule. An inconclusive result applies when the evidence is insufficient to decide—for example, when a required subgroup has too few evaluable cases or a key measurement is unavailable—and no definitive failure rule has been triggered. Missing information is not evidence of a pass.

Worked Example: A Critical Failure Overrides Good Average Performance

Consider a hypothetical qualification plan for predictions of an outcome in units. It requires overall MAE no greater than 10 units, MAE no greater than 12 units in either of two prespecified subgroups, and no underprediction exceeding 20 units for a critical outcome. The signed error is defined as prediction minus observation, so underprediction corresponds to a negative error.

Across 20 validation outcomes, the sum of absolute errors is 180 units. Overall MAE is \(180/20=9\) units, meeting the overall criterion. In subgroup A, the sum is 70 units across 10 outcomes, giving MAE \(70/10=7\) units. In subgroup B, the sum is 110 units across 10 outcomes, giving MAE \(110/10=11\) units. Both subgroup criteria are met.

However, one critical outcome has an observed value of 100 units and a prediction of 72 units. Its signed error is \(72-100=-28\) units, an underprediction of 28 units, exceeding the 20-unit limit. The prespecified critical failure rule is triggered. The qualification decision is therefore fail, despite the acceptable overall and subgroup MAEs. Reporting only the average would conceal a consequential failure.

Worked Example: Reporting Inconclusive Evidence

Suppose a hypothetical plan requires at least 20 evaluable independent cases in each of two populations before the population-specific error criteria can be applied. No critical failure is observed, and all 20 required cases are available in population A. In population B, six assay results are unusable, leaving 14 evaluable cases.

Population B does not meet the minimum evidence requirement. It would be incorrect to calculate a seemingly favorable error summary from those 14 cases and declare the full qualification claim passed, because the prespecified minimum was 20. If no other criterion establishes failure, the overall decision is inconclusive: population B remains unassessed to the required standard. The report should state the shortfall and its consequence without lowering the minimum after seeing the missing-data pattern.

Justification, Diagnostics, and Alternative Decision Styles

The thresholds should be linked to the decision the model is intended to inform, not merely to customary values. One useful justification is to identify the prediction error that would change a decision and set tolerances accordingly. For example, if a difference of 10 units in a biomarker would not affect a downstream decision but an error of 30 units could, an error tolerance should reflect that distinction. The scientific and clinical rationale, including the direction of harmful error, should be documented.

Before applying the rule, check that the validation set, prediction times, units, interval construction, exclusions, and denominators match the plan. Inspect errors by regimen, time, and relevant population as prespecified. A trend in signed errors, an isolated extreme error, unexpectedly poor interval coverage, or a pattern of missing observations can reveal a problem that an overall summary obscures. Diagnostics explain how a criterion was met or missed; they should not become an unplanned route to redefine the criteria.

There are alternatives to a gate-based rule, but each answers a different question. A single average-error threshold is simple, yet may mask subgroup or tail failures. A collection of mandatory criteria makes important requirements visible but can be difficult to satisfy when evidence is sparse. Hypothesis tests ask whether data are inconsistent with a specified statistical null; they do not, by themselves, establish that predictive error is acceptably small. Equivalence-style reasoning can assess whether performance lies within prespecified margins, but requires an explicit margin and an appropriate uncertainty rule. The qualification plan should choose an approach that matches the claim and explain how uncertainty affects the decision.

A common mistake is to set thresholds after inspecting the validation results, or to treat a favorable average as proof that every relevant use is safe. This makes the decision vulnerable to selective reporting and can erase a failure that matters to the intended use. Set criteria before unblinding or analysis, preserve a record of the rule, and report every mandatory result—including unmet criteria, unavailable evidence, and deviations. If the evidence is inconclusive, report it as inconclusive rather than converting uncertainty into a pass.

Key takeaway: A qualification decision is interpretable only when its claim, metrics, thresholds, critical failures, uncertainty rule, and handling of insufficient evidence are specified before validation results are known.

Check Your Understanding

Answer each question using the stated decision rules. Suggested solutions follow the questions.

  1. A prespecified rule requires at least 90% of predictions within tolerance. In 40 cases, 35 meet tolerance. What is the empirical percentage, and does it meet the point-estimate rule?
  2. Why can a 90% nominal prediction interval have empirical coverage below 90% in a finite validation sample?
  3. A model meets its overall MAE threshold but triggers a prespecified critical underprediction rule. What is the decision?
  4. A required subgroup has fewer evaluable cases than the prespecified minimum, and no critical failure is identified. How should the evidence be reported?
  5. Give one reason to report subgroup performance in addition to an overall error summary.

Solutions. (1) \(35/40\times100=87.5\%\), so the result does not meet the 90% point-estimate rule. (2) Empirical coverage varies from sample to sample; the nominal level is a probability target under the prediction procedure, not a guarantee of the finite-sample proportion. (3) Fail, because the critical failure rule is mandatory and overrides the acceptable average. (4) Inconclusive for the claim requiring that subgroup, with the shortfall reported; the missing minimum evidence is not a pass. (5) An overall summary can conceal poor performance or a critical prediction error in a population that matters to the intended use.

Clinical Biostats