Why Penalize Neural Risk Minimization?
A neural-network class with more parameters or a larger norm allowance can often fit the observed sample at least as well as a smaller class. But the smallest empirical risk need not identify the best predictor for future data. An oracle inequality makes this tradeoff explicit: it bounds the risk of a selected predictor by the risk achievable in each candidate class, plus a complexity cost for estimating within that class.
Here the candidates may differ in depth, width, or norm restrictions. The point is not to prescribe how those candidates should be designed, but to show how a penalty can compare them in one risk guarantee. The guarantee rests on simultaneous control of empirical and population risks, and it can include a nonzero optimization error.
Setup and Definitions
Let \(Z_1,\ldots,Z_n\) be independent observations with common distribution \(P\). A predictor \(f\) incurs loss \(\ell_f(Z)\), assumed measurable and bounded between zero and one. Its population risk and empirical risk are
Consider a fixed, finite collection of candidate classes \(\mathcal{F}_1,\ldots,\mathcal{F}_K\). An index \(k\) can encode both an architecture and a norm restriction; for example, one class might contain networks of a specified depth and width whose layer norms do not exceed specified bounds. The classes need not be nested. Let \(a_k\) be a nonnegative number such that, with high probability, every predictor in class \(k\) has population risk close to empirical risk.
For a finite class with \(M_k\) predictors, one such choice follows from Hoeffding's inequality. More generally, a classwise uniform-deviation result can provide \(a_k\) for an infinite neural-network class, provided its assumptions apply to the loss class under consideration. In particular, a bound for the networks themselves is not automatically a bound for their losses.
A Simultaneous Bound for Finite Candidate Classes
Suppose each \(\mathcal{F}_k\) contains \(M_k<\infty\) predictors, and choose positive weights \(\pi_1,\ldots,\pi_K\) with \(\sum_{k=1}^K\pi_k=1\). Define
For a fixed predictor, its \(n\) losses are independent, lie in \([0,1]\), and have mean \(R(f)\). Hoeffding's inequality therefore gives \(P(|R_n(f)-R(f)|>t)\leq 2\exp(-2nt^2)\). At \(t=a_k\), this probability is at most \(\delta\pi_k/M_k\). Taking a union bound over the \(M_k\) predictors in class \(k\), then over the \(K\) classes, proves the following result.
Indeed, the probability that any one of the inequalities fails is at most \(\sum_{k=1}^K M_k\{\delta\pi_k/M_k\}=\delta\sum_{k=1}^K\pi_k=\delta\). This also explains the role of the weights: they allocate the total failure probability across classes. A class given a smaller weight pays a larger logarithmic penalty.
Worked Example: Penalizing Three Finite Neural Classes
Take \(n=400\), \(\delta=0.05\), and three classes with \(M_1=2\), \(M_2=4\), and \(M_3=8\) predictors. Allocate confidence equally, so \(\pi_k=1/3\). For a concrete bounded-loss setup, let the observations have the point-mass distribution \(X=0,Y=0\), use squared loss, and let each candidate be a constant-output network \(f(x)=c\) with \(0\leq c\leq1\). Choose the constants in the three classes so their minimum squared losses are \(0.09723\), \(0.03215\), and \(0.00735\), respectively; the remaining constants in each class have larger squared loss. The population and empirical risks of each constant are both \(c^2\).
The radii use \(2n=800\). For class 1, \(2M_1/(\delta\pi_1)=2(2)/(0.05/3)=240\), so \(a_1=\sqrt{\log(240)/800}\approx0.0828\). For classes 2 and 3 the corresponding ratios are 480 and 960, giving \(a_2=\sqrt{\log(480)/800}\approx0.0878\) and \(a_3=\sqrt{\log(960)/800}\approx0.0926\).
Penalize empirical risk by \(a_k\). The minimum penalized scores in the three classes are \(0.09723+0.08277\approx0.1800\), \(0.03215+0.08785\approx0.1200\), and \(0.00735+0.09265\approx0.1000\). The third class is selected. The score is not itself a risk estimate; the theorem below explains why minimizing it nevertheless gives a comparison with every candidate class.
The Oracle Inequality
For each class, the quantity \(\inf_{f\in\mathcal{F}_k}R(f)\) is its best achievable population risk. The selected predictor is allowed to trade off empirical fit against the class-specific radius. Write \(\hat f\in\mathcal{F}_{\hat k}\) for a predictor whose penalized empirical risk is within \(\eta\geq0\) of the best value over all candidate classes:
Exact minimization has \(\eta=0\). An approximate training procedure can instead be covered when its returned predictor satisfies this inequality for a known tolerance \(\eta\).
Proof. On \(\mathcal{E}\), the selected predictor satisfies \(R(\hat f)\leq R_n(\hat f)+a_{\hat k}\). By its approximate-minimization property, for any fixed \(k\) and \(f\in\mathcal{F}_k\), \(R_n(\hat f)+a_{\hat k}\leq R_n(f)+a_k+\eta\). The same event gives \(R_n(f)\leq R(f)+a_k\). Combining these three inequalities yields \(R(\hat f)\leq R(f)+2a_k+\eta\). This holds for every \(k\) and every \(f\in\mathcal{F}_k\); taking the infimum over them proves the result. \(\square\)
The factor \(2a_k\) has a direct source: one radius controls the selected predictor's risk relative to its empirical risk, while another controls the comparator's empirical risk relative to its population risk. The penalty \(a_k\) in the selection criterion is enough to cancel the selected class's radius in this argument. If a different penalty is used, the same proof must be repeated with that penalty rather than assuming the displayed bound remains unchanged.
Worked Example: The Oracle Can Prefer a Simpler Class
Suppose three candidate classes have best population risks \(0.08, 0.04,\) and \(0.03\), with valid radii \(a_1=0.03\), \(a_2=0.06\), and \(a_3=0.09\). These values can arise when the more flexible classes have larger uniform-deviation costs. The oracle comparison terms are, in order, \(0.08+2(0.03)=0.14\), \(0.04+2(0.06)=0.16\), and \(0.03+2(0.09)=0.21\).
The class with the lowest best risk is class 3, but class 1 gives the smallest risk-plus-complexity comparison. The theorem guarantees \(R(\hat f)\leq0.14+\eta\) on the deviation event. This is a bound, not a claim that the selected predictor must belong to class 1: its empirical data and the actual penalized scores determine the selection.
Worked Example: Allowing Optimization Error
Suppose a candidate predictor \(f_0\) in class 1 has \(R(f_0)=0.16\) and \(a_1=0.02\). Its population risk plus penalty is \(0.18\), and assume its observed penalized empirical score is \(R_n(f_0)+a_1=0.20\). A training procedure returns \(\hat f\) with score \(0.207\), while the smallest score over all classes is \(0.20\). It is therefore an approximate minimizer with \(\eta=0.007\).
The oracle inequality, using \(f_0\) as the comparator, gives \(R(\hat f)\leq0.16+2(0.02)+0.007=0.207\) on the simultaneous deviation event. The optimization tolerance appears additively: a weaker solution guarantee cannot be discarded, but it does not require changing the statistical comparison. This statement presumes that the returned predictor is in one of the classes covered by the deviation event.
Using the Bound and Avoiding a Common Mistake
The oracle inequality matters because it adapts a single selected predictor to a collection of candidate neural classes. A larger class can have a lower approximation risk, while its larger \(a_k\) reflects the statistical cost of comparing predictors within it. Norm restrictions enter through the definition of the candidate classes and through whichever valid uniform-deviation bounds are available for them. No single complexity formula is required by the oracle argument; the essential requirement is that the bounds hold simultaneously.
Common mistake: choosing the smallest empirical risk and treating it as the oracle choice. The reasoning “the largest network fits best on the sample, so it must have the smallest population risk” ignores sampling variation and the cost of searching a richer class. The correction is to compare penalized empirical risks using valid classwise bounds. Equally important, a bound proved for one fixed class cannot simply be reused after choosing among many classes from the same data: the confidence allocation or another simultaneous argument must account for that selection.
For infinite neural classes, replacing \(M_k\) in the finite-class formula by a parameter count is not, by itself, a proof. One must use a valid uniform bound for the losses under the stated architecture, norm, distribution, and loss assumptions. Once such radii are established, the oracle proof applies without change. The resulting guarantee is therefore modular: statistical complexity determines the radii, and penalized risk minimization converts them into a comparison with the best candidate.
Check Your Understanding
Work through these questions using the definitions and theorem above.
- Why is a simultaneous deviation event needed when the selected class depends on the observed sample?
- For finite classes, how does increasing \(M_k\) affect the radius \(a_k\), all else held fixed?
- In the oracle proof, identify the two uses of the deviation bound that produce the term \(2a_k\).
- If the optimization tolerance is increased from \(\eta\) to \(\eta+c\), how does the stated oracle guarantee change?
- Why does a parameter count alone not establish a valid radius for an infinite neural-network class?