Most disclosure review pipelines are tuned on detection: how many findings the model surfaces, how many of those are true positives, how few real problems slip through. Those numbers come from classification metrics. Precision is the share of flagged items that are correct, recall is the share of real problems that were flagged, and both are computed over a labeled set with no human in the loop Google's machine learning crash course. None of them says anything about what happens after the finding lands in someone's queue.
The gap matters because review is a queueing problem. A specialist opens a finding, reads the cited evidence, decides confirm or reject, and moves on. If the citation is too wide, they hunt through a paragraph for the reason. If it is too narrow, they cannot judge it and must widen the search themselves. Either way the finding is correct and the pipeline's numbers look fine, but the reviewer is doing work the machine should have pre-paid.
There is real evidence for how much this costs. In a controlled study of pre-annotation on clinical trial announcements, annotators given pre-highlighted text saved 13.85% to 21.5% of annotation time per entity compared with annotators starting from unlabeled text, with no measurable loss in inter-annotator agreement or accuracy the PubMed abstract. The span was already drawn for them; the human only had to judge.
The same pattern shows up in security tooling. Roughly half of data loss prevention alerts are false positives on average, and 65% of security teams report being overwhelmed by benign alerts Cyberhaven's analysis. One analysis of ESG research found teams remediate only 8% of generated DLP alerts as true positives, with much of the noise traced to engines that match a pattern without context Netwrix's tuning playbook. A finding with a vague citation is the disclosure-review equivalent of that noise: technically fired, practically unresolvable.



