Federated learning · Blockchain · Medical AI

Earned trust for rare diseases

Six real hospitals train one skin-disease classifier together. No patient image ever leaves its hospital.

We tested who should get a say on the rarest diseases, and what happens when a hospital lies - and we are open about which parts worked and which did not.

real hospitals and data|the attack study|the evidence signal

Node size = images held by each hospital (real counts). Moving dots = model updates. Images never travel.

The core finding

The gap between what Centre 2 knows about rare diseases and how much standard federated averaging listens to it.

Rare-disease training images held by Centre 227.0%
Aggregation weight FedAvg gives Centre 214.5%

104 of 385 rare-disease training images · 2,691 of 18,597 training images overall

Where it stands

Measured first, claimed second.

Every decision point was fixed before any result existed, and each check is reported exactly as it came out - never tuned until it agreed. One retry was allowed per check: the baseline cleared its bar on the retry; the evidence signal came back negative and redirected the project to the study it had planned for that outcome.
Gate G0a

-0.21

Evidence signal. Needed a Spearman correlation of at least 0.7.

Gate G0b

0.535

FedAvg balanced accuracy after the retry (first attempt 0.415). Needed at least 0.45.

Gate G1

0.051

The attack works on the specialist split, but costs this much balanced accuracy - more than the 0.03 that would keep it hidden. On the natural split it barely dents rare F1.