A Churn Probability of Exactly 0% Left the Building
Today's single must-read — derived scores now travel inside data-subject exports, which turns an ordinary calibration bug into a disclosure event and a misallocated retention budget at the same time.
The disclosure envelope now contains model outputs
The governance change matters more than the bug. Derived predictions arrived in a subject-access export next to transaction logs and favorite locations, so the score, its units, and the policy it drives are legible to an outsider with a form to fill in. Separately from the 515-page Wired export, a Washington Post columnist found a loyalty program may have withheld discounts after inferring he would pay full price, and Consumer Reports alleged the same pattern at Kroger, per Morning Brew. Elasticity-based discount suppression is ordinary uplift modeling in unfamiliar legal weather.
Diagnosing the hard zero
A probability of exactly 0.0 for a heavy-frequency user is not insight. It is a symptom with a short differential. Each candidate cause has a distinct test, and each implies the model is also wrong about the customers who are leaving. That is the expensive half.
| Failure mode | Signature | Diagnostic |
|---|---|---|
| Score saturation from an unbounded ensemble | Mass piling at both 0 and 1 | Reliability curve plus the raw margin distribution before probability mapping |
| Clipping or rounding in the serving layer | Stored score and served score disagree | Compare warehouse score to served payload for the same entity ID |
| Label leakage on high-frequency users | Near-perfect separation in training | Strict temporal holdout; drop post-outcome features |
| Extreme positive-class imbalance, uncorrected | Good AUC, collapsed positive recall | Isotonic or Platt recalibration; Brier decomposition into calibration and refinement |
Run all four on every customer-facing propensity model: churn, CLV, next-order, reactivation, with a standing alert on any degenerate 0 or 1 output. ECE and Brier belong in your model monitoring, not in a one-off notebook. Calibration drift is the signal that catches this before a data request does. A program with 210 million active users allocating retention spend off saturated scores misallocates continuously, not occasionally.
Two independent sources converge on the same internal control
The most useful cross-read is accidental. Morning Brew reports Flock Safety responded to search abuse by cutting log retention from 30 days to 7 and deploying lockouts on abnormal search activity. Computerworld, covering a token-stealing campaign, reaches the same control from the other side: alert on spend drift and access-pattern drift, meaning per-key API spend, per-service-account query volume, model-registry writes, off-hours notebook activity. Insider-anomaly detection over warehouse and feature-store audit logs is a half-day to few-day build on telemetry already in house.
The retention detail is the trap for data teams. A cut from 30 days to 7 breaks seasonality and rolling-window features silently. The pipeline keeps running, the feature keeps computing, and the values quietly become wrong. If a retention change is coming for compliance or cost reasons, materialize the rolling aggregates before the raw logs expire, and add a freshness assertion that fails loudly when a window cannot be filled.
The survey figures on Gen Z betting behavior arrive with no sample size, no sampling frame, and no confidence intervals, on a topic saturated with social-desirability bias. The thing they do not tell you is how much of the reported behavior is reporting. A distribution-shift hypothesis for deposit and lifetime-value models. Not a coefficient.
A model score that reaches a customer is a published document, and a hard 0% is the one sentence in it that cannot be defended.
What to do
Run a calibration audit this sprint on every customer-facing propensity model — reliability curves, Brier score, ECE — and alert on any probability of exactly 0 or 1.
Inventory which model outputs appear in data-subject-access exports and write a plain-language description for each score before month end.
Materialize rolling aggregates before any log-retention cut takes effect and stand up anomaly detection over warehouse and feature-store access logs this quarter.