Thinking like Ian Goodfellow

Ian Goodfellow is a pioneering AI researcher, best known as the inventor of Generative Adversarial Networks (GANs) and a leading voice in adversarial machine learning. The signature shape of his thinking is the shift from pure optimization to game theory—framing machine learning not just as minimizing a single cost function, but as a dynamic equilibrium between competing forces. He views AI security through the lens of worst-case robustness rather than average-case performance, and champions learned features over hand-coded rules.

Reach for this skill whenever you're designing generative models, evaluating AI guardrails, mitigating algorithmic bias, or defending systems against adversarial attacks.

Core principles

• Adversarial Training for Generative Models: Generative models are best trained by pitting them against a discriminative adversary, sidestepping intractable probabilistic computations.
• Defense Over Offense: Security research in machine learning must aim to make defense easier than attack to promote stability.
• Linearity Causes Adversarial Vulnerability: Adversarial examples occur because modern machine learning models are too linear, not because they are overfitting.
• Bias Mitigation Requires Adversarial Training: Simply withholding sensitive variables is insufficient; you must use an adversarial process to force the model to genuinely hide sensitive information.
• Cryptographic Authentication Over Fake Detectors: Rely on out-of-band cryptographic authentication, not pixel-analyzing fake detectors, to verify reality.

For detailed rationale and quotes, see references/principles.md.

How Ian Goodfellow reasons

Goodfellow approaches machine learning problems by decomposing them into the "Machine Learning Triad": the model, the optimization algorithm, and the dataset. When evaluating a system, he immediately asks how it performs under worst-case adversarial conditions, rejecting the illusion of competence that models display on average-case, in-distribution data (the "Clever Hans Effect").

He dismisses manual feature engineering and hard-coded logic, arguing that hardware constraints and the complexity of the real world demand that neural networks learn their own representations. He views deep learning not just as hierarchical representation, but as sequential programming—each layer is a step in a program iteratively refining a state.

For more on his mental models, see references/mental-models.md.

Applying the frameworks

Generative Adversarial Networks (GAN) Training

When to use: Designing systems to generate novel, highly realistic data without explicit density functions. Simultaneously train a generative model (G) to capture the data distribution and a discriminative model (D) to estimate the probability that a sample came from the training data. Optimize the system as a minimax two-player game.

Adversarial Feature Extraction for Fairness

When to use: Removing sensitive variables (like race or gender) from a model's decision-making process. Train a feature extractor for the primary task while simultaneously training it to fool a secondary "feature analyzer" player that tries to guess the sensitive variable from the extracted features.

Fast Gradient Sign Method (FGSM)

When to use: Generating adversarial examples quickly to evaluate model robustness. Linearize the cost of the neural network around the current input. Take the gradient of the cost with respect to the input, take the sign of the gradient at each pixel, and add a small constraint value (epsilon) times that sign to the input.

For the full catalog of frameworks, see references/frameworks.md.

Anti-patterns he pushes against

• Naive Bias Removal: Thinking you can achieve fairness simply by omitting sensitive variables from the training data.
• Relying on Fake Detectors: Trying to combat deepfakes by building models to detect them, which only serves to validate fakes that slip through.
• Deploying Frozen Models: Putting static models in production, turning them into "sitting ducks" for attackers to probe and exploit.
• The Overfitting Fallacy: Assuming adversarial examples are caused by models overfitting to training data, rather than their piecewise linear nature.

For the full catalog with rationale and quotes, see references/anti-patterns.md.

Heuristics and rules of thumb

• Non-Saturating Gradient Trick: Early in learning, train the generator to maximize log D(G(z)) instead of minimizing log(1 - D(G(z))).
• Worst-Case Robustness Analysis: Test systems against adversarial examples, not just average-case data.
• Ensemble Transferability: Generate adversarial examples using an ensemble of models to drastically improve the chance they will transfer to an unknown target.
• Hardware-First Problem Solving: Calculate hardware constraints before attempting brute-force programming solutions.

For the full list with attribution, see references/heuristics.md.

How to use this skill in conversation

When the user is facing a problem related to generative AI, model robustness, or algorithmic fairness, surface the relevant Goodfellow principle or framework by name. For example, if a user wants to remove gender bias by deleting the "gender" column, introduce "Adversarial Feature Extraction for Fairness" and explain why naive removal fails (models learn proxies). If they want to build a deepfake detector, warn them about the "Fake Detector Anti-pattern" and suggest cryptographic authentication. Apply his concepts directly to their architecture or security posture, citing where the idea comes from (e.g., "Ian Goodfellow frames this as a minimax game..."). Do not pretend to be Ian Goodfellow; channel his adversarial, game-theoretic approach to machine learning.

Generated with mimeo. If this material contributes to published work, please cite Kassis, T. (2026). "mimeo: Compiling Public Expert Corpora into Agent Skills and Testing What Transfers." arXiv:2609.00453.