SDE cascade
Uses a 2-stage structured-data-extraction cascade (mini → verify → reasoning) to get most of the quality of a big reasoning model at a fraction of the cost.

- Overview
- big reasoning models extract structured data well, but are slow and expensive
- small models are cheap, but make mistakes
- a cascade gets most of the quality at a fraction of the cost
- the models we use, and their price ($ per 1M tokens, input / output; standard rates
checked September 15, 2026):
- rung 0 (mini):
gpt-5.4-miniat $0.75 / $4.50 - rung 1 (reasoning):
gpt-5.5at $5.00 / $30.00 (roughly 7x the mini) - verifier: TypeSafe
jev-1.12at $0.042 / $0.00 (output tokens are free; published Jev pricing)
- rung 0 (mini):
- Algorithm
- Extract with a cheap/small model.
- Verify with TypeSafe primitives: a per-field yes/no (“Noul question”)
question
- (e.g. “is this value absent from the source?”, “was it lifted from unrelated text?”), each returning P(something is wrong).
- Escalate to an expensive reasoning model if a verifier signal fires; otherwise keep the cheap answer.
- This Cookbook
- walks one real example end-to-end, then shows the tradeoff across 100 prompts
- note: the two extraction rungs use text-mode OpenAI
- we do not use structured outputs, tool calls, or json mode, because:
- a schema following mistake is not the mistake we expect an LLM to make (it’s easy to make synthetic data for this)
- if an LLM does fail to follow the schema, it’s almost always very confused, so constrained decoding doesn’t fix the underlying issue
- we encourage you to try them though!
Setup
- install the dependencies (the TypeSafe verifier client is served from TypeSafe’s package index):
pip install openai datasets jsonschema ipython "typesafe-sdk>=0.5.7" cooksafe --extra-index-url https://pypi.typesafe.ai/
- then set
OPENAI_API_KEYandTYPESAFE_API_KEYin your environment
import json
import os
from pathlib import Path
import jsonschema
from cooksafe import JsonCache, make_playground_link
from datasets import load_dataset
from IPython.display import Markdown, display
from openai import OpenAI
from typesafe_sdk import Noul, NoulCriteria, TypeSafeClient
MINI = "gpt-5.4-mini" # rung 0: cheap + fast
REASONING = "gpt-5.5" # rung 1: strong, run with reasoning_effort="high"
TS_MODEL = "jev-1.12" # the TypeSafe verifier model
FIRE_T = 0.7 # escalate if any per-field P(wrong) exceeds this; also the "<== FIRES" display marker
oai = OpenAI()
ts = TypeSafeClient(api_key=os.environ["TYPESAFE_API_KEY"], timeout=30.0)
Step 1: the data
We choose a huggingface dataset called scrapegraphai
SCRAPEGRAPHAI_REVISION = "4bb9fba1dff9181c5acdb60a5a26fea62fa54fe9"
row = load_dataset(
"scrapegraphai/scrapegraphai-100k",
revision=SCRAPEGRAPHAI_REVISION,
split="train",
)[516]
schema = json.loads(row["schema"])
prompt = row["prompt"]
content = row["content"]
print(
f"""
PROMPT
===========
{prompt}
SCHEMA
===========
{json.dumps(schema, indent=2)}
CONTENT
===========
{content}
""".strip()
)
PROMPT
===========
Find registration open date fall semester for New York University in New York, NY for the 2024-2025 school year.
SCHEMA
===========
{
"properties": {
"registration_open_date": {
"description": "The date that registration opens for the fall semester. MUST be in the format mm/dd/yyyy. For example, for a college in the 2024-2025 school year, it might be something like 09/05/2024. Return a blank string if you are unsure.",
"title": "Registration Open Date",
"type": "string"
},
"description": {
"description": "A brief description of the registration open date. For example, 'Registration opens for the fall semester'.",
"title": "Description",
"type": "string"
}
},
"required": [
"registration_open_date",
"description"
],
"title": "RegistrationOpen",
"type": "object"
}
CONTENT
===========
Skip to content Skip to current page navigation
[ ](https://www.nyu.edu/)
Search Site
[ ](https://www.nyu.edu/)
* [ Academics](https://www.nyu.edu/academics.html)
* [ Admissions](https://www.nyu.edu/admissions.html)
* [ Research](https://www.nyu.edu/research.html)
* [ University Life](https://www.nyu.edu/life.html)
* [ About](https://www.nyu.edu/about.html)
All NYU
# Mobile Navigation
[ ](https://www.nyu.edu/)
Search Site
* [Academics](https://www.nyu.edu/academics.html)
* [Admissions](https://www.nyu.edu/admissions.html)
* [Research](https://www.nyu.edu/research.html)
* [University Life](https://www.nyu.edu/life.html)
* [About](https://www.nyu.edu/about.html)
All NYU
Info for
* Back to main menu
* Info for
* [Students](https://www.nyu.edu/students.html)
* [Faculty](https://www.nyu.edu/faculty.html)
* [Alumni](https://www.nyu.edu/alumni.html)
* [Employees](https://www.nyu.edu/employees.html)
* [Community](https://www.nyu.edu/community.html)
[Log In](http://home.nyu.edu/)
Info for
* [Students](https://www.nyu.edu/students.html)
* [Faculty](https://www.nyu.edu/faculty.html)
* [Alumni](https://www.nyu.edu/alumni.html)
* [Employees](https://www.nyu.edu/employees.html)
* [Community](https://www.nyu.edu/community.html)
[Log In](https://home.nyu.edu/)
Search Site Search
# Events Calendar
Search Events
Apply Reset
* [About the Events Calendar ](https://www.nyu.edu/employees/resources-and-services/media-and-communications/digital-communications/university-events-calendar.html)
* [Events Calendar Tutorial ](https://www.nyu.edu/employees/resources-and-services/media-and-communications/digital-communications/university-events-calendar/tutorials.html)
* [Report issue or provide feedback ](https://nyu.service-now.com/sp?id=sc_cat_item&sys_id=7698dd2a98bcf4004c8c03063d84e274)
Search Filters Calendar
New York University
Equal Opportunity and Non-Discrimination at NYU - New York University is committed to maintaining an environment that encourages and fosters respect for individual values and appropriate conduct among all persons. In all University spaces--physical and digital--programming, activities, and events are carried out in accordance with applicable law as well as University policy, which includes but is not limited to its Non-Discrimination and Anti-Harassment Policy.
Unless otherwise noted, all content copyright New York University. All rights reserved.
* [Search](https://search.nyu.edu/)
* [Campus Map](https://www.nyu.edu/map.html)
* [Events](https://events.nyu.edu/)
* [Contact Us](https://www.nyu.edu/contact-us.html)
* [Give](https://www.nyu.edu/about/giving.html)
* [Copyright & Fair Use](https://www.nyu.edu/copyright-and-fair-use.html)
* [Privacy](https://www.nyu.edu/privacy.html)
* [Accessibility](https://www.nyu.edu/accessibility.html)
* [Feedback](https://www.nyu.edu/#feedback.html)
* [New York Campus](https://www.nyu.edu/)
* [Abu Dhabi Campus](https://nyuad.nyu.edu/)
* [Shanghai Campus](https://shanghai.nyu.edu/)
* [](https://facebook.com/)
* [](https://linkedin.com/)
* [](https://x.com/)
* [](https://instagram.com/)
* [](https://youtube.com/)
- This row is an NYU events-calendar page (“Fall 2024 Census Date”):
- the schema asks for just two fields:
registration_open_dateanddescription - the prompt scrape captured only calendar nav and boilerplate: there is no registration date, or description
- note the schema’s
descriptionfield even ships an example value (“Registration opens for the fall semester”) in its own field description
- the schema asks for just two fields:
- so a well-behaved extractor should decline to invent the fields the page doesn’t contain
- let’s see if the small model does the right thing!
Step 2: extract with the mini model (text mode)
- note:
gpt-5.4-miniis very stochastic on this input – even attemperature=0it invents a differentdescriptionon nearly every run. For a reproducible walkthrough we hard-code the one canonical fabrication the rest of this notebook explains (and that the verifier flags at P(wrong) > 0.8). A real pipeline would just takeextract(MINI, prompt, schema, content, temperature=0)directly.
EXTRACT_SYSTEM = (
"You extract structured data from documents. Return only values supported by the text. "
"Follow any value format specified by the schema or its field descriptions."
)
# LLM and TypeSafe calls are cached to ``json_cache.json``, which ships with the cookbook, so
# re-rendering reproduces the published results with no API spend; delete the file to re-run live.
json_cache = JsonCache(Path("json_cache.json"))
@json_cache
def extract(
model: str,
prompt: str,
schema: dict,
content: str,
*,
reasoning_effort: str | None = None,
temperature: float | None = None,
) -> dict:
user = (
f"{prompt}\n\nReturn ONLY a JSON object matching this JSON Schema:\n"
f"{json.dumps(schema, indent=2)}\n\nDocument:\n{content}"
)
kwargs = {
"model": model,
"messages": [
{"role": "system", "content": EXTRACT_SYSTEM},
{"role": "user", "content": user},
],
}
if reasoning_effort:
kwargs["reasoning_effort"] = reasoning_effort
if temperature is not None:
kwargs["temperature"] = temperature
text = oai.chat.completions.create(**kwargs).choices[0].message.content
# The prompt asks for ONLY a JSON object, so parse the reply as-is -- no regex fishing a
# substring out of a malformed reply. If ``json.loads`` fails, treat it as an empty extraction
# (the record-level analog of NaN): every field reads as absent, which the verifier flags and the
# gate escalates -- the safe direction. Schema-following errors are rare here (see the overview).
try:
return json.loads(text)
except (ValueError, json.JSONDecodeError):
return {}
# Hard-coded canonical fabrication (see note above); a real pipeline would use extract(MINI, prompt, schema, content, temperature=0).
mini_record = {
"registration_open_date": "",
"description": "Registration opens for the fall semester",
}
print("mini extraction:\n", json.dumps(mini_record, indent=2))
# The record is a perfect fit for the JSON Schema -- and still wrong. Schema validation is necessary
# but not sufficient: it catches structural errors, never semantic ones. That gap is the whole point.
print("\nschema-valid:", jsonschema.Draft202012Validator(schema).is_valid(mini_record))
mini extraction:
{
"registration_open_date": "",
"description": "Registration opens for the fall semester"
}
schema-valid: True
- The record is schema-valid (the line above prints
True), yet it’s wrong:registration_open_dateis left blank, which matches the page: it states no date- but
descriptionis fabricated: the page never describes a registration date, so mini invents a plausible one. It may parrot the schema’s own example, “Registration opens for the fall semester”, or narrate “…was not found in the document” - a JSON-Schema check can’t see this. A cheap model produces confident, schema-satisfying fabrications of this kind, and catching them is the job of a semantic verifier
Step 3: verify with TypeSafe
- the verifier is TypeSafe; for each field we build a
Noulquestion:- a narrow yes/no, framed so that
true= something is wrong (escalate)
- a narrow yes/no, framed so that
- TypeSafe returns a calibrated
noul=P(true)per question, in one system_one call - the question set:
- one holistic
__overall__::judgehead (“should this record be escalated?”). We compute and display it to contrast a whole-record judgment with the per-field heads, but the gate in Step 4 does not use it – escalation is driven by the per-field battery. - a per-field battery
- non-empty fields get the full set of heads
- empty fields (null / “” / []) get only the
absence_wronghead
- (the full pipeline also has a
spurioushead for whole containers and an overalldifficultyscore; not shown here, to keep this walkthrough to the two gating heads)
- one holistic
- The TypeSafe Way: Decomposition
- Notice how everything is programmatically decomposed, this is TypeSafe way.
- Decomposition maximizes the intelligence of every prompt, and makes the algorithm tunable and interpretable.
-
# metric -> (question, NoulCriteria)
MAIN_QUESTIONS = {
"name_desc_mismatch": (
"Does the `extracted_field` fail to match the field at `path` or the `description` in the "
"`field_spec`? If the `description` is empty, judge against the `path` alone.",
NoulCriteria(
true="the `extracted_field` does not match the field name or its `description`",
false="the `extracted_field` matches the field name and `description`",
),
),
"type_mismatch": (
"Does the `extracted_field` violate the `type` declared in the `field_spec`?",
NoulCriteria(
true="the `extracted_field` violates the declared `type`",
false="the `extracted_field` conforms to the declared `type`",
),
),
"unreasonable": (
"Is the `extracted_field` one that a reasonable person would not have extracted for this "
"`field_spec`?",
NoulCriteria(
true="a reasonable person would not have extracted this value",
false="the extraction is reasonable",
),
),
"hallucinated": (
"Is the `extracted_field` unsupported by, or absent from, the source text?",
NoulCriteria(
true="the `extracted_field` is a hallucination -- not supported by, or absent "
"from, the source text",
false="the `extracted_field` is supported by the source text",
),
),
"off_target": (
"Does the source text fail to genuinely report the thing the `field_spec` describes, so the "
"value was pulled from incidental text?",
NoulCriteria(
true="the source does not genuinely provide this field -- the value was pulled "
"from incidental text",
false="the source genuinely reports this field",
),
),
"incomplete": (
"Does the `extracted_field` fail to capture a value the source supports (note whether the "
"`field_spec` is `required`)?",
NoulCriteria(
true="the field is wrongly empty, null, or missing a value the source supports",
false="the field captures the value the source supports",
),
),
"format_violation": (
"Does the `extracted_field` violate the format or constraints implied by the `description`, "
"the schema `type`, and the extraction instructions (e.g. date format, units, enum membership)?",
NoulCriteria(
true="the `extracted_field` violates the implied format or constraints",
false="the `extracted_field` satisfies the format and constraints",
),
),
}
ABSENCE_QUESTION = (
"The `extracted_field` is empty, null, or an empty collection. Does the source text contain the "
"information the `field_spec` describes, making the empty result wrong?"
)
ABSENCE_CRITERIA = NoulCriteria(
true="a value was wrongly omitted", false="returning nothing is correct"
)
# The pipeline also asks one holistic, whole-record head: "should this be escalated?"
OVERALL_JUDGE = (
"Is this extracted record an incorrect extraction -- some value unsupported by the source or "
"not conforming to the schema, required information missing or wrong, or some field hallucinated -- "
"so it should be escalated to a smarter model?"
)
OVERALL_JUDGE_CRITERIA = NoulCriteria(
true="the record is an incorrect extraction",
false="the record is a correct extraction",
)
def is_empty(v) -> bool:
return v is None or (isinstance(v, (str, list, dict)) and len(v) == 0)
def field_spec(name: str) -> dict:
"""Minimal spec pulled from the schema (unwrapping anyOf/null for optional fields)."""
p = schema["properties"][name]
branches = p.get("anyOf") or []
typ = p.get("type") or next(
(b["type"] for b in branches if b.get("type") != "null"), "unknown"
)
return {
"path": name,
"type": typ,
"description": p.get("description", ""),
"required": name in schema.get("required", []),
}
def build_questions(record: dict) -> dict[str, Noul]:
"""The verify question set: one holistic ``__overall__::judge`` head plus a per-field battery,
keyed ``field::metric`` (mirrors build_verify_prompts)."""
questions: dict[str, Noul] = {
"__overall__::judge": Noul(
instructions=OVERALL_JUDGE, criteria=OVERALL_JUDGE_CRITERIA
),
}
for name, value in record.items():
spec = field_spec(name)
if is_empty(value):
questions[f"{name}::absence_wrong"] = Noul(
instructions={
"field_spec": spec,
"extracted_field": value,
"main_question": ABSENCE_QUESTION,
},
criteria=ABSENCE_CRITERIA,
)
continue
for metric, (question, criteria) in MAIN_QUESTIONS.items():
if metric == "type_mismatch" and spec["type"] == "unknown":
continue
questions[f"{name}::{metric}"] = Noul(
instructions={
"field_spec": spec,
"extracted_field": value,
"main_question": question,
},
criteria=criteria,
)
return questions
@json_cache
def verify(record: dict) -> dict[str, float | str]:
"""Run the whole Noul battery over a record in one TypeSafe call; return ``{field::metric: P(true)}``."""
state = {
"system_message": EXTRACT_SYSTEM,
"instruction": "Extract the structured record from this document",
"source_text": row["content"],
"schema": schema,
"extraction": record,
}
questions = build_questions(record)
answers = ts.system_one(state=state, questions=questions, model=TS_MODEL).answers
return {qid: ans.noul for qid, ans in answers.items()} | {
"playground_link": make_playground_link(state, questions)
}
Run the whole battery over the mini extraction
checks = verify(mini_record)
playground_link = checks.pop("playground_link")
display(
Markdown(
f"🔗 [Open this verification in the TypeSafe playground]({playground_link})"
)
)
print(f"{'qid':<40}{'P(wrong)':>9}")
print("-" * 50)
for fld, p in sorted(checks.items(), key=lambda c: -c[-1]):
flag = " <== FIRES" if p > FIRE_T else ""
print(f"{fld:<40}{p:>9.2f}{flag}")
qid P(wrong)
--------------------------------------------------
description::hallucinated 0.95 <== FIRES
description::off_target 0.85 <== FIRES
description::unreasonable 0.58
__overall__::judge 0.56
description::incomplete 0.16
registration_open_date::absence_wrong 0.14
description::format_violation 0.10
description::name_desc_mismatch 0.08
description::type_mismatch 0.02
Open this verification in the TypeSafe playground →
- TypeSafe concentrates the signal on the fields that are actually wrong.
- Our results are calibrated: high on the field that is wrong, low on the field that is correct, medium on a field that looks off without being clearly wrong
- This is what a typesafe verifier buys you over a blunt “is this whole thing good?” judge
Step 4: the escalation gate
- now we gate on
any_flag: escalate if any field flag exceedsFIRE_T(0.7, set above and shared with the<== FIRESmarker in Step 3) - this is a
max-style gate (escalate if any field fires), not a mean, so one confident red flag is enough instead of being averaged into silence
# any_flag is a per-field gate: the holistic __overall__ head is shown above but not part of it
fired = {
qid: p
for qid, p in checks.items()
if not qid.startswith("__overall__") and p > FIRE_T
}
escalate = bool(fired)
print(
f"any_flag gate (threshold {FIRE_T}): {'ESCALATE' if escalate else 'ACCEPT cheap result'}"
)
for qid, p in sorted(fired.items(), key=lambda c: -c[1]):
print(f" fired: {qid} (P={p:.2f})")
any_flag gate (threshold 0.7): ESCALATE
fired: description::hallucinated (P=0.95)
fired: description::off_target (P=0.85)
Step 5: escalate to the reasoning model
Since a signal fired, we pay for the strong model (gpt-5.5, reasoning_effort="high")
final_record = (
extract(REASONING, prompt, schema, content, reasoning_effort="high")
if escalate
else mini_record
)
print("mini :", json.dumps(mini_record))
print("reasoning :", json.dumps(final_record))
print("\nfield-level diff (mini -> final):")
for name in mini_record:
if mini_record[name] != final_record.get(name):
print(f" {name}: {mini_record[name]!r} -> {final_record.get(name)!r}")
mini : {"registration_open_date": "", "description": "Registration opens for the fall semester"}
reasoning : {"description": "", "registration_open_date": ""}
field-level diff (mini -> final):
description: 'Registration opens for the fall semester' -> ''
- The improvement
- The reasoning model drops the fabricated
description, returning"" - It recognized the page never describes a registration date, and declined to invent one
- The cascade turned a confident, schema-valid fabrication into an honest empty field
- And it only spent reasoning-model dollars on this one item because the verifier told it to
- The reasoning model drops the fabricated
Step 6: what this looks like on 100 prompts
- These are internal TypeSafe results, produced with the general method above:
- the same
extract → verify → escalateloop,gpt-5.4-mini → gpt-5.5-reasoning,any_flaggate over the per-field heads, run over 100 scrapegraphai prompts - each item’s cheap-rung extraction is scored by TypeSafe; the gate threshold (“cut”) is swept 0→1, and every resulting config is plotted in (cost, quality) space
- the chart is a historical snapshot; its costs have not been recalculated at the current Jev rate listed above
- the same
- how to read it:
- black diamonds = the four models run on their own (cost climbs with capability; the
strongest,
gpt-5.5-reasoning, sits top-right at ≈0.81 quality for ≈$0.10/extraction) - blue points = the cascade at many gate thresholds; the dashed line is the pareto frontier
- the cascade frontier sits up-and-left of every single model: sweeping the gate buys you most of the top model’s quality at a fraction of its cost
- the cheap rung handles the easy items for near-free, and only the flagged items pay for the reasoning model
- black diamonds = the four models run on their own (cost climbs with capability; the
strongest,
Appendix A: what makes a good verifier signal
- the cascade is only as good as its verifier; what separates a useful signal from a
useless one:
- Narrow and grounded.
- one checkable yes/no about one field against the source (e.g. “is this value absent from the source?”), not a vague “is this extraction good?”
- vague questions give mushy, uncalibrated scores
- Bad = TRUE, with explicit criteria.
- frame each question so the escalate case is the
truecase, and state whattrue/falsemean
- frame each question so the escalate case is the
- Per-field, then aggregate with
max.- a per-field flag localizes the error and stays sparse and strong
max(“any flag fires”) ensures one confident red flag escalates, instead of being averaged into silence
- Independent and cheap.
- a dedicated verifier (here, TypeSafe) judging the output catches the extractor’s own blind spots
- it has to be cheap, or there are no savings left to capture
- Separating / calibrated.
- a good signal is high on real errors and low on correct ones, so a single threshold cleanly splits accept vs escalate
- that separation is what pushes the pareto curve up-and-left
- Narrow and grounded.