---
title: External Side-Effects Across Disciplines
url: https://www.emergentmind.com/topics/external-side-effects
type: topic
---

# External Side-Effects Across Disciplines

External side-effects are effects whose impact extends beyond the immediate scope of the entity being analyzed: beyond the lexical scope of an expression, beyond the scope of a program itself, beyond the target tissue or target concept, or beyond the intended therapeutic or regulatory action. In programming languages, they include actions such as state change, exceptions, and interaction with the outside world by “printing documents, making sounds, operating robotic limbs” [1506.05676]. In natural language semantics, analogous phenomena include discourse anaphora and presupposition projection, which similarly transcend lexical boundaries [1506.05676]. In pharmacology, external side effects can arise from drug–drug interactions, network-mediated perturbation spread, or post-market patient experiences not captured at approval time [1802.00543] [1504.00272] [2404.01358]. In machine learning and AI safety, the term is used for unwanted consequences that are not encoded in the primary objective, including collateral damage to neighboring concepts, attribute leakage, or irreversible environmental change [2006.06547] [2508.15124]. Across these literatures, the common structure is a distinction between a primary value or target and additional effects that propagate through a larger context.

## 1. Conceptual range across disciplines

A recurring formulation treats side effects as actions that “go beyond the lexical scope of an expression” or “even beyond the scope of the program itself” [1506.05676]. In the programming-language setting, the relevant boundary is the local expression or the program’s internal computation. External effects therefore include I/O operations and interaction with the outside world. In natural language, the relevant boundary is the sentence or phrase, while pragmatic phenomena such as discourse anaphora and presupposition projection alter a broader discourse context [1506.05676].

In biomedical work, the boundary is typically the intended target of a treatment. Polypharmacy side effects “emerge because of drug-drug interactions,” and are “distinct from the individual side effects of the drugs themselves” [1802.00543]. Network pharmacology introduces an additional notion of externality: some side effects are not directly caused by on-target inhibition or activation, but rather by “network ripple effects” in the human interactome [1504.00272]. Social-media pharmacovigilance extends the scope further, treating patient-reported experiences as a source of adverse side effects that may appear “outside controlled clinical trial environments” and outside structured surveillance systems [2404.01358].

In AI safety, side effects denote unintended environmental changes not captured by the specified reward. Rewarding an agent for making a widget may be easy, but penalizing the “multitude of possible negative side effects” is hard; this motivates methods that discourage irreversible changes relative to a no-op baseline [2006.06547]. In generative modeling, concept erasure produces side effects on “neighboring concepts,” permits “evasion of targets,” and induces “attribute leakage” [2508.15124]. In video editing, ROSE defines side effects as the object’s “observable influence” on the environment, including shadows, reflections, light, translucency, and mirror effects [2508.18633].

This breadth suggests that “external side-effects” is not a domain-specific label but a structural one: an effect is external when it cannot be adequately characterized within the local object, action, or representation alone.

## 2. Formal representations of effects beyond local scope

A central formal device is type lifting. In programming languages, a pure value may have type $A$, while a computation that modifies state has type
\[
\text{State} \to (A \times \text{State}).
\]
For general effects, Moggi’s monadic abstraction gives a computation of value type $A$ the type $M~A$ [1506.05676]. For external effects such as I/O, the relevant form is $\text{IO}~A$; in Haskell, `IO Int` is an integer produced as the result of an I/O computation [1506.05676]. The point is that the denotation no longer consists only of a value, but of a value together with effectful interaction.

Dynamic semantics uses the same shift. Instead of plain propositions, sentences denote functions from contexts to propositions and updated contexts:
\[
\text{Context} \to (\mathbf{Prop} \times \text{Context}),
\]
or, in monad-like form, $M~\mathbf{Prop}$ [1506.05676]. The paper explicitly states that “the type of a proposition changes into a function from discourse contexts to propositions and updated discourse contexts in order to handle anaphora,” paralleling the shift from values to state-transforming computations in programming languages [1506.05676]. The associated split between value and effect mirrors Stalnaker’s content/context distinction: truth-conditional content remains the value, while context update or presupposition triggering is treated as the effect [1506.05676].

Logic-based work on contextual abduction formalizes side-effects as secondary consequences of explanatory hypotheses. Under weak completion semantics, explanations can depend on prior abductive context through inspection points $inspect(A)$ and $inspect_{\neg}(A)$, which can be abduced only if the corresponding hypothesis has already been abduced elsewhere [1405.3713]. The paper introduces formal definitions of necessary contextual side-effects, possible contextual side-effects, contested contextual side-effects, contextual relevant consequences, and jointly supported contextual relevant consequences [1405.3713]. Here the externality is not state or I/O, but dependence on abductive context beyond the primary observation.

In complexity-controlled computation, side effects are represented through regions and depth stratification. The modal $\lambda$-calculus with multithreading and side effects uses regions $r$, read and write operations, and parallel composition $(M \parallel N)$ [1209.5851]. The operational rules
```latex
(\textrm{get}) \quad E[{r}] \parallel r \Leftarrow M \longrightarrow E[M]
(\textrm{set}) \quad E[{r}{M}] \longrightarrow E[\star] \parallel r \Leftarrow M
```
model consuming reads and cumulative writes [1209.5851]. A depth system assigns each region a depth and constrains reads and writes to that depth, while shallow-first reduction preserves the observable order of side effects under multithreaded call-by-value evaluation [1209.5851]. This is a formal response to a familiar problem: once effects can propagate through shared regions, evaluation order becomes part of the semantics.

## 3. Pharmacological and biomedical external side-effects

Drug safety work uses “side effects” in the clinical sense, but several papers distinguish effects that arise outside the intended therapeutic mechanism. In polypharmacy, side effects emerge from drug–drug interactions. Decagon represents drugs and proteins as nodes, and drug–drug interactions are labeled by side effect type; there are 964 distinct side effects represented as edge types [1802.00543]. The task is multirelational link prediction:
\[
\text{predict } (v_i, r, v_j) \in E_{drug-drug}^{r}?
\]
and Decagon reports performance gains “outperforming baselines by up to 69%” [1802.00543]. The formulation makes an external side effect explicit as a relation that appears only at the level of a drug pair, not at the level of either drug alone.

Network analysis of the human interactome offers a mechanistic interpretation. “Drug targets are generally better spreaders of perturbations than non-target proteins,” and “targets of drugs with side effects are even better spreaders than those of drugs without reported side effects” [1504.00272]. Spreading efficiency is quantified by **Silencing Time** and **Perturbation Reach**, computed with the Turbine software on a human interactome containing 12,439 proteins and 174,666 edges [1504.00272]. The paper interprets higher spreading efficiency as a reason targeted proteins can induce secondary impacts on the broader cellular network, increasing the likelihood of undesired side effects, especially those arising via network-mediated propagation rather than direct target action [1504.00272].

Post-market surveillance increasingly treats public online discourse as a source of externally reported adverse side effects. For GLP-1 receptor agonists, one study integrated $\mathbb{X}$, Reddit, PubMed, SIDER, manufacturer-reported side effects, and ChatGPT, using a pre-trained NER model, ScispaCy `en_ner_bc5cdr_md`, to extract biomedical entities [2404.01358]. It identified 134 adverse side effects across all datasets, with 21 side effects found exclusively via social media analytics, including irritability and numbness [2404.01358]. Effectiveness was evaluated with the Overlap score
\[
\text{Overlap}(f_\%) = \frac{|P_{f\%} \cap I_d|}{|I_d|},
\]
with a maximum Overlap of 0.53 [2404.01358]. A later Reddit study on semaglutide and tirzepatide analyzed 410,198 posts, found 67,008 users self-reporting use, and reported that 43.5% described at least one side effect; gastrointestinal symptoms predominated, while reproductive symptoms and temperature-related complaints emerged as “unrecognized potential effects” [2603.12341].

A related LLM-based study on semaglutide used Reddit to construct a medication–side-effect knowledge graph $KG = (V, E)$, with medication nodes, side-effect nodes, and directed edges $(m, s, P)$ containing severity, duration, dosage, and description [2504.04346]. The pipeline yielded 7,225 relations and consolidated 2,284 raw side effect entities down to 96 standardized entities, with side effect extraction accuracy of 79.34% and severity extraction accuracy of 86.85% on a manually evaluated 5% sample [2504.04346]. Comparison with FAERS showed a Spearman correlation in rank-frequency of 0.423 for the top 20 Reddit side effects [2504.04346].

A different predictive line uses only molecular structure. GNN–MGSEP formulates drug side-effect prediction as a multi-class, multi-label graph-focused classification over molecular graphs, with a binary target vector of length 2055 [2211.16871]. The recurrent GNN is trained with binary cross-entropy and Adam, and reports best results of approximately 95.25% binary accuracy, 86.73% AUC, and 29.13% AUPR [2211.16871]. By contrast, NRBdMF treats therapeutic effects and side effects as bidirectional aspects of the same drug-effect relation, assigning side effects $+1$, indications $-1$, and unknown or contradictory relations $0$ [2208.04312]. Its enrichment score separates side effects at the top and indications at the bottom of the ranking, reducing false positives such as ranking antihypertensive drugs as likely causes of hypertension [2208.04312].

A common misconception is that external side effects in pharmacology are identical to off-target toxicity. The interactome and polypharmacy work indicates a broader picture: interaction structure, propagation dynamics, and post-market behavioral context can all generate clinically relevant effects that are not reducible to a single target-binding narrative [1802.00543] [1504.00272] [2404.01358].

## 4. External side-effects in AI systems and generative models

In reinforcement learning, the canonical problem is that the reward function does not encode the full set of harms. Attainable Utility Preservation modifies the task reward by penalizing shifts in the optimal value of auxiliary reward functions relative to the no-op action:
\[
R_\text{AUP}(s, a) = R(s, a) - \frac{\lambda}{|\mathcal{R}|} \sum_{R_i \in \mathcal{R}} |Q^*_i(s, a) - Q^*_i(s, \varnothing)|.
\]
The objective is to preserve the agent’s ability to optimize a wide range of rewards and thereby discourage irreversible side effects [2006.06547]. In SafeLife, a large environment based on Conway’s Game of Life, AUP with a single unsupervised auxiliary reward function reduced disturbance of protected “green” cells by over 50% relative to PPO alone while maintaining or exceeding primary task reward; in the append-spawn task, AUP achieved 111% of the reward and only 39% of the side effects compared to PPO after 5 million steps [2006.06547].

Concept erasure in text-to-image diffusion models produces a different class of external side-effects. The SEE benchmark evaluates three aspects: impact on neighboring concepts, evasion of targets, and attribute leakage [2508.15124]. It uses 5,056 prompts over 79 MS-COCO categories in 11 superclasses, with 64 attribute combinations per object, and generates 20,224 images per model [2508.15124]. The main metrics are **Target Accuracy**, where lower is better, and **Preserve Accuracy**, where higher is better [2508.15124]. The reported pattern is a trade-off: stronger erasure can reduce target generation but degrade preserve accuracy. For example, RECE attains target accuracy $23.1 \pm 1.6$ on $\mathcal{E}$ and preserve accuracy $57.6 \pm 1.6$ on $\mathcal{P}$, while UCE attains $30.0 \pm 1.0$ and $66.9 \pm 1.4$ respectively [2508.15124]. Attribute leakage rises from about 35% in the unedited model to 52–61% under concept erasure techniques [2508.15124].

Video editing work uses the term in a still more literal sense. ROSE treats shadows, reflections, light effects, translucency, and mirror effects as object side effects that must be removed together with the object [2508.18633]. The model uses a diffusion transformer, full-video reference input, mask augmentation, and a difference mask predictor. The ground-truth difference mask is defined by thresholding the per-pixel $\ell_2$ difference between the original and erased videos, and training minimizes a denoising loss plus a difference-mask prediction loss [2508.18633]. On synthetic ROSE-Bench, ROSE reports mean performance of 31.12 PSNR, 0.917 SSIM, and 0.077 LPIPS, compared with 26.50, 0.898, and 0.128 for DiffuEraser [2508.18633].

These results show that external side-effects in AI need not be limited to environmental disruption by agents. They also include representational spillover in edited models, collateral degradation of preserved capabilities, and failure modes that become visible only when evaluation moves beyond the immediate target prompt or mask.

## 5. Physical systems, therapy, and environmental spillover

In accelerator physics, the hollow electron beam in the CSRm electron cooler improves beam quality but also introduces nonlinear electromagnetic fields causing tuneshift, tunespread, and resonance driving terms [1504.06233]. For $^{238}U^{32+}$ ions at 1.272 MeV/u, the hollow beam yields $\Delta \nu_x = 0.015$ and $\Delta \nu_y = 0.018$, while the solid beam yields $\Delta \nu_x = 0.024$ and $\Delta \nu_y = 0.041$ [1504.06233]. The hollow beam produces a wider tune spread area but lower maximum tuneshift, and under the studied parameters “do not lead to serious resonances” [1504.06233]. Here the external side-effect is a by-product of the cooling apparatus acting on beam dynamics beyond the intended quality improvement.

Plasmonic photothermal therapy in brain tissue offers a biomedical analogue. The therapeutic mechanism is local heating by plasmonic nanoparticles under near-infrared laser irradiation, but surrounding brain tissue can be damaged because of “absorption of laser light, thermal conductivity, nanoparticles diffusing from the tumor, or a combination hereof” [1902.06578]. In porcine brain tissue, heating rates under NIR laser irradiation were $8.2 \pm 0.2$ K/W for cerebrum, $8.4 \pm 0.1$ K/W for cerebellum, and $5.6 \pm 0.1$ K/W for brain stem, with the lower brain-stem heating attributed to higher scattering [1902.06578]. The temperature dynamics were modeled as
\[
\Delta T(t) = \Delta T_{ss}(1 - e^{-t/\tau})
\]
for heating and
\[
\Delta T(t) = \Delta T_{ss} e^{-t/\tau}
\]
for cooling, with the photothermal source term
\[
Q_1 = P(1-10^{-A_{\lambda}})\eta
\]
and environmental heat loss $Q_{ext} = hA(T-T_{amb})$ [1902.06578].

These physical examples reinforce a general point: external side-effects often arise through transport processes—field propagation, thermal conduction, diffusion, or resonance coupling—that are orthogonal to the nominal function of the intervention. This suggests that side-effect analysis in such systems is fundamentally a problem of system-environment coupling.

## 6. Assessment, trade-offs, and recurrent controversies

Evaluation of external side-effects typically requires measurements that compare intended performance with wider-system disturbance. In RL, SafeLife quantifies side effects as the Wasserstein-1 distance between the final pattern of protected cells and the pattern under no agent intervention [2006.06547]. In concept erasure, SEE combines hierarchical prompts, CLIP zero-shot classification, and VQA-based verification to quantify target suppression, collateral damage, and attribute leakage [2508.15124]. In ROSE, PSNR, SSIM, LPIPS, and VBench are used to compare object removal with and without correction of side effects such as shadows or reflections [2508.18633]. In pharmacovigilance, Overlap, mention frequency over 14-day intervals, and ASE-ASE co-occurrence networks are used to validate whether social media surfaces established and novel adverse side effects [2404.01358].

One controversy concerns whether real-world data sources can support reliable side-effect discovery. The social-media studies argue that large-scale Reddit and $\mathbb{X}$ data can complement standard surveillance by surfacing signals earlier or in patient-centered language [2404.01358] [2603.12341] [2504.04346]. At the same time, they explicitly note limitations: voluntary and self-selected reporting, lack of causal identification, demographic skew, and possible NLP misclassification [2603.12341]. The appropriate interpretation is therefore complementary rather than substitutional.

Another controversy concerns effectiveness versus side effects in regulatory technology. Age Assurance Technologies are assessed with respect to effectiveness, side effects, and acceptance, with the most important side effects involving privacy and anonymity, bias, discrimination, exclusion, and censorship [2603.25695]. Online architectures create tracking and profiling risks because a third-party age assurance service or identity provider learns which services users access and when [2603.25695]. AI age estimation can be less accurate for certain demographics, and NIST reports that even the best facial age estimators for teens have a mean absolute error of 3–5 years, with fewer than 35% of 13-year-olds correctly classified within one year of true age [2603.25695]. The paper therefore recommends a graduated hierarchy favoring on-device parental control and consent, device-based age assurance, and credential-based solutions with selective disclosure and unlinkability over online assurance, especially document upload to private service providers [2603.25695].

A final recurrent theme is that narrow evaluation understates external side-effects. Concept erasure evaluations that check only direct target prompts miss impacts on semantic neighbors and compositional variants [2508.15124]. Video object removal evaluations that focus on the object mask miss shadows, light, and mirror effects [2508.18633]. Drug safety pipelines that rely only on labels and trials miss externally reported symptoms from real-world use [2404.01358] [2603.12341]. This suggests that side-effect analysis is, in practice, an evaluation design problem: the wider the context represented in the benchmark, the more of the externality becomes visible.

Source: https://www.emergentmind.com/topics/external-side-effects