NeuroAI: encoding, decoding & CNNs
Guest lecture, Dr. Maggie Henderson (CMU Psychology, Neuroscience Institute & Machine Learning Department). Artificial neural networks were built from a sketch of the visual system; now they are used as instruments to study it. Everything here is predicting one of two directions — stimulus to brain, or brain to stimulus — and the whole lecture turns on not confusing them.
- Encoding model: stimulus / task property → neural data. You feed in the image, you predict the brain response. It is an explicit hypothesis of the form "X is related to the brain via function F".
- Decoding model: neural data → stimulus / task property. You feed in the brain response, you recover what the person saw, heard, remembered or intended. A decoder can be built by inverting an encoding model, or trained directly as a classifier.
- NeuroAI: the intersection of neuroscience, AI and cognitive psychology. Two-way street — the brain inspired the architectures, and the architectures are now tools for investigating the brain.
- BOLD fMRI: blood oxygen level dependent signal. A hemodynamic measure, using blood flow as a proxy for neural activity, because oxygenated and deoxygenated haemoglobin have different magnetic properties. Invented at Bell Labs in the 1990s; 3T and 7T scanners are common.
- Voxel: a volume pixel — one small cube of tissue (commonly about 2 mm on a side) that gives one number per measurement. It pools hundreds of thousands of neurons, so a predicted voxel response is not a predicted neuron.
- ANN / DNN / CNN: units ("neurons") connected by weights ("synapses"), weights learned from data during training; deep = many layers; convolutional = built from spatial filters. Inputs: images, sentences, game states. Outputs: captions, labels, sentences, actions.
- Spatial convolution: slide a small 2D filter (a kernel) across the image, taking a dotwise product at every position. One set of weights, reused everywhere — so a feature is detected wherever it appears.
- Ventral stream: retina → LGN → V1 (orientation, spatial frequency) → V2/V3/V4 (texture, contour, shape, colour) → IT (objects, scenes). Along it, feature complexity and receptive field size both increase. Early model layers best predict early visual areas; deeper layers best predict higher ones.
- Brain alignment and BrainScore: a benchmark for standardised comparison of how well models predict neural data. Crucial caveat: high task performance does not guarantee high brain-prediction performance — which hints that object categorisation is not all vision evolved for.
- Supervised / self-supervised / language-supervised: labels, structure in the data itself, paired captions. Language supervision helps most in higher visual areas, nearer semantic cortex.
- Stimulus optimization: synthesise the image that maximises a region's predicted response (BrainDiVE, using a diffusion model that generates images by iteratively removing noise) instead of hand-picking photographs. Data-driven, so it can find preferences a predefined category list would miss — e.g. food-selective cortex.
1. What NeuroAI is, and why it goes both ways
Start with the problem. You want to know what features the brain uses to recognise objects and scenes. The classical move — the one the rest of this course has been doing — is to pick a hypothesis, build the stimuli that test it, and compare conditions: faces versus objects, intact versus scrambled, upright versus inverted. That works, and it produced the FFA, the LOC and the PPA. But it has a ceiling. You can only test features you already thought of, and you can only present a few dozen hand-chosen images.
Meanwhile, computer vision got good. Deep networks now map images to labels well enough to be useful, and they do it with representations nobody designed by hand. So there is a tempting trade: use those learned representations as candidate hypotheses about the brain's features, and let the data say which ones fit.
The two directions of influence are worth separating, because the study guide asks for both.
This connects to the framing from Marr's levels. An encoding model is a claim at the algorithmic level — these are the features and this is the transformation — tested against implementation-level data. It is the same logic as asking whether V1 simple cells compute oriented edges, scaled up to features too complicated to draw.
2. fMRI, BOLD and what a voxel actually is
Everything downstream depends on the measurement, so be precise about it. Chapter 8 covers fMRI as one method among many; here is the part the modelling rests on.
fMRI was invented at Bell Labs in the 1990s. A very strong magnetic field — 3T or 7T is typical — is used to detect tissue whose magnetic properties differ. The property that matters is the difference between oxygenated and deoxygenated haemoglobin. When a patch of cortex becomes active, local blood flow increases and oversupplies it with oxygen-rich blood, changing the ratio and therefore the signal. Hence BOLD: blood oxygen level dependent.
A voxel is a "volume pixel": the scan divides the brain into a 3D grid of small cubes, and each cube returns one number per measurement. The BrainDiVE study in this lecture used 2 mm isotropic voxels with a 2 s repetition time, so each number summarises an 8 mm³ cube of cortex averaged over a couple of seconds. A whole-brain scan is tens of thousands of such numbers, which is precisely why these datasets can train models at all — the Natural Scenes Dataset (Allen et al., 2022) pairs tens of thousands of image presentations with voxel responses in a handful of people.
3. Why predicting a voxel is not predicting a neuron
This is asked directly on the study guide and it is the single easiest place to overclaim, so it gets its own section.
An 8 mm³ cube of cortex contains on the order of hundreds of thousands of neurons (at commonly quoted cortical densities of roughly 50,000–100,000 neurons per mm³, that is about 0.4–0.8 million per voxel; treat the figure as an order of magnitude, not a measurement). Every one of them, plus the glia, plus the blood vessels threading through, contributes to one number. Three consequences follow.
- It is an average, and averages cancel. If half the neurons in a voxel prefer vertical and half prefer horizontal, the voxel looks untuned for orientation even though every neuron in it is sharply tuned.
- It is indirect and slow. The signal is a vascular response that lags the spiking by seconds, so fine temporal structure — spike timing, the order in which two populations respond — is simply gone.
- A good prediction constrains populations, not cells. "My model explains 60 percent of the variance in this voxel" means the model's features track what this chunk of cortex does on average. It does not mean any neuron computes that feature, and two very different neural codes can produce the same voxel pattern.
A voxel in V1 contains two equally sized neural populations. Population A fires at 10 spikes per second to a vertical grating and 2 to a horizontal one. Population B is the mirror image: 2 to vertical, 10 to horizontal. Assume the BOLD response of the voxel is proportional to the total spiking of all its neurons. What does an experimenter measuring this voxel conclude, and what is actually true?
Step 1 — What are we actually being asked?
Not "what do the neurons prefer" — we know that. We are asked what the measurement shows, and then what inference the measurement licenses. The question is about the gap between a pooled signal and its constituents.
Step 2 — Do the arithmetic
Vertical grating: population A contributes 10, population B contributes 2, total 12. Horizontal grating: A gives 2, B gives 10, total 12 again. The voxel responds identically to the two orientations.
Step 3 — So what does the experimenter conclude?
That this voxel is not orientation selective, and that an orientation-based encoding model should fail here. Both neural populations are in fact maximally orientation selective. The selectivity was destroyed by spatial averaging, not absent from the tissue.
Note the asymmetry this creates: a model that predicts a voxel well has found something real, but a model that fails on a voxel has not shown the information is missing from the cortex — it may only be invisible at 2 mm.
Answer & the takeaway
Measured: no orientation preference. True: every neuron is strongly tuned. The problem was built around the inference "voxel-level prediction equals neuron-level prediction". A null result in fMRI is weak evidence for absence, because the measurement averages over the very heterogeneity you care about. (This is also why ocular dominance and orientation columns, which alternate on a sub-millimetre scale, are so hard to see with standard fMRI — see Chapter 10.)
4. Encoding versus decoding: the direction is everything
Two models, built from the same data, pointing opposite ways. Students lose marks here for one reason only: they remember both words and not which arrow goes with which. So fix the arrow first and the definitions follow.
Input: the image, or some property of it. Output: the predicted response of each voxel. It states an explicit hypothesis — "X is related to the brain via function F" — and is scored by how much response variance it explains on held-out stimuli.
Input: the measured brain response. Output: which of 60 nouns the person read, which orientation they are holding in mind, what sentence they heard, which letter they intended to write. Either invert an encoding model, or train a generic classifier directly on the brain data.
How the encoding model is actually built
Mechanically it is a regression. Let $y$ be the measured response of one voxel across many images, and let $X$ be a matrix whose rows are images and whose columns are features extracted from each image — the activations of one layer of a CNN, say, or the outputs of a texture model. Fit
$$y = X\beta + \epsilon$$
where $\beta$ is the vector of weights (one per feature) telling you how much this voxel cares about each feature, and $\epsilon$ is noise. Because there are usually far more features than images, the fit uses ridge regression (L2 regularization), which shrinks the weights in $\beta$ toward zero and stops the model memorising the training set.
Then the scoring. Run the model on new images it never saw, compare predicted to actual, and compute the variance explained:
$$R^2 = 1 - \frac{SSE}{SST} = 1 - \frac{\sum_i (y_i - \hat{y}_i)^2}{\sum_i (y_i - \bar{y})^2}$$
Here $y_i$ is the actual response on image $i$, $\hat{y}_i$ (the "hat" means predicted, not a power) is the model's prediction, and $\bar{y}$ is the mean response. The denominator is the variance you would fail to explain by always guessing the mean. Fitting one of these per voxel and painting the resulting $R^2$ values onto the cortical surface is how these papers' main figures are made — Henderson, Tarr & Wehbe (2023) did exactly this with a computational texture model.
Linearizing encoding models
Why is the final step a plain linear regression, when the whole point was that visual features are complicated? Because the complexity is deliberately placed before the regression. The pipeline is: image → (very nonlinear feature mapping, e.g. a deep network) → features → (very simple linear map) → voxel response. The nonlinear part is the hypothesis; the linear part is just the readout.
For each, name the model type and write the arrow with the input on the left.
- Mitchell et al. (2008) scan people reading each of 60 nouns, then build a system that takes a new brain image and reports which noun the person was reading.
- Huth et al. (2016) take word co-occurrence statistics for every word in a story, and use them to predict the response of each voxel while people listen to the story.
- Willett et al. (2021) record from microelectrode arrays in the precentral gyrus of a paralysed patient and output the letter he is attempting to handwrite.
- A lab feeds photographs through layer 4 of AlexNet and fits ridge regression from those activations to V4 voxel responses, reporting $R^2$ on held-out photographs.
Step 1 — What are we actually being asked?
Not "which is better" and not "what technique did they use". Only: what goes in and what comes out. Ignore how fancy the method is — a deep network can appear on either side. Ask what the system is handed at test time.
Step 2 — Work through them
- Decoding. Neural data → which of 60 nouns. The input at test time is a brain image.
- Encoding. Stimulus property (word co-occurrence statistics) → neural data. Note it used no language model at all; the features were plain corpus statistics.
- Decoding. Neural data → intended letter. This is the BCI case from section 11.
- Encoding. Stimulus → neural data, scored with $R^2$. The presence of a deep network is irrelevant to the direction.
Step 3 — The trap in number 2
Huth et al. is the one people mislabel, because the result is usually described as a map of "what each bit of cortex means" — which sounds like reading out from the brain. But the model was fit stimulus → brain. The semantic map is the pattern of fitted weights across voxels, with colours showing voxels with similar word tuning; it showed that semantic information is topographically organised rather than random. Output of analysis is not the same thing as output of the model.
Answer & the takeaway
Decoding, encoding, decoding, encoding. The problem was built around two confusions: that the sophisticated method tells you the direction (it does not), and that what the paper's figure shows tells you the direction (it does not either). Only the test-time input does. And remember the link between them: decoding can be done using an encoding model — invert it by asking which stimulus would have produced the observed response — or done generically with a classifier that never models the stimulus at all.
5. CNNs and the visual system: what they share
An artificial neural network (ANN) is a class of machine learning system inspired by the brain. Two pieces of vocabulary, and the brain word each one borrows:
| In the network | Brain word it borrows | What it does |
|---|---|---|
| Units / nodes | "neurons" | Each holds one activation value, computed from the units feeding into it |
| Weights / edges | "synapses" | Scale the signal passing between units. The weights encode the information, and they are learned from data during training — not designed |
| Layers | cortical stages | A deep neural network (DNN) is simply an ANN with many layers |
The same skeleton accepts very different jobs, which is worth knowing because the exam may ask for examples of either side:
So which principles are genuinely shared with the visual system? Four, and they are the answer to the study guide's question:
- Hierarchy. Many stages in sequence, each taking the previous stage's output as input — matching retina → LGN → V1 → V2/V3/V4 → IT.
- Local receptive fields. A unit early in the network sees only a small patch of the image, exactly as a V1 cell sees only a small patch of the visual field.
- Growing complexity and growing receptive fields. Composing simple detectors into complex ones, with each stage pooling over a larger region.
- Learned connection strengths. Information lives in the weights, which are shaped by experience, rather than in hand-coded rules.
6. Spatial convolution, on an actual pixel grid
A digital image is a matrix of numbers (pixels). A filter — also called a kernel — is a smaller matrix of numbers. Spatial convolution takes the 2D filter and multiplies it, elementwise, against each part of the image, summing the products: a dotwise product at every position. You "slide" the filter across the whole image, and the resulting grid of sums is the feature map.
What is the sum measuring? Agreement. It is large and positive where the image pattern under the window matches the filter pattern, large and negative where it matches the opposite pattern, and near zero where there is nothing the filter is looking for. Convolution is a search for places where the image pattern matches the filter pattern.
Here is the top-left 3 by 3 patch of the image in the figure above (rows 0–2, columns 0–2), and two kernels. Compute the output for this one window with each kernel.
| Image patch | Vertical-edge kernel | Horizontal-edge kernel |
|---|---|---|
| 0 0 9 0 0 9 0 0 9 |
−1 0 +1 −1 0 +1 −1 0 +1 |
−1 −1 −1 0 0 0 +1 +1 +1 |
Step 1 — What are we actually being asked?
For one fixed window position, multiply each of the nine image numbers by the kernel number in the same position, then add all nine products. One number out per kernel. No sliding yet, and no averaging — convolution is a sum of products, not a mean.
Step 2 — Vertical-edge kernel
Row by row, each row of the
patch is (0, 0, 9) against (−1, 0, +1): 0·(−1) + 0·0 + 9·(+1) = 9. Three identical rows, so
the total is 9 + 9 + 9 = 27.
Why large? The patch is dark on the left, bright on the right, and so is the kernel — maximum agreement.
Step 3 — Horizontal-edge kernel
Top row contributes
0·(−1) + 0·(−1) + 9·(−1) = −9. Middle row is multiplied by zeros, contributing
0. Bottom row contributes 0·(+1) + 0·(+1) + 9·(+1) = +9. Total:
−9 + 0 + 9 = 0.
Why zero? The patch has no top-to-bottom change at all — every row is identical — so a filter asking "is the bottom brighter than the top?" gets exactly nothing. The bright pixels on the right cancel between the +1 and −1 rows.
Answer & the takeaway
27 and 0. Same pixels, same arithmetic, completely different answers — the filter, not the image, decides what counts as a feature. And because those nine weights are reused at every position, the same 27 shows up at the second bar further down the image, which you can confirm with the slider. The problem was built around two mistakes: thinking convolution averages the patch (it does not; it is a weighted sum that can be negative), and thinking a different location needs a different detector (it does not; that is weight sharing).
7. Along the ventral stream, and into the layers
The flow of information, which you already have from Chapter 9: eye (retina) → thalamus (LGN) → primary visual cortex (V1) → intermediate visual areas (V2, V3, V4) → higher visual cortex (IT, inferotemporal). What changes as you travel along it is the kind of thing represented:
| Stage | Selective for | Receptive field |
|---|---|---|
| V1 | Orientation, spatial frequency | Small |
| V4 | Texture, contour, shape, colour | Medium |
| IT cortex | Objects, scenes | Large |
Two things increase together along the hierarchy: the complexity of the features and the size of the receptive fields. Those two trends are not independent — you can only represent a whole object if you are looking at a region big enough to contain one. The payoff is a representation that is increasingly tolerant: an IT-level "this is a cat" survives a shift, a rescaling or a change in lighting that would completely change the V1 response.
Now the result that ties the two systems together. If CNNs really are a reasonable model of this pathway, then the network's depth ought to correspond to the brain's depth. Fit a separate encoding model from every layer to every visual area and see which layer wins where (Güçlü & van Gerven, 2015, using AlexNet):
8. Benchmarking: BrainScore, and the caveat that matters
There are now an enormous number of DNNs available, differing in architecture, training data and objective. Which best predict brain responses — which are most brain-aligned? Comparing across papers is hopeless when everyone uses their own stimuli, voxels and metrics, so the field built benchmarks for standardised comparison.
In 2014, Yamins et al. ran the result that launched this whole enterprise: CNNs optimized for object categorisation were used to predict the brain, and the finding was a straight line — higher performance on the task went with higher prediction performance in the brain. The interpretation was seductive. Perhaps the brain's visual system is itself optimized for object categorisation, and any system that gets good at that task converges on the brain's solution.
Then the field kept making models better at ImageNet, and the line stopped holding.
You train two networks on the same images. Model A reaches 60 percent top-1 accuracy on object classification; Model B reaches 85 percent. You fit encoding models from each to the same V4 and IT voxels in the same participants, with the same ridge regression and the same held-out images. Model A explains more variance than Model B in both areas. A labmate concludes that the encoding analysis must be broken, since Model B is obviously the better vision system. What do you tell them?
Step 1 — What are we actually being asked?
Whether a dissociation between task performance and brain prediction is a bug or a finding. Note what is held constant: same stimuli, same voxels, same regression, same held-out split. The only thing varying is the model, so the comparison is a fair one.
Step 2 — Is there a reason to expect the two to track each other?
Only if object categorisation is the objective the brain is optimized for. That was the 2014 hypothesis, and the correlation Yamins et al. found was evidence for it. But it was always an empirical claim, not a definition — nothing guarantees that the features which squeeze out the last few points of ImageNet accuracy are features cortex uses. Models can win accuracy through tricks the brain has no use for: huge training sets, aggressive data augmentation, texture shortcuts, scale.
Step 3 — So what is the conclusion?
This is the Linsley et al. (2023) pattern, and it is a result rather than a failure. It tells you something about the objective function the brain is optimizing: whatever it is, it is not simply "categorise objects as accurately as possible". Follow it up by varying the objective deliberately rather than by chasing accuracy — which is exactly section 9.
One honest caveat before you publish: also check the noise ceiling, since no model can explain more variance than the data reliably contain, and confirm the result holds across participants.
Answer & the takeaway
Tell them the analysis is fine and that they have found the interesting thing. The problem was built around the assumption that "better at the task" means "more brain-like" — the single most common over-reading of the 2014 result. Benchmarks like BrainScore exist precisely so that brain prediction is scored separately from task accuracy, because the two come apart.
9. Varying architecture, data and objective
Once encoding models are your measuring instrument, every design choice in a network becomes a testable hypothesis about the brain. Richards et al. (2019) framed this as the deep learning framework for neuroscience: a model is specified by three things, and you can vary them one at a time.
| What you vary | Examples from the lecture | What a difference in brain prediction would suggest |
|---|---|---|
| Architecture | CNNs versus vision transformers (ViT) | Whether the brain's computations depend on convolution and local receptive fields, or whether other wiring reaches the same representations |
| Training dataset | ImageNet versus LAION | Which statistics of the environment shape the representation — the data a system grows up on is the closest model analogue of visual experience |
| Objective function | Supervised, self-supervised, multimodal / language-supervised | What the system is being pressured to represent; the closest analogue of what vision is for |
The architecture result is the humbling one. Vision transformers predict the brain well too (Conwell et al., 2024), even though they are not brain-inspired and have no convolution. Keep that in view whenever a good fit tempts you into a mechanistic claim.
Supervised, self-supervised, language-supervised
Does language supervision improve brain alignment? Work by Aria Wang and colleagues at CMU (Wang et al., 2023) says yes, but not uniformly: language helps most in higher visual areas, which sit closer to semantic processing regions, and much less in early visual areas.
10. Stimulus optimization: letting the brain pick the image
Here is the problem it solves. How do we know what a neural population cares about? Traditionally you hand-select stimuli — the localizer images from Stigliani et al. (2015) are a standard set — present a limited number of them, and compare categories to build a tuning function. Three limits follow immediately: you can only sample a small number of images, the approach is hypothesis-driven, and that introduces bias. You will never discover selectivity for something that was not on your list of categories.
This needs a generator capable of making arbitrary realistic images, which is where diffusion models enter. A diffusion model generates images by iteratively removing noise: start from pure noise and repeatedly predict and subtract a little of it, and a coherent image emerges over many steps. A latent diffusion model runs this denoising in the compressed latent space of an autoencoder rather than on raw pixels, which is far less computationally expensive and can be conditioned on text (Rombach et al., 2022; Stable Diffusion is trained on about 2 billion images).
Two findings show why synthesis beats selection.
- Food selectivity. Classical category-selective areas were found by picking categories — faces, places, words, bodies. Food was not on the list for decades. Recent work reports evidence for food-selective regions in higher visual cortex (Jain et al., 2023), and BrainDiVE images optimized for those voxels come out looking like food, which is independent support for the ROI. A predefined category list could not have found this; a generator searching over all images did.
- Splitting apart two face areas. Images optimized for the occipital face area (OFA) contain more face parts; images optimized for the fusiform face area (FFA) contain more whole faces. Both regions are "face-selective" and a face-versus-object contrast cannot tell them apart, but the synthesised images make the difference visible, consistent with earlier versus later stages of face processing.
11. What decoders are for: BCI, memory and imagery
Decoding started modestly. Mitchell et al. (2008) at CMU turned an encoding model into a decoder and could identify which of 60 nouns a person had read or viewed — above chance, from fMRI alone. Fifteen years later, Tang et al. (2023) used a language model (GPT-1) inside a Bayesian decoding framework to reconstruct the gist of continuous speech that people heard: not verbatim words, but sentences whose meaning often matched. The common structure is worth naming — propose candidate stimuli, score each by how well an encoding model says it predicts the observed brain response, keep the best.
Brain–computer interfaces
The lecture's example is Willett et al. (2021): a patient with microelectrode arrays implanted in the precentral gyrus (motor cortex) attempts to handwrite letters; a recurrent neural network decodes the intended letter from the recorded activity and types it. Note what makes this work where fMRI decoding could not — invasive electrodes give spiking activity at millisecond resolution, which a device you control in real time needs. The same approach decodes planned speech and planned hand movements, which is the basis of restoring communication to people who cannot speak or move.
Decoding memory and imagery
If visual cortex only responded to light arriving at the eye, there would be nothing to decode when the screen is blank. The sensory recruitment model of working memory says otherwise: the same visual areas are engaged when you see an item and when you remember it. Remembering is partly re-running the perceptual machinery.
That makes a prediction you can test with a decoder, and it holds (Harrison & Tong, 2009; Serences, Ester, Vogel & Awh, 2009):
- In visual regions, you can decode what a participant imagines or remembers.
- It works during the delay period, when no physical stimulus is present — so the decoded signal cannot be driven by the retinal image.
- You can cross-decode: train the decoder on perception and test it on memory, and it still works. That is the strong evidence, because a classifier trained on seeing can only generalise to remembering if the two states share a representational format — a shared mechanism.
12. Challenges and ethics of brain decoding
The study guide asks for both, separately. Keep them apart: the first is about what does not work yet, the second about what happens if it does.
Challenges before reliable reconstruction of perceptual or cognitive content
- The measurement is coarse and slow. Non-invasive decoding mostly uses fMRI, where each sample is a voxel-sized average of hundreds of thousands of neurons, delayed by seconds (section 3). Fast, fine-grained content is not in the data to be recovered.
- It takes many hours per person. Models are fit per participant, often per voxel, on large bespoke datasets. Generalising across people is hard because cortical organisation differs anatomically and functionally — including small, variable tertiary sulci — and a decoder trained on one brain transfers poorly to another.
- Reconstructions give gist, not detail. Decoded speech matches meaning more often than wording; decoded images match category, layout and texture better than identity. Every published example was also produced from a constrained stimulus set.
- Generative priors can fill in what was never there. When a diffusion model or language model supplies most of the detail, a reconstruction can look convincing while the brain contributed only a weak constraint. Compelling pictures are a hazard in this field, not a result.
- Prediction is not mechanism. Vision transformers predict well without being brain-like, and one voxel pattern is compatible with many neural codes — so brain alignment alone does not identify how the brain works.
- Benchmarks are narrow. Scores depend on the stimulus set, the brain regions chosen and the noise ceiling of the data. Models can be tuned to a leaderboard rather than to the brain, and most datasets use static photographs in a scanner — not vision in the world, which is why the Algonauts challenges moved to films and games.
Ethical issues
- Mental privacy. Thought has always been the one place no instrument could reach. Content decoded from imagery and memory is private in a way behaviour is not — and consider the obvious misuses: interrogation, insurance, employment screening, border control.
- Consent, including the ability to withhold it. Today's decoders need the participant's cooperation during training, and a resistant participant can defeat them by thinking of something else. That is a real protection, and it is a property of current methods rather than a law of nature, so it should not be relied on permanently. Consent also has to cover what the data may later be used for: a dataset collected to study vision can be re-analysed with a decoder that did not exist when it was collected.
- Accuracy cuts both ways. A decoder that works raises privacy problems; a decoder that half-works raises worse ones, if its output is treated as fact. Gist-level reconstructions presented as transcripts in a courtroom or a clinic would be the harm — overclaimed accuracy is an ethical issue, not merely a scientific one.
- Clinical benefit is real, and asymmetric. BCIs restore communication to people who cannot speak and movement to people who are paralysed. A blanket restriction on decoding research carries a cost paid by exactly those patients, which is why the sensible proposals regulate use and data governance rather than banning the science.
- Agency and identity in BCI. If a decoder completes your sentence or a device acts on a decoded intention you had not settled on, who authored the act? This matters most where a decoder has an error rate and the user cannot easily check its output.
- Who holds the data. Neural recordings are identifiable, unchangeable and increasingly collected by consumer devices outside medical oversight. You cannot reissue a brain the way you reissue a password.