We are appreciative of the reviewer's comments and for acknowledging our previous response. We are thankful for the opportunity to further clarify and expand on the points raised. Below, we address each comment in detail.
## Identifying privileged information
Identifying appropriate privileged information is indeed a challenging task. In general, this requires expert knowledge, similar to the unconfoundedness assumption in causal inference applications used for treatment effect estimation, for example. In more detail, our solution lies in the conditional independence assumption:
$(X(0), Y(0)) \indep M \mid Z=z$. In words, $Z$ should explain the information about the corruption appearances that is encapsulated in $X(0)$ and $Y(0)$. For instance, in our noisy labels setup in Example 1, the information about the annotator is a good candidate for privileged information, as the noise pattern depends directly on the annotator. Yet, the challenge here is that the conditional independence requirement cannot be directly tested in practice, as we only observe $(X(0), Y(0)) \mid M=0$. In view of unconfoundedness, our work introduces a relaxation of this assumption as we do not assume that $Z$ is observed at test time.
From a practical perspective, we found that PCP can produce valid uncertainty sets even if the independence assumption is not satisfied.
For example, in our real-world noisy response experiment from Section 4.3, PCP attained the target coverage rate even though the conditional independence assumption was not confirmed. We believe this is attributed to our formulation of $Z$, being a variable that is highly correlated to $M$. Intuitively, when $Z$ explains the corruption indicator $M$ well, it is sensible to believe that the conditional independence requirement is approximately satisfied.
More formally, below we analyze the setting where the conditional independence assumption is violated and provide a lower bound for the coverage rate attained by PCP. In simple words, this new result reveals that PCP achieves a coverage rate that is closer to the nominal level as the conditional independence assumption violation is smaller.
## Extension beyond the conditional independence assumption
We are grateful for the opportunity to discuss this topic.
We propose an initial extension of Theorem 1 to a setting where the conditional independence assumption is not fully satisfied. For the simplicity of this initial extension, we assume $X(0) \indep M \mid Z=z$.
The independence assumption
$ Y(0) \indep M \mid Z=z$ is equivalent to assuming that the density of $Y(0) \mid M=m, Z=z$ is the same for $m \in \\{0,1\\}$, formally:
$$f_{Y(0) \mid M=0, X=x,Z=z}(y; 0,x,z) = f_{Y(0) \mid M=1,X=x, Z=z}(y; 1,x,z). $$
In our extension, we relax this assumption and instead require that $\forall x\in \mathcal{X}$, there exists $\varepsilon_x \in\mathbb{R}$ such that the difference between the two densities is bounded by $\varepsilon_x$:
$$\forall y\in\mathcal{Y}, z\in\mathcal{Z}: | f_{Y(0) \mid M=0, X=x,Z=z}(y; 0,x,z) - f_{Y(0) \mid M=1,X=x, Z=z}(y; 1,x,z) | \leq \varepsilon_x .$$
$\textbf{Theorem [Robustness of PCP to conditional independence violation]}$
Suppose that $\\{(X_i(0),X_i(1), Y_i(0),Y_i(1),Z_i, M_i)\\}\_{i=1}^{n+1}$ are exchangeable, $P_{Z}$ is absolutely continuous with respect to $P_{Z \mid M=0}$, and $\forall x\in\mathcal{X}$ there exists $\varepsilon_x \in\mathbb{R} $ such that:
$$ \forall y\in\mathcal{Y}, z\in\mathcal{Z}: | f_{Y(0) \mid M=0, X=x,Z=z}(y; 0,x,z) - f_{Y(0) \mid M=1,X=x, Z=z}(y; 1,x,z) | \leq \varepsilon_x .$$
Then, the coverage rate of the prediction set $C^{PCP}(X^\textup{test})$ constructed according to Algorithm 1 is lower bounded by:
$$
\mathbb{P}(Y^\textup{test} \in C^{PCP}(X^\textup{test})) \geq 1-\alpha- \mathbb{E}_{X,Z}[ | C^\texttt{PCP} (X) | \varepsilon_X \mathbb{P}(M=1\mid X,Z)] .
$$
We omit the proof due to the limitation of space. We can send the proof in a separate comment.
This result provides a lower bound for the coverage rate of PCP in the setting where the conditional independence assumption is not exactly satisfied. Intuitively, as $\varepsilon_x$ decreases, i.e., as the two distributions $Y(0) \mid M=m, Z=z$ for $m\in \\{0,1\\}$ are closer to each other, the lower bound is tighter, and closer to the target level. Similarly, as the two distributions diverge, the lower bound becomes looser.
We once again thank the reviewer for these insightful suggestions, which significantly improve our paper. We will include these discussions in the revised manuscript.