The Well-Made Analysis

How do we make data analysis trustworthy enough to act on? My research builds methods and software that make it defensible by design, so an analyst, or an artificial intelligence (AI) agent working on someone’s behalf, can show when the work is finished, how much of a dataset’s evidence repeated use has already spent, and whether an adversary shaped what the system took in. I come to these questions from two directions: the meta-science of how studies are conducted, and hands-on biostatistics in global health, where estimates I’ve helped produce now inform guidance from the World Health Organization and health agencies in more than 25 countries. My dissertation, The Well-Made Analysis, develops the methods and their applications together.

The publications page has the full list and citation metrics, and the policy page traces where the work has been cited.

30+
peer-reviewed papers
30k+
citations
25
h-index
200+
policy citations

Sources: Google Scholar, Sage Policy Profiles, and CRAN download logs, October 2026.

Impact

As a collaborator in the Global Burden of Disease (GBD) Study, led by the Institute for Health Metrics and Evaluation (IHME), I help produce estimates that health ministries and international agencies use to plan care.

Ukraine
Acute stroke care under wartime strain
The stroke-burden estimates I co-authored feed the World Health Organization (WHO) Regional Office for Europe’s situational analysis of acute care in Ukraine, which benchmarks the country against the European Union and guides national planning and surveillance.
European Union
Cardiovascular health policy
United States
Obesity forecasts in the public eye
Our forecasts of overweight and obesity in the United States to 2050 were reported by The New York Times and cited in state public health planning.

The policy page lists more, each linked to the citing document.

Methods & meta-science

Knowing When to Stop

Most statistical training covers how to begin a study and says little about how to end one. With Brian Caffo, Stephanie Hicks, and Roger Peng, I developed completion criteria that treat “done” as a claim an analyst can state, check, and defend, and I’ve since recast the question as a stopping problem that weighs further exploration against its cost and the risk of overfitting. That framing matters most once an AI agent runs the analysis, since it can always try one more specification and has no built-in reason to halt.

2026
The End is Insight: How to Know When Data Analysis is Done
Columbus, Caffo, Hicks, Peng · accepted as a discussion paper in American Statistical Association (ASA) Discoveries
first author

What Repeated Analysis Costs

Public datasets now attract one reanalysis after another, more and more of it automated, and each round draws on the same finite information. With Brian Caffo and Martin Lindquist, I’m developing evidential yield, a measure of how much confirmatory evidence the data can still offer after many earlier studies, along with a rule that flags when one more pass is likelier to manufacture findings than to discover them. Its groundwork is vibration-of-effects and specification analysis, which map how far a result moves across the many defensible ways to run the same investigation, and my open-source software puts those tools in other people’s hands, from forkflow to aws.s3 and the other R packages I’ve authored or maintained, downloaded more than 50 million times in all.

2026
Managing Analytic Multiplicity in Epidemiology: Reproducible Multiverse and Vibration of Effects Analyses in R
useR! 2026, the R User Conference, Warsaw
software
An R package for specifying, running, and reporting vibration-of-effects and specification analyses, with a companion Quarto book and source on GitHub.
author and maintainer
book
Open-access book, forkflow open-source project
author
software
An R client for Amazon Simple Storage Service (S3), used across the R ecosystem for cloud data access
contributor and former maintainer
in preparation
How Many Analyses Are Enough? A Stopping Rule and a Selection Measure for Reanalyzed Public Data
Columbus, Caffo, Lindquist
first author

Securing Agents That Act

Once a language model can browse, call tools, and read files, anything it takes in may have been written by an adversary, and every step from what it perceives to what it does becomes a point of attack. I study how threats shift as AI systems move from making predictions to taking actions, including prompt injection through retrieved content and poisoned tool outputs. My framework treats every plan step and tool call as an event to monitor, with alert thresholds calibrated so each detector false-alarms in at most 5% of attack-free sessions. In a pre-registered study of 5,580 agent sessions, detectors that checked actions against their sources or against the system being acted on caught attacks early, and enforcement stopped every secret leak. Detectors that compared text with the original task didn’t, and I report that result alongside the ones that worked. I come to this from an earlier career as an information security analyst and data governance specialist, and I’ve trained further through the National Science Foundation’s CARE-AI program. I also advise organizations on AI safety policy and have written three O’Reilly Media chapters on protecting software applications and computer networks.

2025
From Traditional to Agentic AI: Securing Autonomously Acting Language Models Against Emergent Threats
Neural Information Processing Systems Europe (EurIPS) 2025 Workshop on Foundations of Language Model Security, Copenhagen; also presented at the Global Conference on AI, Security, and Ethics, Palais des Nations, Geneva (2026). Code on GitHub
solo author
2025
Securing AI from the Inside Out: Prompt Injection, Data Poisoning, and Other Nightmares
Invited panel, BigID DotCon Summit

Applications

Global Health and Policy

As a collaborator in the Global Burden of Disease Study, led by the Institute for Health Metrics and Evaluation with more than 16,000 researchers in more than 160 countries, I help produce the figures governments use to compare health progress, set priorities, and allocate resources, estimates that have informed national decisions on alcohol taxation, air quality, and immunization. Studies I’ve co-authored with the network have been cited in more than 200 policy and guideline documents, from the World Health Organization to the Council of the European Union, the World Bank, and the Organisation for Economic Co-operation and Development.

Biomedical Data Science

As a member of the National COVID Cohort Collaborative (N3C), I lead a multimodal pipeline that brings together single-cell transcriptomics, drug perturbation data, and electronic health records to rank existing medicines as repurposing candidates for acute kidney injury associated with coronavirus disease 2019 (COVID-19). As a Johns Hopkins Center of Excellence in Regulatory Science and Innovation (CERSI) Scholar, supported by the U.S. Food and Drug Administration, I study how to report analytic variability in ways that serve regulatory decisions. Earlier, as a graduate research assistant on a study funded by the National Aeronautics and Space Administration (NASA), I contributed to analyses of otolith function and sensorimotor performance across spaceflight missions of different durations.

2025
Strategies to Address and Report Variability Arising from Multiple Analytic Choices in Biomedical Data Analyses
Yale-Mayo Clinic CERSI Scholar Seminar
in review
A Multi-Modal Pipeline for COVID-Associated Acute Kidney Injury Drug Repurposing
Columbus et al. · under review at Nature Biotechnology
first author

Statistics Pedagogy

Teaching people to weigh evidence is the classroom side of my methods research. I design instruction and assessment for analytic judgment that hold up when students use AI tools, an approach recognized with an American Statistical Association Best Contributed Paper Award in statistics and data science education.

2026
When is an Analysis “Done”? Teaching Analytic Judgment and AI-Aware Assessment in Data-Driven Courses
European University Alliance for Global Health Conference on Pedagogical Development, University of Alcalá
2026

Full publication list and metrics on the publications page, or browse Google Scholar.