CORE GUIDE

PATTERNINTERMEDIATE6 min read

Auditability as durable decision evidence

An auditable AI system preserves enough durable evidence to reconstruct what happened, which rules applied and who or what authorized the consequential action.

Mental model

Auditability is a durable ledger of decision-relevant facts: identities, versions, evidence, policy checks, approvals, actions and outcomes connected by stable correlation identifiers.

Why it matters

A conversational transcript alone rarely proves why a system took an action. Messages can omit runtime checks, external state and policy versions, while verbose logs can bury the one fact that mattered. Audit records should be designed around accountability questions so operators can reconstruct a decision without trusting generated narration.

01

Record facts at consequential boundaries

When the system crosses a trust or side-effect boundary, persist the actor, operation identity, relevant input references, policy or configuration version, validation result, human approval if required, external action identifier and verified outcome. Protect audit records from ordinary model writes and apply retention and access policies appropriate to their sensitivity.

02

Example: why was an account credit issued?

Months after a support credit, an auditor needs to know why it happened. The record links the ticket, customer plan, controlling policy version, retrieved evidence, agent proposal, automated rule that allowed the amount, payment operation ID and final settlement. The answer does not depend on reconstructing intent from chat prose.

Common failure modes

  • Using raw conversation history as the only audit record.
  • Allowing the model to rewrite or summarize authoritative audit facts.
  • Logging everything indiscriminately while omitting stable identities and policy versions.

Engineering heuristics

  • Design audit fields from the questions a reviewer must be able to answer later.
  • Store authoritative references and decisions separately from generated explanations.
  • Apply privacy, access and retention controls to audit data.

Takeaways

  1. 01Auditability is about reconstructing accountable decisions.
  2. 02Durable facts should outlive conversational context.
  3. 03Good audit records connect policy, authorization, action and outcome.