CIO questions · Security & governance
How do I audit an AI decision?
The short answer
Record not only the final response but the relevant context: identity, capability, version, model, applied policies, sources, tools executed, human decisions, timestamps, costs and evidence. The architecture should answer not only what happened, but why it happened.
How to decide
- Who: identity, capability, version
- How: model, policies, sources, tools
- Who else: human decisions
- When and at what cost: timestamps, costs, evidence
The Onni principle
Answer why it happened, not just what happened.
The architecture behind it
- Execution
- Trace
- Evidence
- Atlas