A Workflow for Full Traceability of AI Decisions

TL;DR

This paper introduces a practical workflow that ensures full traceability and verifiability of AI decision processes, aiming to improve accountability and legal compliance in high-stakes AI applications.

Contribution

It presents the first operational workflow that enforces comprehensive documentation of all components involved in AI decisions using confidential computing technology.

Findings

Workflow supports tamper-proof, verifiable decision traces

Demonstrated with a mushroom classification app

Enhances accountability in high-stakes AI decisions

Abstract

An ever increasing number of high-stake decisions are made or assisted by automated systems employing brittle artificial intelligence technology. There is a substantial risk that some of these decision induce harm to people, by infringing their well-being or their fundamental human rights. The state-of-the-art in AI systems makes little effort with respect to appropriate documentation of the decision process. This obstructs the ability to trace what went into a decision, which in turn is a prerequisite to any attempt of reconstructing a responsibility chain. Specifically, such traceability is linked to a documentation that will stand up in court when determining the cause of some AI-based decision that inadvertently or intentionally violates the law. This paper takes a radical, yet practical, approach to this problem, by enforcing the documentation of each and every component that goes into the training or inference of an automated decision. As such, it presents the first running workflow supporting the generation of tamper-proof, verifiable and exhaustive traces of AI decisions. In doing so, we expand the DBOM concept into an effective running workflow leveraging confidential computing technology. We demonstrate the inner workings of the workflow in the development of an app to tell poisonous and edible mushrooms apart, meant as a playful example of high-stake decision support.