Skip to content

Engineering note

8DB | Can Your Audit Trail Explain Why the Decision Changed?

A reviewer needs the evidence behind yesterday's assessment and a clear account of what changed today. Connected sources, versions and conclusions can make that investigation easier to repeat.

Published
Updated
Reading time5 minutes
Audit evidenceCounterparty reviewProvenanceDecision history
Conceptual illustration: changing one source marks a dependent decision for review while a separately supported conclusion remains intact.
Visual thesisA changed source prompts review of one decision while another retains its support. Conceptual illustration.

An analyst approved a case last month. Today, a source changes. Which part of the decision needs another look? A useful audit trail should make that question easier to answer without asking the team to rebuild the whole investigation.

The opportunity is to retain the connection between a finding, the evidence that supported it and the version of the assessment that used it. A reviewer can then distinguish an old decision that was supported at the time from a current conclusion that needs new work.

8DB, our omnimodal database, provides structures for connected evidence and conclusions. Our bounded ownership research has exercised one important part of that idea: identifying which conclusion loses support when a source is withdrawn, while preserving a broader conclusion supported elsewhere. Turning that into a customer's complete audit workflow requires a separate evaluation.

Three questions that should not share one answer

Historical inspection asks what information and rules were recorded when a decision was made. Deterministic replay asks whether a defined procedure, run again with its exact inputs and environment, produces the same result. Current reassessment asks what the available evidence and applicable rules support now.

These can produce different answers without contradicting one another. A faithfully reproduced old decision may no longer be appropriate. A changed result may reflect a legitimate source correction. A stored digest may confirm that bytes are unchanged without establishing that the source was accurate or the decision lawful.

Well-designed logs and event-sourced systems can support these jobs. The design question is whether the record captures the inputs, versions and dependencies needed for the review, and whether the relevant procedure can actually be rerun.

Decision history · Three distinct investigations

Same case. Different questions.

Keep the old assessment available while investigating what changed.

Source correction arrivesPreserve history. Identify affected conclusions.
Historical inspection

What supported the decision then?

Read the recorded sources, rule versions and reviewer action.

Output: an evidence history
Exact replay

Does the same procedure agree?

Rerun the defined computation with its exact inputs and required environment.

Output: a reproducibility check
Current reassessment

What remains supported now?

Apply the current evidence and rules, keeping alternative support visible.

Output: a successor assessment
Conceptual workflow, not a live compliance decision. Each output needs its own evidence. Reproducing an old result does not establish current applicability or legal clearance.

Preserve the reasons with the result

For a repeatable review, define a decision record that includes:

What to retainWhat it helps the reviewer answer
Source identities, versions and coverageWhat evidence was available, and what could it establish?
Rules and effective periodWhich criteria applied to this assessment?
Procedure version and required environmentWhich computation can be reproduced?
Intermediate findings and unresolved questionsWhy was this conclusion reached, and what remained unknown?
Reviewer action and successor assessmentsWho decided, and what changed afterwards?

Retaining this material is a design requirement, not proof that every current integration captures it. A replay test should deliberately change a source or rule version and refuse to label the new execution as an exact reproduction of the old one.

OFAC's compliance framework identifies risk assessment, internal controls, testing and auditing among the elements of a sanctions compliance program. The record design here is our engineering proposal for supporting review. The framework does not make this particular database design a regulatory requirement or certify a product that uses it.

A useful part we have already exercised

Our OpenSanctions evidence-update experiment distinguishes a dated ownership transition from a broader ownership link. When a dated source was withdrawn, the detailed chronology lost support while another source still supported the broader link. Removing that second support changed the link's status too.

That is more useful to an analyst than a single valid-or-invalid flag for the entire case. It identifies the specific conclusion to reconsider and keeps alternative support visible. The recorded experiment compared incremental updates with rebuilding the tested evidence set; it did not establish real-world ownership, legal clearance or production-wide replay of every decision.

The potential operational benefit is less repeated investigation. A customer pilot must measure that benefit against the team's existing workflow, including missed affected conclusions and unnecessary rechecks. Agreement with a software reference does not replace the analyst's adjudication.

Keep disclosure and judgment explicit

A review package may contain information that every recipient is not entitled to see. Define the authorized view, the evidence it includes and what that view cannot establish. An integrity proof can authenticate a disclosed commitment without deciding who has a lawful entitlement to the underlying material.

The same care applies to retention and erasure. Their treatment depends on the data, dependencies and applicable obligations. This article makes no claim that an immutable record or a deletion certificate automatically resolves those obligations.

Our current Sovclear counterparty-review pilot is a practical setting for testing better ownership and sanctions case evidence. It supports analyst decisions and can begin alongside existing sources and review tools. Automatic clearance, live policy enforcement and settlement integration require separate qualification. We are not presenting that pilot as a regulated clearing service or a guarantee of compliance.

Turn the next correction into a smaller investigation

Use this three-question check on one existing case:

  1. Which exact conclusion depended on the changed source?
  2. Which other evidence still supports it, or a less specific conclusion?
  3. What is the smallest next check that could settle the remaining question?

That is the practical value of connected evidence: direct the analyst toward the work that changed, rather than automatically restarting the case. The ownership experiment supplies a bounded example; a pilot establishes how much effort the same pattern saves in your workflow.

Test the difficult case your team already has

Choose a historical assessment that was hard to explain or had to be revisited after an evidence change. Agree which sources and versions can be used, identify the decisions to compare, and keep sensitive material out of the initial enquiry.

Then ask whether the review makes the affected conclusion, surviving support and next research step clearer. Measure analyst effort and material findings against the existing process. If deterministic replay is part of the requirement, test exact inputs, procedure versions and output agreement as a separate acceptance condition.

Bring us the case that keeps coming back. Start with a non-confidential description of the review problem. We can agree a focused pilot before requesting case data or proposing integration.

Lead illustration: conceptual artwork, not a product screenshot or a deployed customer system.

Evidence scope Design guide · Bounded evidence-update research · Analyst-review pilot. Explore the evidence.

Continue reading

The next layer of the argument.

Idea

Trust Beyond Ledgers

8DB | Can Aid Be Accountable Without Tracking Everyone?

A benefit program needs to check its rules. Recipients need access to support without unnecessary exposure of their lives. A proposed 8DB application starts by deciding what each participant actually needs to know.

5 min readApplication proposal · Primary humanitarian context · No benefits pilotRead article ↗
Engineering note

Trust Beyond Ledgers

8DB | Before You Delete the Data, Check What Depends on It

A source note can disappear while a decision built on it remains. 8DB's braid primitives offer a way to examine represented dependencies, remove an eligible contribution and retain evidence of the change.

4 min readSource-reviewed braid primitives · Illustrative application workflowRead article ↗
Idea

Trust Beyond Ledgers

When AI Buys the Machine, Who Verifies the Deal?

When an AI buys a machine, payment is only part of the decision. The next opportunity is to connect the transaction to its authority, evidence and disclosure rules, so every participant can check the part that matters to them.

6 min readArchitecture thesis · Source-reviewed components · Future purchase scenarioRead article ↗