1. Source register
List each public source, date, type, what it supports, and what it does not prove.
AI-mediated authority path and effective refusal risk
Use this when an AI-related case is known through public reporting, public statements, public documentation, public screenshots, papers, or third-party summaries, and the review must avoid overstating what is known.
List each public source, date, type, what it supports, and what it does not prove.
List only claims directly supported by public sources.
Separate plausible inferences from facts and mark uncertainty.
List conclusions that must remain unresolved because internal logs or official findings are unavailable.
| Layer | Review question | Public evidence | Gap |
|---|---|---|---|
| Human requester / operator | Who initiated, approved, used, or relied on the AI-mediated action? | ||
| AI assistant / agent | What did the AI judge, recommend, route, generate, or execute? | ||
| Platform automation layer | Which automated workflow acted after the AI output or user interaction? | ||
| Privileged system / API | Did the process affect account recovery, credentials, production state, tools, rollback, or appeal routes? | ||
| Accountable human or organization | Who could pause, reverse, escalate, or contain before irreversibility? | ||
| Evidence custodian | Who controls logs, timestamps, records, or missing-evidence notes? |