Model version
Provider, model, and configuration behind the output
Audit Grill-Me methodology
A practical way to test whether one AI-assisted decision can be reconstructed, reviewed, and defended after the fact.
Reconstruction question
Six months from now, can you reconstruct the evidence behind a specific AI-assisted decision?
The method is deliberately narrow: one workflow, one decision, and the evidence trail that should exist when someone asks how the AI-assisted result was produced.
The eight elements
The test is evidence-first. Policies and principles may explain intent, but these records determine whether the decision can be reconstructed under examination.
Provider, model, and configuration behind the output
The exact system and user prompt, fully rendered
The input as it was at decision time - a snapshot
Documents, chunks, and ranking the model retrieved
The output as first generated, before any edit
Who reviewed it - and what they actually saw
Who approved or changed it, when, on what basis
Stored, immutable, and time-bounded
How to run it
Start with one AI-assisted decision that matters enough to defend: a recommendation, routing, score, answer, memo, or approval support artifact.
Ask whether the organization can reconstruct the decision six months later from retained evidence, not interviews, memory, or recreated context.
Look for the model version, prompt, input snapshot, retrieved sources, original output, human reviewer, approval record, and retained evidence.
Treat missing evidence as a reconstruction gap. The goal is not a policy score; it is whether the actual decision can be reviewed after the fact.
Close the evidence gaps that most affect defensibility first: provenance, retention, review binding, override trails, and source linkage.
Run the reconstruction test on fictional workflows before touching any internal system.
Open simulatorAnswer eight questions and get an instant posture read for one workflow.
Take risk checkSee how the method becomes a fixed-scope evidence-readiness packet.
View sprintPublic pages and the simulator are synthetic-data safe. Do not submit PHI, CUI, customer secrets, privileged material, or regulated production data through public forms or examples.