Skip to content

Evidence Standard

The Evidence Standard defines how governance claims are supported through attributable, contemporaneous, and system-generated evidence.


Governance evidence exists to demonstrate accountability.

For consequential decisions produced by autonomous systems, evidence records must allow institutions to answer three questions from contemporaneous records: who was responsible, what did they know, and what did they do.

ARAF evidence programs evaluate governance posture across four categories:

  • Design Evidence
  • Deployment Evidence
  • Operational Evidence
  • Outcome Evidence

Coverage across all four categories is required to support reconstructability.

Evidence used for governance assessment must satisfy four quality requirements:

  • Authenticity
  • Integrity
  • Traceability
  • Exportability

These requirements determine whether evidence can be independently relied upon by boards, insurers, investors, regulators, and assessors.

ARAF classifies governance evidence into four quality tiers.

TierEvidence TypeCore Characteristics
Tier 1Infrastructure-generated evidenceContemporaneous, system-generated, and tamper-evident records produced directly by governance enforcement infrastructure (for example decision logs, enforcement actions, override and exception logs, drift outputs).
Tier 2Contemporaneous documentationRecords created at the time of governance activity but not directly generated by technical enforcement infrastructure (for example governance meeting records, approvals, escalation logs, manual review records).
Tier 3Reconstructed documentationRecords assembled retrospectively from available artefacts after the relevant governance activity occurred.
Tier 4Management representationFormal written representation where no contemporaneous record exists.
Certification TierTier 1Tier 2Tier 3Tier 4
ARAF AssessedAdmissibleAdmissibleAdmissible with explicit qualificationNot admissible as primary evidence
ARAF CompliantRequired where structurally availableAdmissible where Tier 1 is structurally unavailableNot admissible for coherence determinationNot admissible
ARAF CertifiedRequired for at least 80% of sampled controlsLimited use where Tier 1 is structurally unavailable and no unresolved significant findings remainNot admissibleNot admissible

If Tier 4 is the only available source for a control, the control must be assessed as not evidenced and the finding recorded accordingly.

6. Evidence Continuity Across the Decision Supply Chain

Section titled “6. Evidence Continuity Across the Decision Supply Chain”

Autonomous outcomes are produced through a distributed Decision Supply Chain involving systems, human actors, and execution infrastructure. Governance evidence must follow the decision through each link in the chain.

Decision Supply Chain
Governance evidence must follow decisions across the full chain.

A record that captures one link but omits upstream or downstream links is chain-incomplete and does not satisfy reconstructability requirements.

Governance infrastructure platforms may seek Evidence Infrastructure Certification to demonstrate that their telemetry outputs satisfy the evidentiary requirements of authenticity, integrity, traceability, and exportability.

For a detailed implementation specification of governance records architecture, see EIS-01. This standard defines the minimum structure of a compliant Tier 1 governance decision record under ARAF, including requirements for reconstructability, authority, and integrity.

// …existing code…

For Compliant and Certified determinations, evidence must be sampled across the full operational coherence assessment window. The minimum window is 180 days, and the report must specify the exact window assessed.

Citation

Martin, Carly. Agentic Risk Architecture Framework (ARAF), Version 3.0. Institute for Autonomous Governance Pty Ltd, 2026.