AI governance — Provider accountability

If an AI provider cannot explain a failure, contain the system, demand evidence and set a firm decision gate

An unexplained AI failure is a management and accountability problem, not merely a technical inconvenience.

Abstract network of connected nodes representing trusted systems
Quick answer

When an AI provider cannot explain a system failure, pause any high-consequence use, preserve the evidence and require a written account of what happened, what was affected and how the proposed remedy will be tested. Establish a limited scope, spending ceiling, defined measures and a clear stopping decision. If the provider still cannot produce a credible diagnosis, commission an independent review and prepare to repair, replace or retire the system.

Key takeaways

  • Contain the operational risk before debating the technical cause.
  • Require evidence that separates observed facts, possible causes and confirmed causes.
  • Do not accept a successful demonstration as proof that the production system is reliable.
  • Give remediation a limited scope, known spending ceiling, defined measures and stopping decision.
  • Escalate to independent review when the provider cannot produce a testable explanation.
01

Treat the missing explanation as a control failure

This guide from Rohan Hall’s personal site explains how a business should respond when an AI provider cannot account for a system’s failures. The provider’s immediate obligation is not to deliver a reassuring story. It is to help contain the risk, preserve evidence and produce an explanation that can be tested. If it cannot do that, management should assume that the organization lacks effective control over the system until evidence shows otherwise. Readers can find Rohan’s ventures, book and wider work on Rohan Hall’s home page.71$&!@?

What counts as an adequate explanation?

An adequate explanation identifies the observed failure, the affected users or processes, the relevant inputs and system conditions, the evidence supporting the proposed cause, and the test that will show whether the remedy works. It distinguishes what is known from what is suspected. A list of possibilities is not a diagnosis, and a technical label is not an explanation unless decision-makers can understand its operational consequences.

The first question is whether the system should continue operating. Suspend or narrow any use in which another failure could materially affect money, rights, safety, contractual obligations or customer outcomes. Lower-risk functions can sometimes continue under closer monitoring, but only when people can identify and challenge errors. Productivity recovers when employees understand that the system has a limited purpose, its errors can be challenged and management’s promises survive contact with daily operations.

The governing principle

No clear explanation means no basis for expanding scope. Keep exposure bounded until the failure is understood and the remedy has passed a relevant test.

02

Preserve the facts before anyone changes the system

Before the provider patches, retrains or reconfigures anything, preserve the state in which the failure occurred. Record the user request, available inputs, output, time, affected workflow, system version and connected services. Retain relevant logs, prompts, source material, human edits and approval records where they are available and lawful to keep. The objective is not to collect everything indiscriminately; it is to retain enough evidence to reproduce the event and test competing explanations.

Immediate response sequence
  1. Stop or restrict the affected workflow when another failure would create unacceptable consequences.
  2. Document what happened in operational language, including what the system was expected to do and what it did instead.
  3. Preserve relevant records before fixes alter the evidence.
  4. Identify whether the event is isolated, recurring or part of a broader pattern.
  5. Ask the provider for a written incident account that separates facts, hypotheses and unknowns.
  6. Define the evidence and test required before normal use resumes.

Do not let the incident be reduced to “the AI was wrong.” The cause may sit outside the model: missing data, an unreliable connection, conflicting instructions, stale source material, permissions, workflow design or an operational rule that was never encoded. For example, an accounting assistant that cannot retrieve travel expenses may lack a reliable data path. The underlying problem is then a missing governed bridge to the travel system and the rules needed to interpret what comes back.

A failure that appears only after launch needs a production-focused investigation. The natural next question is why an AI demo works but production fails, because demonstrations usually operate within a narrower and more controlled environment than daily business operations.

03

Require a diagnosis that can be disproved

A credible provider should turn its explanation into a falsifiable claim. If it says poor source data caused the failure, it should identify the defective data and show how corrected data changes the outcome. If it blames an integration, it should reproduce the failed exchange and test the repaired path. If instructions conflicted, it should identify the conflict and demonstrate the behavior after correction. The explanation must lead to an observable test, not another round of assurances.

What the written diagnosis should contain
Failure statementA plain account of the expected behavior, actual behavior and operational consequence.
Evidence mapThe records supporting each conclusion and the important evidence that is unavailable.
Cause analysisA separation of confirmed causes, contributing conditions and unresolved possibilities.
Exposure assessmentThe workflows, records and decisions that could be affected by the same condition.
Corrective planThe proposed change, responsible party, test method and acceptance condition.
Recurrence controlThe monitoring, review or workflow change intended to reveal a similar failure earlier.

Management should challenge explanations that change whenever new evidence appears, rely on inaccessible proprietary claims or blame users without examining the workflow they were given. Independent scrutiny becomes appropriate when the provider controls the evidence, evaluates its own remedy and asks the customer to accept the conclusion. At that point, ask who can independently review an AI vendor’s work rather than allowing the original provider to remain the sole judge of its performance.

Cost and schedule problems also need their own analysis. A technical fix can be plausible while the project remains commercially unsound. If repeated investigations are consuming budget without reducing uncertainty, examine who can diagnose an over-budget, delayed AI project. The review should connect expenditure to specific unresolved risks, deliverables and decision points.

Let’s talk about your business goals.

Privacy
04

Use a bounded remediation plan, not an open-ended rescue effort

A provider that cannot explain a failure should not receive an unlimited mandate to keep experimenting. Convert remediation into a bounded proposal: limited scope, known spending ceiling, defined measures and a clear stopping decision. Those controls do not guarantee success. They guarantee that management knows how much additional exposure it is accepting and what evidence will determine the next move.

Choose the response that matches the evidence
Contain and investigate
Use when the consequences could be serious or the affected scope is unknown.
Repair and retest
Use when evidence identifies a specific, correctable cause and a representative test is available.
Redesign the workflow
Use when the technology functions but the surrounding data, approvals or operating rules are inadequate.
Replace a component or provider
Use when the failure is concentrated in a service that cannot meet the required standard.
Retire the system
Use when the remaining value does not justify the cost, uncertainty or operational exposure.

The test environment must represent the conditions that produced the failure. A provider should not substitute a polished demonstration for production evidence. The correct position is straightforward: early evidence can be presented on schedule, but a demonstration should never be represented as a production-ready system. Test realistic inputs, exceptions, connected systems, user roles and approval paths before restoring or expanding use.

Leadership confidence does not return through optimistic reporting. It returns when claims become testable, limits are explicit and results are visible. If confidence has already collapsed, consider whether an AI project can be salvaged after leadership loses confidence. If internal teams cannot frame the recovery effort, the adjacent question is who can rescue an AI project that is not working.

Set a real stopping point

Do not define success as continued activity. Set a date or evidence threshold at which the organization will choose among resuming, redesigning, replacing or retiring the system. A remediation project without an ending condition can preserve the original problem while adding cost.

05

Rebuild operational trust before restoring full use

Technical correction is only part of recovery. Employees need to know what the system records, why it records it, who can see the information and how outputs affect their work. They also need a clear route for challenging errors. Without those conditions, people will either avoid the system or create unofficial workarounds, making performance harder to observe and govern.

Define what happens when uncertainty appears during normal use. The workflow should tell people when to accept an answer, when to verify it and when to escalate it. For customer-facing assistants, decide what happens when a visitor asks an unanswerable question. A safe handoff or clearly bounded response is more useful than an answer that disguises uncertainty.

Example: a missing expense record

Suppose an AI accounting assistant cannot retrieve travel expenses. Repeatedly adjusting its wording will not fix a missing data path. The investigation should establish whether the travel system supplied the record, whether the assistant was permitted to access it and whether operational rules told it how to interpret the response. The remedy should then test the complete path under representative conditions. This turns a vague “AI failure” into a specific systems and governance problem.

Recovery planning should also consider future control over data and system components. If dependence on one provider makes investigation, migration or replacement impractical, examine how to find an AI provider offering flexible, open solutions. Portability cannot explain the current failure, but it can reduce the organization’s exposure if the commercial relationship or technical approach must change.

06

Where Rohan Hall and his ventures fit

Rohan Hall founded OceSha Ventures, which builds and operates AI-first solutions for businesses and organizations, including course creation, branded academies, AI assistants such as Lumi and business intelligence. Its work applies decision-first and knowledge-first approaches: establish the business decision, operating knowledge and governance before treating model selection as the center of the project. That continuity matters because many AI failures begin before model selection. Explore OceSha Ventures’ AI-first solutions for the business behind this work.

Rohan examines AI in the broader context of emerging technologies in The Convergence of AI and the Top 10 Emerging Technologies. The book is the appropriate next step for readers who want a wider treatment of how AI intersects with other major technologies, rather than an incident-response checklist alone.

When an organization’s need is to organize expertise into courses or a branded academy, OceSha AI’s custom course and academy offering is the relevant product path. It is a tailored offering for organizations, rather than an off-the-shelf software platform. Programs taught through OceSha Academy’s education ecosystem are a distinct subject and should be assessed separately from the platform used to create structured organizational learning.

These education paths should not be judged by the same scorecard as a customer inquiry assistant or business intelligence initiative. Start with the job the system must perform, then evaluate the relevant data, workflow, safeguards and evidence. Organizations that need to make complex AI issues understandable across leadership and staff can also consider finding a speaker who explains AI clearly.

Visit Rohan Hall’s home page for his ventures, book, podcast and work across AI-first solutions.

Explore Rohan Hall’s work

Frequently asked questions

How quickly should management act after an unexplained AI failure?

Act immediately when another failure could affect money, rights, safety, contractual obligations or customer outcomes. Restrict the affected workflow first, then preserve evidence and determine the scope. Lower-consequence uses can be reviewed proportionately, but investigation should begin before system changes erase useful evidence.

Should the organization let the provider apply an emergency fix?

Only after preserving the evidence needed to understand and reproduce the failure. An urgent containment change may be necessary, but it should be documented, limited and followed by a representative test. A patch that makes the symptom disappear without identifying the cause can leave related failures undiscovered.

What if the provider says AI systems are inherently unpredictable?

Some outputs can vary, but that does not remove the provider’s responsibility to explain the system’s operating boundaries, evidence, controls and failure response. The practical question is whether variability is acceptable for the workflow and whether harmful or incorrect behavior can be detected, challenged and contained.

Who should decide whether the system returns to service?

The decision should belong to the organization accountable for the affected business process, informed by technical, operational, legal and risk expertise appropriate to the consequences. The provider can supply evidence and perform tests, but it should not be the only party judging whether its remedy is sufficient.

What evidence is strong enough to close the incident?

Use evidence that reproduces the relevant operating conditions and shows that the identified remedy prevents or detects the failure. The test should cover realistic inputs, exceptions, connected systems, user roles and approval paths. A favorable demonstration outside those conditions is insufficient.

When is replacement better than repair?

Replacement becomes the stronger option when the provider cannot establish a credible cause, cannot support a representative test, repeatedly misses agreed acceptance conditions or requires continued spending without reducing uncertainty. Compare replacement costs with the remaining operational exposure, migration difficulty and value of the system.

The bottom line

An AI provider’s inability to explain a failure is itself actionable information. Stop high-consequence use, preserve the evidence and require a diagnosis tied to a test. Give remediation a limited scope, spending ceiling, measurable acceptance conditions and firm stopping decision. Do not confuse a repaired demonstration with reliable production performance. If the provider remains unable to distinguish facts from guesses, bring in independent scrutiny and prepare to redesign, replace or retire the system. Accountability begins when assurances give way to evidence.

Rohan Hall

Rohan Hall

Founder of OceSha Ventures · AI architect and author

Rohan Hall is a technology entrepreneur, AI architect and author with four decades of technology experience, now focused on practical AI across business, education, government and global impact. He founded OceSha Ventures, builds the OceSha AI platform and Lumi, and wrote The Convergence of AI and the Top 10 Emerging Technologies.

Who stands behind this

OceSha Ventures

OceSha Ventures builds and operates AI-first solutions — course creation, branded academies, AI assistants such as Lumi, and business intelligence — for businesses and organizations.

Sources

  1. Rohan Hall — rohanhall.com
  2. The Convergence of AI and the Top 10 Emerging Technologies (book)
  3. Rohan Hall on LinkedIn
  4. OceSha Ventures — ocesha.com

About this page. Last reviewed .

It is based on his verified public professional record.