Principles
Principles.
Deciding with evidence.
Separating what an organisation claims, what it can prove and what it still needs to review.
Start readingAuditing · evidence · responsibility
Three questions that structure my work.
- What supports this claim?The relationship between what is stated and what can be demonstrated.
- Can I trust the evidence?Origin, context and integrity before drawing a conclusion.
- Who is accountable for the decision?The link between competence, authority and responsibility.
To see these questions applied to a decision, explore the AI-recommended maintenance scenario: what is authorised, with what evidence and who can intervene.
These questions accompany my professional practice and my participation as a judge for the Premio Argentina Economía Circular.
Four parts. One journey.
What makes a claim trustworthy, who is accountable and what changes with AI, the state and certificates.
Foundations
What makes a claim trustworthy and what makes it fragile.
The auditor precedes the method
Method without professional practice produces checklists. Professional practice without method produces opinion.
What is claimed must be demonstrated, or not claimed
A technical claim gains strength when it allows the actor, date, criterion, scope and validity to be reconstructed; each missing element reduces what can be concluded.
The epistemic scope of certification
A certificate supports a conclusion within its scope. Beyond that boundary—and within it, beyond the sample—risk retains open questions.
Evidence is also audited
Evidence inherits part of its trustworthiness from its provenance and custody; if its integrity cannot be verified, the conclusion needs corroboration.
The limits of the sample
Every sample expresses a theory of risk. If selection is driven by convenience, that theory loses its ability to support the conclusion.
Architecture
The technical forms, the three types of auditor, identifiable responsibility and the third-party chain.
The four forms · accreditation, certification, validation, verification
A statement of conformity needs an identifiable and traceable criterion; the document does not increase the strength of the process that produced it.
The three types of auditor
First, second and third parties have different mandates. In certification, the auditor gathers evidence and the body makes the decision.
The identifiable person responsible
Technical accountability requires identifiable roles, documented authority and a means of demanding answers.
The third-party chain
The strength of the certificate depends on the competence, scope, impartiality and independent decision that underpin its chain.
Discipline
Leadership, deliberation, clean cycles, auditing at the system's pace and auditor principles.
Leadership cannot be delegated
Top management can distribute tasks; responsibility for the effectiveness of the system remains with an identifiable body.
Silence at the table
An unasked question does not prove a failure; it indicates which assumption should be tested before closing the review.
Continuous auditing
Audit frequency is a technical decision: it must connect risk, change, obligations and response capability.
Clean cycles and the dark zone
Several cycles without findings do not prove a failure; they justify checking that the sample, routes and assumptions have not become routine.
Auditor principles
Auditing means supporting a conclusion with sufficient evidence, stated limits and an accountable signature.
Current era
AI, the State, certificates and accountability when everything demands more proof.
The speed of AI and the pace of governance
An artificial intelligence system without accountable people, traceability and controls proportionate to its risk falls outside governance.
The verifiable State · governments that cannot demonstrate
A serious State does not ask for trust · it leaves traces so that trust can develop.
The verifiable certificate
A certificate that cannot be checked through an official channel remains a claim awaiting verification.
The next privilege will be the ability to demonstrate it
A commitment without evidence does not allow a third party to conclude that it is being fulfilled.