为AI决策流程构建可审计的防篡改证据链,确保每一步推理都可追溯且不可篡改。
AuditWeave: A Tamper-Evident, Auditor-Navigable Evidence Layer for AI-Assisted and Data-Transformation Workflows

- 用哈希链构建追加式证据账本,记录AI与数据转换全流程
- 每条事件处理仅耗时数十微秒,2000次测试中100%检测出四种篡改行为
- 适合审计员、合规官等需要追溯具体结论依据的人员使用
AI系统在审计、金融、医疗等受监管领域日益用于支持关键决策,由此产生持续需求:事后需重建某结论所依赖的证据,并证明推理记录未被篡改。现有工具分别解决模型可观测性、漂移监控、治理报告等问题,但面向机器学习工程师,而非需追溯特定结论的审查者。本文提出AuditWeave,一个无运行时依赖的轻量级Python库,将AI辅助与数据转换工作流的每一步记录至单一追加式、哈希链式账本中。统一的小型、系统无关事件词汇表覆盖检索增强生成(RAG)管道与表格/湖仓转换,使跨类型结论可端到端追溯。在密封账本中,任何修改、重排、插入或删除事件均可通过链验证检测。我们描述设计并评估了参考实现的记录开销、可扩展性及篡改检测正确性:每事件成本约数十微秒,哈希链结构在2000次随机测试中对四类注入变异均100%检出。
原文摘要 · Abstract (English)
AI systems are increasingly used to assist consequential decisions in regulated domains such as auditing, finance, and healthcare. This creates a recurring obligation: an organization must be able to reconstruct, after the fact, which evidence informed a given conclusion, and to show that the record of that reasoning was not altered. Existing tools address related but distinct problems - model observability, drift monitoring, governance reporting - and are built for the machine-learning engineer operating a system, not the reviewer who must trace one specific conclusion back to its supporting evidence. We present AuditWeave, a lightweight Python library, with no runtime dependencies, that records the steps of AI-assisted and data-transformation workflows into a single append-only, hash-chained ledger. A small, system-agnostic event vocabulary spans both retrieval-augmented generation (RAG) pipelines and tabular/lakehouse transformations, so a conclusion that draws on both can be traced end-to-end through one record. Within a sealed ledger, any modification, reordering, insertion, or deletion of events is detectable through chain verification. We describe the design and evaluate recording overhead, scalability, and tamper-detection correctness on the reference implementation. The integrity guarantees cost tens of microseconds per event, and, as the hash-chain construction implies, verification flagged every injected mutation across four mutation classes over 2,000 randomized trials.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。