Skip to main content

Essay

What a Decision Looks Like When You Can Actually Prove It

Sam Carter
Sam Carter2 Apr 2026 · 3 min read

A core banking platform reconstructs decisions after the fact.

What does one look like when the reconstruction isn't needed?


The difference

A provable decision is not a collection of logs. It isn't a trace, a set of events, or a timeline you rebuild from fragments. It is a single artefact — something you can retrieve, read, and verify.


A simple example

A loan application is declined at 14:02 on a Tuesday in March.

In a typical underwriting stack you find the input on the originations service, the policy in a separate rules engine repo, the outcome in the core ledger, and the reasoning nowhere — only inferred, six months later, by an analyst stitching the pieces back together. By the time the applicant's solicitor writes in, policy v3.1 has been retired and replaced with v3.4. The inputs survive. The outcome survives. But the policy version that was live at 14:02 cannot be verified against policy as it stood that afternoon.

The analyst spends two weeks producing an answer that is plausible, defensible, and partly invented.


Now remove the reconstruction

Imagine the decision exists as one object. Not spread across systems. Not dependent on what's still available. Captured at the moment it was made.


The decision

Decision

Loan application declined

Input
Income: £48,000 · Debt-to-income: 43%
Policy
Credit Policy v3.1 · DTI threshold: 40%
Context
Risk band: B
Result
Declined
Timestamp
14:02 — 12 March
Signature
b7f3a9c…

What matters here

Everything needed to understand the decision is already present: the input that was evaluated, the policy that applied, the threshold that triggered the outcome, the context it was made in, the exact policy version in effect, the time it happened, and a signature proving it hasn't been altered since.

Not inferred later. Captured once.


Reading instead of rebuilding

Six months later, when the solicitor's letter arrives and someone asks why was this decision made, the analyst doesn't query five systems. She doesn't reconstruct context.

She reads it.

Asked

Why was this loan declined on 12 March at 14:02?

RCP-LOAN-43821 VerifiedResolved in 2.1 seconds

Why this is different

Better logging would not solve the reconstruction problem.

The fix is not more events about the decision — it is a different output. The system stops producing activity records and starts producing decisions.


The shift

A decision is the output, not a side effect.

A core banking platform treats a decision as something that happens inside the system, then disappears, leaving behind a record of activity. A provable system treats the decision itself as the output — complete, self-contained, able to stand on its own without the surrounding apparatus.


Closing

A decision the analyst must rebuild is always uncertain.

A decision you can read is something else.

That is the difference between logs and proof.

Decision Assurance

A decision you can read is the one you control.

Inspect a receipt

More from the Journal