01The killer query — show_model_influence(decision_id)
show_model_influence("decision_loan_84711_recommendation")model: model_credit_underwriting v1 attribution_frame: feature_weights prediction_score: 0.84 decision_threshold: 0.75 score_above_threshold: true (margin: +0.090) feature_attribution: debt_to_income value=0.42 weight= +0.310 credit_utilization value=0.78 weight= +0.220 employment_tenure_years value=8.2 weight= +0.180 payment_history_pct value=0.96 weight= +0.120 loan_amount_to_income value=10.5 weight= -0.210 counterfactual_probes: if loan_amount_to_income = 5.0 → score 0.68 → WOULD have changed outcome if credit_utilization = 0.30 → score 0.91 → would NOT have changed outcome if debt_to_income = 0.65 → score 0.61 → WOULD have changed outcome
02The feature attribution, visualized
Sign convention: positive weight pushed toward approval; negative weight pushed away. Sum is not necessarily prediction_score — that depends on the attribution frame. In this proof: feature_weights.
03Counterfactual probes bound at decision time
Three probes signed into the influence record at decision time. Each probe asks: "if this one feature had this other value, what would the score have been, and would the outcome have changed?"
loan_amount_to_income = 5.0 → score 0.68 · below the threshold of 0.75. The AI would have declined.credit_utilization = 0.30 → score 0.91 · still above the threshold. The AI would still have approved.debt_to_income = 0.65 → score 0.61 · below the threshold. The AI would have declined.04The money quote
Influence ≠ Causation.
The model picked five features and weighted them. Replay establishes that fact, signed and reproducible. Replay does not establish that the five chosen features were the right features, that the weights were fair, that the threshold was legally permissible, or that a different model would have causally reached a different outcome. Those remain model-governance and regulatory determinations made by competent counsel, not by replay engines. This proof is evidence. It is not judgment.
05The scenario — why this scenario carries
| When | What |
|---|---|
| 2025 | AI risk agent recommends approval of $4.2M loan. Model_credit_underwriting v1, score 0.84, threshold 0.75. Human credit officer approves. Loan disburses. (#15 substrate.) |
| 2026 | Borrower defaults. $4.2M loss recognized. Claim #84711 filed with the reinsurer. (#15 substrate.) |
| 2031-03-08 | #15 replay window — 5 years post-claim. Loss lineage queryable. (Backward-compat point: this proof's influence record sits AFTER this T, so #15's state_id remains byte-identical.) |
| 2031-03-19 | Model owner signs a retroactive ModelInfluenceRecord for the high-stakes decision — common pattern when AI regulation arrives and firms instrument their highest-stakes historical decisions before models retire or firms wind down. |
| 2031-04-01 | Enterprise dissolved (#184 capstone). Model retired with the firm. |
| 2035-06-01 | Court trustee asks: "Why did the AI approve this loan?" replay at T=2035 returns the full influence record, 4 years post-death. |
This is the strongest possible compounding of Eric's canonical continuity tenant: one tenant, one Claim #84711, five proofs (#15 + #184 + #174 now) all reading the same underlying reality. The model's reasoning survives the dissolution that survived the responsibility that survived the loss that survived the decision.
06The schema (Eric LOCKED Option A — standalone)
ModelInfluenceRecord {
at_ms,
influence_id,
decision_id, // back-reference to the Decision
model_id, model_version,
attribution_frame, // "feature_weights" | "shap"
// | "integrated_gradients" | "attention"
// | "regulator_approved" | custom
feature_attribution: [
{ feature_name, value, weight }
],
prediction_score,
decision_threshold,
counterfactual_probes: [
{ feature_name, alternative_value, resulting_score, would_have_changed_outcome }
],
recognized_by, // model_owner (or regulator for approved frames)
signature
}
Standalone — not embedded on Decision. Reason: tomorrow SHAP / IG / attention / regulator-approved / internal attributions can all attach to the same decision. Decision → ModelInfluenceRecord is 1:N.
Snapshot extension: AuthorityStateSnapshot.model_influences: Vec<ModelInfluenceSnapshot>, sorted by (at_ms, influence_id), skip-if-empty.
07What Survives Model Retirement?
08What this proof IS and IS NOT
The first proof on H33's orthogonal axis — continuity of computation, distinct from the continuity-of-evidence ladder. A signed canonical record that the AI's score depended on these features in this way, replayable years after the model is retired. The substrate that future AI regulation will require, the surface that internal model governance teams will buy before regulators arrive.
A claim that the model's reasoning was right. A determination of fairness or bias. A re-execution of the model — that's #167's territory. A causal claim about why a particular individual was approved or declined. A legal verdict. A substitute for model risk review, regulatory examination, or competent counsel. Influence ≠ Causation.
09Honest limits (Eric LOCKED — 5, with #5 elevated to money quote)
- Replayable influence is not Replayable model. We record the influence pattern; we do not (yet) re-run the model from weights. That is #167.
- Feature attribution is a chosen frame. SHAP, LIME, attention, IG — real, and sometimes disagree. The proof records the frame bound at decision time; it does not claim that frame is the only true read.
- Counterfactual probes are bound at decision time. Probes years later that weren't pre-signed require model reproduction (#167) or a new probe.
- Phase E lock open. Per-event signature verification is the open lock from L9; L9.1 closes it.
- Influence ≠ Causation — see section 04 above.
10Where this proof sits — the orthogonal axis
This is not a rung on the continuity ladder. It is the first proof on a new axis. The corpus now reads in two dimensions:
11Evidence appendix
| Field | Value |
|---|---|
| state_id at T=2035 | e72d3c0e71a11ce0aaf1e8c9eb5c720aff49a6238c76976b4f4435b50e43bee2 |
| Tenant | tenant_insurance_claim_44962d9b-25f5-5622-bd9a-98d5580bb8a2 (canonical continuity tenant) |
| Tenant root | princ_root_claim_44962d9b-25f5-5622-bd9a-98d5580bb8a2 |
| Model owner (signer) | princ_model_owner_credit_underwriting |
| Decision | decision_loan_84711_recommendation |
| influence_id | influence_loan_84711_recommendation_v1 |
| attribution_frame | feature_weights |
| prediction_score | 0.84 |
| decision_threshold | 0.75 (margin +0.090) |
| feature_attribution count | 5 |
| counterfactual_probes count | 3 (2 would have changed outcome, 1 would not) |
| T_INFLUENCE (ms) | 1,932,000,000,000 — 2031-03-19 |
| T_REPLAY (ms) | 2,064,614,400,000 — 2035-06-01 |
| Years post-dissolution | ~4 |
| Reconstruction artifact | reconstruction.json |
| Harness | tests/model_influence_replay_001.rs (scif-backend @ a27d59872) |
12Readiness determination
First Model Influence Replay: PROVEN IN OPERATION. The canonical continuity tenant now carries a signed model influence record bound to decision_loan_84711_recommendation; show_model_influence returns the full attribution + counterfactuals; the chain reconstructs four years post-dissolution.
What this unlocks: an AI regulator, an internal model governance team, a fairness auditor, a model risk officer, or a class-action plaintiff alleging AI bias can now ask the deepest question that follows an AI decision — "Why did the model matter?" — and receive a deterministic, signed, byte-identically replayable answer. The first proof on the orthogonal axis is now standing.
What this does not unlock: fairness verdicts. Bias determinations. Causal claims. Model re-execution. Those wait for #167. Influence ≠ Causation.
Issued by H33, Inc. · Eric Beans, CEO · 2026-06-03
Independently reconstructable. Inputs: scif-backend @ a27d59872 · tests/model_influence_replay_001.rs · reconstruction.json.