It's somewhat implied in your phrasing, but I think it is also important to be explicit that you should also record the software/model version of the AI used (a

It's somewhat implied in your phrasing, but I think it is also important to be explicit that you should also record the software/model version of the AI used (as part of the signature/metadata). Otherwise it's not very meaningful, since there's no way to know whether the inference was generated by a malicious program or not. There's a corresponding challenge for the vendor to do proper versioning of the system as they develop and improve on it. Depending on your needs, it may be useful to know about all inferences which happened (even if they were not used). Some kind of append-only ledger which records metadata could be used. Happy to chat more on the topic, as I am actively working on something similar - bobbie.chen@anjuna.io