Robust evidence and a reconstructable decision.
The threat
the user (or the system) denies what was said or done because the evidence is not robust (tampered logs, missing evidence).
Blind spotWhy classic frameworks miss it
repudiation is reduced to a logs box with no non-malleability requirement: an editable log proves nothing.
MitigationProposed approach
tamper-evident logging (immutable, encrypted logs, verifiable timestamps), compliant retention, the ability to reconstruct a disputed decision.
The proposed control
no critical log can be modified after the fact.
Expected evidence
an observer can verify that an event was not modified.
SourcesReferences and public research
Public researchPublic research sources: MITRE ATLAS 2026.07 (verified technique mapping), OWASP GenAI (model abuse categories), and the public risk-voicebot (aivansoul/risk-voicebot) template defining the 20 checkpoints. No client registry data: generic card, no rating, no verdict.