Let the AI Read. Don't Let It Decide.
Defensible AI, not just accurate AI: why, in high-stakes domains, the model should read the evidence but never make the call.

Most AI looks incredible in a demo. Almost none of it survives someone checking the math.
I spent the last stretch building AI for a real-estate company whose entire business comes down to one question: what is a property worth, and what will it be worth once the work is done? Get it right and you make money. Get it wrong and you lose it, not in a dashboard, in the bank. When the output of your model is an offer someone is about to wire money against, "the AI said so" is not an answer. It is a liability.
That constraint changed how I build with AI. It taught me to care less about whether a model is accurate and more about whether it is defensible, and defensibility is the thing most teams get backwards.
The problem isn't that AI is wrong. It's that you can't prove it's right.
Everyone benchmarks accuracy. Almost nobody benchmarks defensibility: whether you can explain a result, reproduce it on demand, and show your work when someone pushes back.
In low-stakes software that gap is invisible. A chatbot gives a slightly-off answer and nobody is underwriting a loan on it. But the moment an AI output feeds a real decision, a valuation, a loan approval, an insurance quote, the people downstream stop asking "is it usually right?" and start asking "why is this one right, and can you show me?" An underwriter will ask. An auditor will ask. A lender whose money is on the line absolutely will.
The teams that ship AI into these domains and then quietly pull it back almost never fail on accuracy. They fail because they built a system that gets an answer but cannot defend it.
The lesson: reproducibility beats raw accuracy.
Here is the reframe that made everything click. In a high-stakes domain, a more accurate black box is worth less than a slightly less accurate model that can show exactly how it got there.
The black box has no recovery path. When it is wrong, and it will be, you cannot tell why, you cannot fix the specific failure, and you cannot reassure the person holding the risk. The explainable model, when it is wrong, tells you which input drove the mistake, and you correct it. One of them compounds trust. The other compounds doubt.
So the first thing we stopped optimizing was the leaderboard number. The first thing we started optimizing was a different question entirely: can two people run this and get the same result, and can either of them explain it to a skeptic?
The fix: let the AI read, but never let it decide.
This is the pattern I would put on the wall of every applied-AI project now.
AI is unbelievably good at reading. Point a vision model at property photos and it will grade the condition of a kitchen or a roof about as well as a person would. Hand it a messy third-party inspection report, any vendor, any format, and it will pull the findings into clean structured data. Give it a stack of loan documents and it will extract every fact worth knowing. That is the part of the job that used to eat hours of human attention, and the models are genuinely great at it.
AI is a terrible place to put a decision you have to defend. The moment you let the model decide the number, the valuation, the approve or reject, the final call, you have buried your logic inside a system that reasons a little differently every time you ask and cannot tell you why.
So we split it, hard. The AI reads the evidence. Deterministic code makes every decision. The model grades a photo and extracts a fact. Plain, boring, reviewable code takes those facts and produces the valuation, the recommendation, the accept or reject, the same way every time, with every step traceable back to the evidence that drove it.
The payoff is that "why is this right?" finally has an answer. Not "the model was confident," but "here is the evidence, here is the rule that used it, here is the number." A skeptic can walk the entire chain. That is what turns a demo into something a business will actually run on.
None of this is new in regulated machine learning. Underwriting, fraud, and claims teams have separated extraction from decisioning for years. What is new is how fast the current let-the-agent-decide, let-the-agent-act wave is speed-running past that lesson and straight into systems nobody can explain. The hype moved on. The reason for the pattern did not.
Distrust your own AI.
The most uncomfortable discipline, and the most important, was treating our own results as suspect until proven otherwise.
We had a finding we were proud of, a genuinely useful insight about where the biggest source of error in the whole system actually lived. It would have been easy to write it up, ship it, and move on. Instead we tried to break it. We re-derived it from scratch, three separate times, with independent methods that had no reason to agree. And in doing that we caught ourselves being wrong: a chunk of the dataset had been silently duplicated, and those duplicate rows had inflated the original result into a headline that did not hold. We would have shipped a confident, wrong conclusion if we had trusted the first pass.
That is the tax on defensible AI, and it is worth paying. Pin your benchmarks to a fixed reference so every result reproduces. Split train and test so the model is never quietly graded on data it has already seen. Verify findings adversarially: assume they are wrong and try to prove it. It is slower. It is also the only version of AI that survives contact with someone whose money is on the line.
Why it matters
There is a flood of AI that demos beautifully and dies the first time it meets an auditor. In a serious domain the bar is not "impressive." It is "defensible": reproducible, explainable, and traceable to evidence.
If you are putting AI anywhere near a decision that costs real money, the move is the same. Let the model read. Keep the decision in code you can explain. Distrust your own output until you have tried to break it. Do that, and you stop shipping AI you demo, and start shipping AI you can run on.
At Periscoped we build software that has to hold up when someone checks the math. If you need the defensible kind of AI, let's talk.
Enjoyed this? Explore more on aiMachine LearningApplied AI or get in touch.