Accountability & Audit
Review before commit checkpoint
No consequential agent action is binding until the person has reviewed it, so the agent's work is presented for approval with each item's source named.
Check before we submit
Your assistant prepared this. Nothing is sent until you confirm.
On what authority
Confirmation receipt showing what happened
Every agent action produces a durable, attributable record, issued to the user as a confirmation they can keep and cite later.
City Digital Services will assess your return. You’ll receive your notice of assessment within 14 days. This receipt stays in Your activity. You don’t need to keep this page open.
Audit trail with role-based views
One audit record is re-projected per audience, so a user, a caseworker, and an investigator read the same event at the grain each of them needs.
Your assistant submitted your return using your employer and bank records.
You reviewed and confirmed it, after editing one figure.
An automated assessment worked out your $312.40 refund.
A caseworker will check the assessment before it’s final.
The user’s view leaves out API calls and model IDs. It favors a timeline that’s easy to read over one that lists everything.
Reasons for decision
The legal duty to give reasons for a decision becomes a structured explanation, shown before submit and kept for any later dispute.
Recourse and dispute resolution
A dispute is anchored to a specific action on the record, so raising one starts from the agency's own account of what happened rather than from a blank form.
Dispute action TX-2026-4829
We’ve filled in the record for you. You only need to tell us what went wrong.
New disputes arrive with the action record attached. The response clock starts when a dispute is received.
Submit the dispute on the left to watch it arrive here. Each dispute is tagged to an agent or model version and also counts toward the overall error rate. When many users report the same fault, it registers as one pattern rather than as unconnected phone calls.
Showing liability at the point of action
Who carries the cost if the agent gets it wrong is stated in plain language at the moment of authorization, rather than discovered afterwards.
The statement is always shown, and the record notes that it was shown. The accredited and pending versions never require a checkbox to continue — forcing routine acknowledgment trains click-through. Only the not-accredited state gates authorization behind an explicit opt-in. The version that appears follows from the provider’s accreditation status.
Reversibility and undo
An action's legal reversibility is shown as a plain-language badge before the user authorizes the agent to take it.
File your property tax relief application
You can correct this until your assessment issues. After that, you would lodge a formal objection.
Circuit breaker for agent actions
An error rate crossing a declared threshold suspends the agent automatically, and the remediation reaches every user the failure touched, not only those who complained.
Triggered by the declared threshold, not by an operator.
- Why
- Its error rate reached 21.3%, above the 20% halt threshold declared for this agent.
- What stopped
- The agent files no further concession assessments. Rebate filing and address change are unaffected.
- Suspected cause
- city-intake-v5 value mapping, a dependency shared with the throttled canary.
- Still open
- 1,204 assessments made between 14:41 and 15:04 stand until an operator reverses them.
The access side of this pattern protects the user. Remediation is automatic: every affected user is notified, and their transaction is reversed. While the fleet is halted, a staffed fallback channel handles urgent transactions.
Notice of automated action before effect
Nothing takes effect before the person has been told, so the agency issues a proposed-action notice carrying the reasons and the date the action lands if unanswered.
Proposed action
PA-2026-0341An automated data-matching process produced this proposed assessment. No officer has reviewed it.
A rebate overpayment of $486.00 for March to May 2026.
- Reported income for March to May — $9,140, from employer payroll reporting.
- Rebate payments made over the same period — $1,212, from the rebate payment record.
- Income ceiling for this rebate — $8,400 a quarter; income above it reduces the rebate.
Nothing happens before 16 Jul. If you do not respond by then, the adjustment takes effect and a repayment notice follows.
The notice is the artifact that starts the clock: the response window runs from confirmed delivery, not from dispatch. An unanswered notice routes to a human officer before the effect date; it never converts on its own into enforcement.
Contest before consequence
Contesting a decision suspends its enforcement by default, and the confirmation says plainly what has stopped and when a decision is due.
Overpayment adjustment
OA-2026-0257Contesting this decision stops its enforcement while the review runs.
Suspension is the default effect of lodging, not a discretionary grant the person must know to request. A contest that fails costs nothing: no fee, no mark on the record, no harsher recovery schedule.
Symmetric duties on the state's agent
The duties an agency owes a person are published as a schedule its own agent fleet has to meet, action class by action class.
Class: Information request
The schedule mirrors the duties expected of a person’s agent back onto the state’s own fleet. An action class missing any duty does not deploy, and an auditor, or the person’s own agent, can check any fleet action against the published schedule.
No surfaces match this filter.