ਆਡਿਟ ਪੁਨਰ-ਉਤਪਾਦਨਯੋਗਤਾ 'ਤੇ ਬਣਿਆ ਹੈ. ਜੋ ਵਰਕਿੰਗ ਪੇਪਰ ਮੁੜ-ਪ੍ਰਦਰਸ਼ਨ ਨਹੀਂ ਕੀਤਾ ਜਾ ਸਕਦਾ, ਉਹ SA 230 ਦੀ ਪਰਿਭਾਸ਼ਾ ਅਨੁਸਾਰ, ਦਸਤਾਵੇਜ਼ੀਕਰਨ ਨਹੀਂ ਹੈ. ਜਨਰੇਟਿਵ AI ਉਲਟ 'ਤੇ ਬਣਿਆ ਹੈ, ਅਨਿਯਮਿਤ ਸੈਂਪਲਿੰਗ, ਤਾਪਮਾਨ ਡ੍ਰਿਫਟ, ਪ੍ਰਾਂਪਟ ਸੰਵੇਦਨਸ਼ੀਲਤਾ. Coraa ਫਾਊਂਡੇਸ਼ਨ ਮਾਡਲ ਨੂੰ ਇੱਕ ਪੇਟੈਂਟ-ਬਕਾਇਆ ਨਿਰਣਾਇਕ ਐਗਜ਼ੀਕਿਊਸ਼ਨ ਪਰਤ ਵਿੱਚ ਘੇਰਦਾ ਹੈ ਤਾਂ ਜੋ ਉਹੀ ਲੇਜਰ, ਉਹੀ ਮਾਪਦੰਡਾਂ ਵਿਰੁੱਧ, ਹਰ ਵਾਰ ਉਹੀ ਨਤੀਜੇ ਪੈਦਾ ਕਰੇ, ਬਾਈਟ-ਇੱਕੋ-ਜਿਹੇ, ਹੈਸ਼-ਤੁਲਨਾਯੋਗ, NFRA-ਰੱਖਿਆਯੋਗ.
Two paths to the same audit conclusion. One leaves traces; the other doesn't.
The mapped ledger data, plus the configured standards, plus the materiality memo, plus the rule weights, are hashed into a unique engagement key. This key is the input to every classification, sampling, and reporting step that follows.
Foundation model calls run inside the patent-pending deterministic wrapper, fixed seeds, fixed sampling, fixed token order. Output is a function of input only, not of time, server, or load. The wrapper logs every call's prompt, seed, and response into the engagement record.
Every classification produced is bound to an ICAI Standard on Auditing reference, an Income Tax Act section, a GST Act provision, or a Companies Act clause. Rules that do not have an anchor cannot be created, the engine refuses ungrounded outputs.
Any engagement can be re-run, days or years later, from the immutable Engagement Log. The re-run produces a byte-identical file. If the file diverges, the engine raises a deterministic-integrity alert and the audit team is notified before the partner sees it.
When NFRA or peer review pulls a file, they can re-run the engagement themselves with the published seed and compare hashes. A matching hash is the defence, not a story you tell, a number you compare.
Two parties holding the same mapped ledger data can run the engagement independently and exchange hashes. If the hashes match, the audit is reproducible. If they do not, the engine pinpoints exactly which classification diverged and why.
Every sample, every classification, every threshold decision carries the seed that produced it. Re-run with the same seed = same result. The seed is part of the working paper, not metadata.
If the wrapper detects a foundation-model drift, a non-deterministic API call, or a clock-dependent output, the engagement halts and surfaces the alert. The team can choose to lock the prior deterministic version or investigate.
The deterministic method is publishable and auditable, NFRA inspectors and peer reviewers can verify the algorithm without seeing Coraa's model weights. The defence is built on math, not access.
