REMISThe problem of proof, stated.
A high-risk AI system, within the meaning of Regulation (EU) 2024/1689, continuously produces decisions that affect people : credit scores, application screenings, medical record rankings. When one of these decisions is challenged - by a user, a regulator, a judge - the operator must be able to demonstrate that this decision was produced at this instant, in this configuration, by this model.
None of the usual mechanisms make this possible in an enforceable way. Application logs are under the exclusive control of the operator, and therefore revocable. Regulatory registers (GDPR, art. 30) describe processing activities, not events. Observability dashboards summarize : they prove nothing.
Logs record. Governance organizes. Observability monitors. Evidentiary infrastructure attests.
This four-part division is not a figure of speech. It describes four distinct regimes of engagement with an event. The fourth - attestation - is precisely the one REMIS exists to serve : where traceability, organization and monitoring stop, REMIS supplies the enforceable proof that was missing.
Where the adjacent categories stop.
Each of these layers is valuable and indispensable in its place. REMIS builds on them and takes over where their mission ends : producing enforceable proof, verifiable by a third party.
Logs & log management
Designed for debugging and retention, they answer the question « what happened ? » superbly. REMIS extends their value by answering the next one : « how do you prove it to a third party, without depending on the operator ? ».
AI governance
A policy and procedural layer : committees, model cards, risk registers. Indispensable for framing risk. REMIS complements it by supplying the singular proof of a specific event, where governance operates at the level of the system.
ML observability / MLOps
Excels at measuring drift, performance and cost over time. REMIS adds a distinct capability : attesting the enforceable truth of a particular event, at a given instant.
Model Risk Management
A prudential banking discipline (SR 11-7 and related), solid on model validation, monitoring and governance. REMIS provides the complementary link : evidentiary artifacts that a third party can verify offline.
Formal definition of a proof package.
A proof package is a self-contained digital artifact P = (h, σ, τ, t) such that :
- h is the cryptographic fingerprint of a qualified event, computed over a canonical representation ;
- σ is a digital signature of h by a key bound to a certificate identifying the author (within the meaning of art. 1367 of the French Civil Code) ;
- τ is a versioned, tamper-evident taxonomic qualification ;
- t is a qualified timestamp within the meaning of eIDAS, applied by a qualified trusted third party.
A package is valid if and only if the four components satisfy the expected cryptographic invariants. Verification requires neither access to the source system nor trust in the operator.
The multi-regime legal framework.
REMIS sits at the intersection of four bodies of law : AI Act (EU 2024/1689) for traceability obligations, GDPR (EU 2016/679) for minimization, eIDAS 2 (EU 2024/1183) for qualified trust services, and French Civil Code (art. 1366-1367) for the evidential weight of a digital writing.
None of these regimes, in isolation, requires a proof package. Combined, they trace its outline : traceable (AI Act), minimized (GDPR), timestamped in an enforceable way (eIDAS), signed and intact (Civil Code). The product that simultaneously satisfies these four constraints is the category.
Privacy-by-design as an architectural principle.
Evidentiary infrastructure should never need the payload to perform its function. REMIS seals the fingerprint of a qualified event - nothing else. This architectural constraint, set from day one, eliminates broad classes of risk (leakage, re-identification, conflict with GDPR minimization) without adding any procedure.
Consequence : proof packages are publishable, archivable and transmissible with no risk to the data. This is what makes offline verification possible.
Industrial implications & scope.
An evidentiary infrastructure of this nature, once adopted by a regulated sector, becomes a shared reference for audit, litigation and prudential review. It thereby establishes itself as a technical commons - a true infrastructure, and not merely an isolated application component.
REMIS publishes its doctrine, its taxonomy and its package schema. The verification code is intended to be open. The barrier does not lie in secrecy : it lies in anteriority, rigour and eIDAS qualification.