Skip to content
Adrythm
AI and automation

Explainability

interpretability / explainable AI / XAI / model explanation

In short

Explainability is being able to say how an AI system reached a decision. NIST separates three questions: transparency answers what happened, explainability answers how, and interpretability answers why it meant what it did. A global explanation describes the model. Only a local one answers a customer.

NIST splits one word into three, and the split is the useful part. Transparency, explainability, and interpretability are distinct characteristics that support each other. Transparency answers what happened in the system. Explainability answers how a decision was made. Interpretability answers why it was made, and what it means to the person affected. Most arguments about whether an AI system is explainable are really arguments about which of those three somebody wants.

The framework is direct about what the property is for. Explainable and interpretable AI systems offer information that will help end users understand the purposes and potential impact of an AI system. Risk from lack of explainability may be managed by describing how AI systems function, with descriptions tailored to the user's role, knowledge, and skill level. There is a practical benefit as well. Explainable systems can be debugged and monitored more easily, and they lend themselves to more thorough documentation, audit, and governance.

Vendor tooling makes the split concrete in a way the framework does not. Microsoft describes interpretability as generating human-understandable descriptions of the predictions of a machine learning model, then divides the output in two. Global explanations answer, for example, what features affect the overall behavior of a loan allocation model. Local explanations answer why one particular customer's application was approved or rejected. Feature importance tells you how each data field affects the model's predictions, which is what makes either answer possible.

The same page names a second reason to care. You use interpretability to uncover potential sources of unfairness by understanding whether the model is basing predictions on sensitive features, or on features that are highly correlated with them. It also names what you are up against. Opaque-box models are those models for which you have no information about their internal workings.

In practice

The question that matters arrives as a complaint. Somebody was declined, deprioritized or charged differently, and they want to know why. A global explanation cannot answer that, because it describes the model rather than the case. If a system will make decisions about individual people, the time to ask whether local explanations are available is before it is switched on, not after the first phone call.

Not the same as

Showing the code
Access to a model does not produce a reason. The explanation is a generated description of what drove a prediction, which is a separate capability that has to exist.
A confidence score
A number attached to an answer says how sure the system is. It does not say which inputs moved the result, which is the part a person is actually asking about.

Why it matters to you

Any AI that sorts customers, prices work or screens enquiries will eventually produce a decision somebody disputes. What you can say at that moment was decided when the system was chosen. It is also the same capability that lets anyone check whether the model is leaning on something it should not be, so the case for asking early is not only about answering complaints.

What to ask or check

  1. 01If a customer asks why the system decided this about them, what can we show?
  2. 02Can we see which inputs drove a single decision, or only the overall pattern?
  3. 03Which inputs are sensitive, and which ordinary ones stand in for them?

What people get wrong

That an explainable system is one you can inspect. The framework treats explanation as information the system offers to the people affected, and a vendor generates it as a description of what drove a prediction rather than as access to the model.

Red flags

  • An AI decision tool with no way to explain one particular decision.
  • Explanations available to the vendor and not to you.
  • Nobody able to list which inputs the model is allowed to use.

Who owns it

Whoever chose the system. It is a property of what was bought rather than something that can be added on the day a customer asks.

Where you will see it

In the first complaint about an automated decision, and in any questionnaire that asks how automated decisions are explained.

Model drift

Model drift is an AI system getting worse without anyone changing it. Microsoft names the causes plainly: data distribution changes, training-serving skew, data quality problems, shifts in environments and consumer behavior changes can all make a model stale. NIST sets the bar over the entire lifetime of the system, not at launch.

Hallucination

A hallucination is AI output that sounds right and is not. OWASP describes the model filling gaps in its training data using statistical patterns, without understanding the content, so the answer can be fluent and unfounded at once. Its own first example is an airline that was successfully sued over its chatbot.

AI agent

An AI agent is a model that has been granted the ability to take actions, not just produce text. OWASP says the damage one can do comes from three grants: excessive functionality, excessive permissions and excessive autonomy. What it is allowed to do matters more than how good it is.

Training data

Training data is what a model learned from. The question owners ask is whether their own data joins it, and there is no single answer: OWASP names three separate stages, pre-training, fine-tuning and embedding. A commitment worth having names the stage and comes in writing.

Retrieval augmented generation

Retrieval augmented generation is how an AI answers from your documents without being trained on them. OWASP describes it as combining a pre-trained model with external knowledge sources at answer time. So the documents sit in a store the system reads from, and who can read that store is the question.

Prompt injection

Prompt injection is when text an AI system reads becomes an instruction it follows. OWASP notes the text does not have to be visible to a person, only parsed by the model, and that no fool-proof prevention is known. The UK's national cyber security body says the same.

Want this explained against your own numbers?

Twenty minutes, a straight answer, and no follow-up sequence if you decide not to work with us.