- The board question is "prove what it did," not "did AI touch it."
- The evidence chain has four links: hypothesis, approval, execution record, graded verdict.
- A missing link breaks the whole chain. A verdict with no prior hypothesis is an opinion.
- Guardrails are set before anything is proposed: budget caps, a spend ledger, a kill switch.
- "The algorithm optimized it" is not an answer that survives a follow-up question.
The question a board asks about AI in ad spend is almost never "did AI touch the account." It's "can you prove what it did." Those sound similar and aren't. The first is answered yes or no. The second requires an evidence chain: a stated hypothesis before the change, a logged human approval, the executed change itself, and a graded verdict afterward. A pitch that can't produce that chain for one specific change, on request, hasn't answered the governance question, no matter how fluently it talks about AI.
The catch is that nobody asks this question in the meeting where you're buying. They ask it in the meeting where something went wrong, and by then the record either exists or it doesn't. You cannot retroactively document a hypothesis. The prediction has to have been written down before the outcome was known, or it isn't evidence, it's a story told afterward by someone with an interest in the ending.
Why "did AI touch the account" is the wrong question
Because it's binary, and binary questions don't survive scrutiny. AI touching a large account with a documented hypothesis, a named approver, and a graded result, and AI touching the same account with none of those, are both truthfully described as "AI touched the account." Only one of them holds up when someone asks a second question.
The presence of AI isn't the risk. The absence of a record is. Automation without an audit trail is outsourced risk wearing a modern label, and the label is the part that makes it feel new. Boards have been asking a version of this question about outsourced decisions for decades. What's changed is the volume: a system that proposes changes continuously produces far more decisions than a quarterly agency review was ever designed to cover.
Who this doesn't apply to: if a single person makes every change in one platform and the total spend is small enough that the board never asks, this is overhead you don't need yet. The threshold isn't a dollar figure, it's the first time someone senior asks a question you can't answer from memory. Most teams cross it before they build for it.
What does an actual evidence chain look like?
Four links, and all four have to exist.
1. A hypothesis and a preview
What would change, on which entity, and what it's predicted to do, stated before the change ships. A usable hypothesis names the lever, the direction, the metric, the window, and the threshold for success. "Improve performance" is not a hypothesis; it's a hope that can't be falsified and therefore can't be verified either.
2. A logged human approval
Who approved it, and when. Not "the team reviewed it." A name and a timestamp. This is the link that converts a system event into an accountable decision, and it's the one auditors care about most, because it's the only link with a person attached.
3. An execution record
Confirmation the change actually landed on the platform, with the system's own timestamp. The non-obvious detail: platforms report on their own clocks and timezones. If your record inherits platform timestamps, the change history across six accounts won't line up, and reconstructing a sequence of events becomes an exercise in timezone arithmetic at exactly the moment you can least afford it.
4. A graded verdict
Improved, hurt, or neutral, judged against the original prediction, and then kept. Permanently. Including the ones that graded hurt.
Miss any one and the chain breaks in a specific way. A hypothesis with no approval is a system acting without oversight. An approval with no verdict is oversight with no accountability for the result. A verdict with no hypothesis is an after-the-fact observation dressed up as proof, and it's the most common failure, because it's the one that still produces a confident-sounding slide.
What happens when a change hurts and nobody logged why it shipped?
This is the failure mode worth walking through in detail, because it's the one that actually ends up in a board meeting.
Performance drops. Someone pulls the account and finds a budget reallocation from three weeks ago. Now the reconstruction begins: who made it, what were they trying to do, was it discussed, did anyone model the downside. The evidence available is a change log that says a number changed, a Slack thread that has moved on, and two people with different memories of a call.
What you can tell the board in that state is that something changed and performance got worse. What you can't tell them is whether it was a reasonable decision that didn't work out, or an unreasonable one nobody checked. Those are very different findings, and the difference determines whether the response is "keep going, adjust the model" or "who is accountable here." Without the record, the room defaults to the second reading, because an unexplained loss reads as negligence even when it wasn't.
The second-order damage is worse than the incident. Once a team has been through one unreconstructable failure, it gets conservative, changes slow down, approvals get deferred upward, and the account stops being optimized because nobody wants to own the next one. A missing evidence chain doesn't just cost you the explanation. It costs you the appetite to keep testing.
Illustrative arithmetic, use your own volumes. Say your team ships 15 changes a week across six platforms. Over a quarter that's roughly 195 changes. If the board asks which ones moved the number and you can reconstruct the reasoning behind four, you don't have a change history, you have four anecdotes and 191 gaps. The specific figure doesn't matter. The ratio is the thing, and it doesn't improve by adding headcount to a process that was never recording in the first place.
The number that matters: one. A governance system is only as strong as its ability to produce the complete record for one change, picked at random, on demand. Aggregate reporting is not evidence of governance; it's the thing that hides the absence of it.
What does a spend ledger actually prevent?
A spend ledger is a running record of what changed, when, who approved it, what it was predicted to do, and how it graded. Four concrete things it prevents:
Drift. Ten individually reasonable 10% budget increases across ten campaigns is a 10% account-level increase that nobody approved as such. A ledger makes aggregate movement visible as a number instead of as ten separate justified decisions.
Unattributable changes. Every change has a name attached. That sounds like a blame mechanism and it functions as the opposite: when the record shows a change was reasoned, previewed, and approved, a bad outcome is a bad outcome rather than a personnel question.
Disputed history. Whether a change was made before or after a performance shift is a factual matter with a timestamp, not a matter of recollection. This is the one that ends arguments with agencies, vendors, and internal teams fastest.
Silent repetition. Kept verdicts mean a lever that graded neutral in March doesn't get re-proposed as a fresh idea in September by someone who wasn't there.
What a ledger is NOT: a performance dashboard. A dashboard answers "how is the account doing." A ledger answers "what did we do and what did we expect." Plenty of vendors will show you the first and describe it as governance.
What should a board or leadership update on AI ad ops actually contain?
Not the account's ROAS trend. That answers a different question than the one being asked.
| A performance update shows | A governance update shows |
|---|---|
| Spend, ROAS, CPA trend | Number of changes proposed, approved, and rejected |
| Channel mix | Verdict distribution: improved / hurt / neutral |
| Period-over-period comparison | What happened automatically when a change graded hurt |
| Forecast vs. actual | Guardrail status: caps, ledger coverage, kill-switch tests |
| "The algorithm optimized toward the goal" | One named change, end to end, as a worked example |
The last row is the one that changes the room. Walking a board through a single change, here's what we predicted, here's who approved it, here's when it ran, here's how it graded, here's what happened next, does more for confidence than any aggregate slide, because it demonstrates the system rather than describing it.
The uncomfortable version of this advice: include a change that graded hurt. A governance update where everything improved reads as curated, and a sophisticated board will read it that way. Showing a failure that was caught, graded, and reverted automatically is the strongest possible evidence that the controls are real.
What guardrails should already be in place before this question comes up?
Three, configured by your team before any change is ever proposed.
Budget caps, a ceiling on what any single change can move and on aggregate movement over a period. The aggregate limit is the one most teams skip and the one that prevents drift.
A spend ledger, covered above. The test is whether it's populated automatically as a byproduct of execution, or maintained by a person. A ledger a human has to remember to update is a ledger that will be current right up until the week it matters.
A kill switch, stops execution entirely, immediately. Here's the edge case to raise in any vendor conversation: a kill switch stops future execution; it does not necessarily undo what already ran. Ask directly what happens to changes approved earlier the same day. A vendor who answers both halves separately has thought about it. A vendor who says "it stops everything" hasn't.
These aren't features that slow AI down. They're what makes "autonomy" mean something other than "we gave up control and hoped."
What should you ask a vendor before you sign?
Five questions, and the answers should be concrete rather than categorical.
- Show me the complete record for one change I pick, from last month. Hypothesis, approver, timestamp, verdict. This single request answers most of the others by implication.
- Does anything execute without a human approving it? "Only low-risk changes" is a yes. Ask who defines low-risk and whether you can change the definition.
- What happens automatically when a change grades as hurt? Automatic revert is one answer. "It appears in the dashboard" is a materially weaker one and should be priced accordingly.
- Are verdicts retained permanently, including failures? A system that prunes losing changes from the history is optimizing its own reporting.
- Can I export the ledger? If the evidence chain only exists inside the vendor's interface, your governance position depends on your renewal.
Ask them to show a failed change in the demo environment. The reaction to that request is itself informative. If the same evaluation is running against an internal build, the questions don't change, they just get harder to answer.
FAQ
Related reading
- Compliance and Privacy in Agent-Run Ad Accounts: The Questions Your Legal Team Will Ask, the adjacent set of questions legal asks once the board has signed off
If the question you'll be asked is "prove what it did," the record has to exist before anyone asks.
Explore Adlyse



