Purpose
The Operational Explainability Framework defines how Unseen produces explainability artifacts for Salesforce environments.
Its purpose is simple:
When an operator, executive, auditor, or partner asks, "Why did Salesforce do that?", the institution should be able to answer from evidence rather than folklore.
Explainability is not a technical luxury. It is the operating layer that makes automation governable, supportable, and eventually safe for AI.
Framework Outputs
Every explainability initiative should produce four outputs:
- an automation inventory
- decision logic documentation
- a support playbook for incident response
- an explainability audit checklist and score
1. Automation Inventory Standard
Every automation affecting a revenue-critical object should be documented to a common standard.
Required documentation fields
| Section | Required fields |
|---|---|
| Identity | Automation name, type, version, status, object, event, environment, creation date, last modified date |
| Ownership | Business owner, technical owner, escalation owner, backup owner |
| Trigger | Entry criteria, invoking event, upstream dependencies, initiating user or principal |
| Purpose | Business objective, expected outcome, process step supported |
| Decision logic | Conditions evaluated, branching logic, formulas, decision table reference, exception paths |
| Data touchpoints | Read objects and fields, write objects and fields, required inputs, downstream outputs |
| Dependencies | Invoked flows, Apex classes, integrations, approvals, queues, reports, external services |
| Failure handling | Fault paths, alerts, retries, rollback steps, manual workaround |
| Governance | Last review date, evidence link, test location, change ticket, approved risk notes |
Standard classification tags
Each automation should also carry:
- criticality:
low,medium,high,mission-critical - reversibility:
easy,bounded,hard,non-reversible - action type:
notify,enrich,route,update,approve,orchestrate - explainability status:
fully explainable,partially explainable,opaque
2. Decision Logic Documentation Template
Use the template below for any automation or AI-supported decision path that materially changes business state.
Template
Artifact name:
[Automation or decision name]
Business purpose:
What business outcome is this logic intended to produce?
Trigger:
What event, user action, schedule, or system signal starts it?
Records and fields used:
Which objects and fields are read? Which are required? Which are considered advisory only?
Decision rule:
Describe the rule in plain language first. Then include the exact condition logic or reference the implementation source.
Exception handling:
What known exceptions exist? When should the logic stop, escalate, or defer to a human?
Side effects:
What additional automation, approvals, notifications, integrations, or record changes can this decision trigger?
Failure modes:
How can this logic fail, misclassify, or create unintended consequences?
Owner and approver:
Who owns the rule? Who approved the current behavior?
Last validation date:
When was the logic last reviewed against current business policy?
How to explain this to operations:
One short paragraph answering, "Why did the system do this?"
3. "Why Did Salesforce Do That?" Response Playbook
This playbook is for frontline operations, admins, and support teams handling confusing system behavior.
Step 1: Capture the event
- record ID
- timestamp
- acting user or integration
- changed fields
- visible downstream actions
Step 2: Trace the likely cause set
Review:
- active automations on the object and event
- recent human edits and integration writes
- approvals, assignment rules, validation rules, and Apex side effects
- scheduled jobs or asynchronous paths in the relevant time window
Step 3: Determine the explanation class
Classify the event as one of:
- expected documented behavior
- expected but poorly understood behavior
- undocumented legacy logic
- conflicting automation
- data-quality induced behavior
- permission or ownership anomaly
- external-system side effect
Step 4: Respond in business language
The first answer should not be metadata jargon. It should explain:
- what condition caused the behavior
- what the system attempted to achieve
- whether the result was correct, incorrect, or uncertain
- what the next action is
Step 5: Close the explainability loop
If the issue was not clearly documented:
- create or update the explainability artifact
- assign an owner
- determine whether the gap is local or systemic
- add the issue to the governance or remediation backlog
Standard Response Format
Use this response structure for operations teams:
- What happened: The record changed in a specific way.
- Why it happened: The system evaluated a specific rule or dependency.
- Whether it was intended: Confirmed, unintended, or still under review.
- What happens next: Reverse, accept, escalate, or remediate the underlying logic.
4. Explainability Audit Checklist
Use this 20-item checklist to test whether a Salesforce environment is explainable enough to support scale, governance, and AI.
| # | Checklist item | Result |
|---|---|---|
| 1 | Every critical automation has a named business owner. | Yes / No |
| 2 | Every critical automation has a named technical owner. | Yes / No |
| 3 | Active automation inventory is current within the last 90 days. | Yes / No |
| 4 | Trigger conditions are documented for critical automations. | Yes / No |
| 5 | Decision logic is documented in plain language, not only metadata. | Yes / No |
| 6 | Exception paths are documented for critical workflows. | Yes / No |
| 7 | Downstream dependencies are mapped for critical automations. | Yes / No |
| 8 | Critical automation inputs use defined and owned fields. | Yes / No |
| 9 | Operators know where to look when system behavior is questioned. | Yes / No |
| 10 | There is a standard response workflow for confusing or disputed automation outcomes. | Yes / No |
| 11 | Logs or history can reconstruct who or what changed a record. | Yes / No |
| 12 | Recent change history can be tied back to approved change records. | Yes / No |
| 13 | Integration side effects on automated objects are documented. | Yes / No |
| 14 | Service accounts and automation principals have clear ownership. | Yes / No |
| 15 | High-impact automations have failure handling and rollback instructions. | Yes / No |
| 16 | Legacy automation is either explained, contained, or scheduled for retirement. | Yes / No |
| 17 | Explainability artifacts are reviewed on a fixed cadence. | Yes / No |
| 18 | Support teams can explain the top 10 recurring automation incidents in business terms. | Yes / No |
| 19 | Escalation paths exist for undocumented logic discovered in production. | Yes / No |
| 20 | AI or automation expansion decisions require explainability evidence. | Yes / No |
Reading The Checklist
16-20yes answers: explainability is a governance strength11-15yes answers: explainability is emerging but still uneven6-10yes answers: the org is operationally opaque in important areas0-5yes answers: the org cannot reliably explain its own behavior
How This Connects To Unseen's Work
The explainability framework is the artifact layer between audit and governance:
- Stage
1Audit identifies what exists - Stage
2Living Documentation captures how it works - Stage
3Monitoring reveals what changes - Stage
4Governance assigns control - Stage
5AI Readiness uses explainability as a deployment precondition
Without explainability artifacts, every future automation and AI decision is being made on partial institutional memory.