The Operational Explainability Framework defines how Unseen produces explainability artifacts for Salesforce environments.
The Operational Explainability Framework defines how Unseen produces explainability artifacts for Salesforce environments.
Its purpose is simple:
When an operator, executive, auditor, or partner asks, "Why did Salesforce do that?", the institution should be able to answer from evidence rather than folklore.
Explainability is not a technical luxury. It is the operating layer that makes automation governable, supportable, and eventually safe for AI.
Every explainability initiative should produce four outputs:
Every automation affecting a revenue-critical object should be documented to a common standard.
| Section | Required fields |
|---|---|
| Identity | Automation name, type, version, status, object, event, environment, creation date, last modified date |
| Ownership | Business owner, technical owner, escalation owner, backup owner |
| Trigger | Entry criteria, invoking event, upstream dependencies, initiating user or principal |
| Purpose | Business objective, expected outcome, process step supported |
| Decision logic | Conditions evaluated, branching logic, formulas, decision table reference, exception paths |
| Data touchpoints | Read objects and fields, write objects and fields, required inputs, downstream outputs |
| Dependencies | Invoked flows, Apex classes, integrations, approvals, queues, reports, external services |
| Failure handling | Fault paths, alerts, retries, rollback steps, manual workaround |
| Governance | Last review date, evidence link, test location, change ticket, approved risk notes |
Each automation should also carry:
low, medium, high, mission-criticaleasy, bounded, hard, non-reversiblenotify, enrich, route, update, approve, orchestratefully explainable, partially explainable, opaqueUse the template below for any automation or AI-supported decision path that materially changes business state.
Artifact name:[Automation or decision name]
Business purpose:
What business outcome is this logic intended to produce?
Trigger:
What event, user action, schedule, or system signal starts it?
Records and fields used:
Which objects and fields are read? Which are required? Which are considered advisory only?
Decision rule:
Describe the rule in plain language first. Then include the exact condition logic or reference the implementation source.
Exception handling:
What known exceptions exist? When should the logic stop, escalate, or defer to a human?
Side effects:
What additional automation, approvals, notifications, integrations, or record changes can this decision trigger?
Failure modes:
How can this logic fail, misclassify, or create unintended consequences?
Owner and approver:
Who owns the rule? Who approved the current behavior?
Last validation date:
When was the logic last reviewed against current business policy?
How to explain this to operations:
One short paragraph answering, "Why did the system do this?"
This playbook is for frontline operations, admins, and support teams handling confusing system behavior.
Review:
Classify the event as one of:
The first answer should not be metadata jargon. It should explain:
If the issue was not clearly documented:
Use this response structure for operations teams:
Use this 20-item checklist to test whether a Salesforce environment is explainable enough to support scale, governance, and AI.
| # | Checklist item | Result |
|---|---|---|
| 1 | Every critical automation has a named business owner. | Yes / No |
| 2 | Every critical automation has a named technical owner. | Yes / No |
| 3 | Active automation inventory is current within the last 90 days. |
Yes / No |
| 4 | Trigger conditions are documented for critical automations. | Yes / No |
| 5 | Decision logic is documented in plain language, not only metadata. | Yes / No |
| 6 | Exception paths are documented for critical workflows. | Yes / No |
| 7 | Downstream dependencies are mapped for critical automations. | Yes / No |
| 8 | Critical automation inputs use defined and owned fields. | Yes / No |
| 9 | Operators know where to look when system behavior is questioned. | Yes / No |
| 10 | There is a standard response workflow for confusing or disputed automation outcomes. | Yes / No |
| 11 | Logs or history can reconstruct who or what changed a record. | Yes / No |
| 12 | Recent change history can be tied back to approved change records. | Yes / No |
| 13 | Integration side effects on automated objects are documented. | Yes / No |
| 14 | Service accounts and automation principals have clear ownership. | Yes / No |
| 15 | High-impact automations have failure handling and rollback instructions. | Yes / No |
| 16 | Legacy automation is either explained, contained, or scheduled for retirement. | Yes / No |
| 17 | Explainability artifacts are reviewed on a fixed cadence. | Yes / No |
| 18 | Support teams can explain the top 10 recurring automation incidents in business terms. |
Yes / No |
| 19 | Escalation paths exist for undocumented logic discovered in production. | Yes / No |
| 20 | AI or automation expansion decisions require explainability evidence. | Yes / No |
16-20 yes answers: explainability is a governance strength11-15 yes answers: explainability is emerging but still uneven6-10 yes answers: the org is operationally opaque in important areas0-5 yes answers: the org cannot reliably explain its own behaviorThe explainability framework is the artifact layer between audit and governance:
1 Audit identifies what exists2 Living Documentation captures how it works3 Monitoring reveals what changes4 Governance assigns control5 AI Readiness uses explainability as a deployment preconditionWithout explainability artifacts, every future automation and AI decision is being made on partial institutional memory.
Email hello@unseen.so to request an AI Readiness Audit.