Building Verification Protocols for Operational AI
Overview
Wednesday, 2:15 PM. An AI-generated process design lands on your desk. It's beautiful, flowcharts, timeline, resource estimates, everything. You approve it and send it to implementation. Five days later, the operations team surfaces a fatal flaw: the design assumes two pieces of equipment can run simultaneously, but they share a control system. The design is operationally infeasible.
You missed it. The AI didn't know about the control system constraint. You didn't verify the design against your operational constraints. The error propagated from analysis into a failed implementation plan.
At Level 3, this is the verification problem: how do you systematically ensure that AI outputs are correct before they drive operational decisions? Not "100% correct", AI will never be that. But trustworthy enough that you can act on them with confidence.
Verification protocols are your answer. They're the systematic checks and gates that ensure AI outputs are validated before they leave the AI stage and enter the operational stage.
Verification vs. Validation vs. Quality Assurance
These terms are often confused. In operational AI:
Verification: Does the AI output conform to what was asked? Did it produce the right type of output? Is the structure correct? (Process checking)
Validation: Is the output correct for the real-world problem? Does it match operational constraints? Is it actually usable? (Reality checking)
Quality Assurance: The systematic process that ensures verification and validation happen consistently. (System checking)
In practice, you need all three. A verification protocol handles verification (is it the right output?). Validation protocols check against operational reality (does it actually work?). Together, they form a quality assurance system for AI-assisted operations.
Verification Protocol Architecture
A complete verification protocol has three layers:
Layer 1: Structural Verification (Automated)
Check that the output has the right structure, required fields, and data types. This is mostly automated.
Example: If you ask for a JSON output with "action_id," "priority," "timeline," "owner," verify that all required fields are present and that priority is one of {1, 2, 3, 4, 5}. Automated checks catch 80% of structural issues.
Layer 2: Logical Verification (Automated + Human)
Check that the output is internally consistent and logical. Some checks are automated (e.g., timeline dates are in sequence). Others require human judgment (e.g., does the proposed solution actually address the identified root cause?).
Layer 3: Operational Validation (Human)
Check that the output works in your operational context. Does it violate constraints you haven't told the AI about? Is it feasible with your resources? Does it align with your organizational priorities?
Important: Operational constraints are the most frequent failure point. The AI doesn't know your equipment limitations, staffing constraints, regulatory requirements, customer commitments, or supply chain realities. Layer 3 verification is where you inject operational reality.
Building Structural Verification (Layer 1)
Structural verification checks that output conforms to the requested format. Build this into your prompts and automate the checking.
Good Structural Verification Prompt:
"You will produce output in the following JSON format only: {SCHEMA}. If you cannot produce output in this format, respond with error_message: 'Unable to complete analysis due to [reason]' and stop. Do not produce partial output or alternative formats."
Automated Structural Check (pseudocode):
```
FUNCTION verify_structure(output, expected_schema):
IF output is not valid JSON:
RETURN "FAIL: Output is not valid JSON"
IF missing required fields in expected_schema:
RETURN "FAIL: Missing required fields: [list]"
IF field data types don't match schema:
RETURN "FAIL: Type mismatch in fields: [list]"
IF arrays have wrong cardinality (e.g., expected 3-5 items, got 1):
RETURN "FAIL: Array cardinality mismatch"
RETURN "PASS"
```
This check is binary (pass/fail) and can be automated. If it fails, the output is rejected and the step is rerun with a clarified prompt.
Building Logical Verification (Layer 2)
Logical verification checks that the output is internally consistent and that reasoning is sound. This involves both automated and human review.
Automated Logical Checks:
- Dependency Validation: If the output proposes solutions in sequence, verify that later solutions don't depend on earlier ones being complete before a date earlier than the earlier solution's completion.
- Numeric Consistency: If the output claims cost savings of $1M but costs are itemized as $200K + $300K + $200K, that's inconsistent. Catch these.
- Risk Assessment Consistency: If a risk is marked as "low probability" but "catastrophic impact," verify that mitigation recommendations match the severity.
- Constraint Satisfaction: If you specified constraints (e.g., "timeline cannot exceed 8 weeks"), verify the output satisfies them.
Human Logical Verification Checklist:
For each logical check below, a human reviewer should answer yes or no:
- Does the analysis answer the original question?
- Are major assumptions explicit and stated?
- Are facts vs. assumptions clearly distinguished?
- Does the reasoning chain make sense? (If you remove any step, does the logic break?)
- Are there obvious logical fallacies? (Circular reasoning, false dichotomies, unsupported extrapolation?)
- Are quantitative claims supported by evidence or clearly marked as estimates?
- Are there glaring omissions? (Obvious factors the AI should have considered but didn't?)
If any answer is "no," the output fails logical verification and should be revised.
Building Operational Validation (Layer 3)
Operational validation checks that the AI output actually works in your operational context. This is almost entirely human-driven because it requires domain expertise.
Operational Validation Checklist (Domain-Specific):
For supply chain/procurement decisions:
- Are supplier options actually capable of the volume requested?
- Are lead times realistic given current market conditions?
- Does the proposal violate any existing contracts?
- Are there supplier relationship factors the analysis didn't consider?
For process design:
- Are equipment assumptions correct? (Can this piece of equipment do what the design proposes?)
- Are labor estimates realistic? (Can untrained staff do this task in the estimated time, or does it require expertise?)
- Does the design violate any known operational constraints?
- Are dependencies with other processes correctly accounted for?
For budget/financial analysis:
- Are cost assumptions aligned with current vendor quotes and market rates?
- Are hidden costs accounted for? (Installation, training, integration, compliance overhead?)
- Does the analysis account for volume discounts or stepped pricing?
- Are assumptions about price inflation/deflation reasonable?
Create a checklist specific to each type of decision your team makes. Use it for every verification.
Tip: Operational validation is where you catch the control system constraint problem from the opening scenario. Build this checklist in partnership with your domain experts. Ask them: "What do we know about our operations that an AI wouldn't know?" Capture those as validation checks.
Before AI vs. With AI: Quality Assurance Overhead
Before AI: A process design was reviewed by an engineer (4 hours to draft and review). Mistakes found during implementation (5-10 days into execution). Rework and correction took 3-5 days. Total cost: 1-2 weeks of delay, plus rework costs.
With verification protocols: AI drafts the process design (30 minutes). Structural verification (automated, 2 minutes). Logical verification (engineer, 30 minutes). Operational validation (domain expert, 1 hour). Revisions discovered during validation are caught immediately, AI generates revised designs (20 minutes). Total time: 2.5 hours before implementation starts. No rework during execution.
The verification protocol takes time upfront, but saves far more time by catching errors before they propagate into the operational stage.
Failure Scenarios: What Goes Wrong with Verification
Scenario 1: Verification Theater (The Protocol Exists But Isn't Enforced)
You have a verification protocol on paper. But in practice, people skip steps because they're "not worth the overhead" or they trust the AI output too much. A critical error slips through, equipment design assumes two systems can run in parallel when they actually share a control system. The design fails during implementation. You blame the verification protocol.
Real problem: The protocol existed but wasn't enforced. Verification only works if it's mandatory, gated (you cannot proceed without passing), and visible (skipping it is noticed by management).
Mitigation: Make verification gates hard stops. Build them into your workflow system so you literally cannot proceed to implementation without passing verification. Make attempts to skip verification visible and trackable. Log verification results: what passed, what failed, what required revision. This creates accountability.
Scenario 2: Verification Designed for Average Case, Fails on Edge Cases
Your operational validation checklist covers 90% of decisions effectively. But 10% of decisions have unusual constraints you didn't anticipate when designing the checklist. An unusual edge case decision fails verification not because it's actually wrong, but because your checklist isn't sophisticated enough to handle it. Good decisions get blocked because the verification process is too rigid.
Mitigation: Build a two-tier verification system: (1) Standard checklist for typical decisions. (2) Exception escalation for atypical decisions. If a decision doesn't fit the standard checklist, escalate it for custom verification by a more senior expert who can think more flexibly. Document exceptions. They become learning opportunities to improve the standard checklist.
Scenario 3: Verification That Checks the Wrong Thing (Structural Passes, Operational Fails)
You verify that an AI-generated project schedule is internally consistent: dates are in sequence, no one is double-assigned, milestones are logically ordered. Structural verification passes. But you never verify whether the schedule is actually achievable with your team's actual capabilities, availability, and constraints. Operational validation never happens because no one realizes they should check it. The schedule looks perfect until execution starts, then it crumbles because it's unrealistic.
Mitigation: Make operational validation explicit and mandatory. Don't rely on reviewers to know what to check. Give them a specific checklist: "Verify these are realistic timelines. Verify staff have the skills to perform these tasks. Verify dependencies with other projects are accounted for." Make operational validation someone's specific job. Remove ambiguity about what should be checked.
Scenario 4: Verification Overload and Reviewer Fatigue**
You build a comprehensive three-layer verification protocol. But this means every AI output requires 45-90 minutes of review. Your team is reviewing AI outputs constantly. Reviewer fatigue sets in. People start rubber-stamping verification (clicking "pass" without actually reviewing carefully). Verification becomes theater.
Mitigation: Apply verification proportionally to risk. High-impact decisions (budget impact >$500K, affects compliance, affects customer delivery) get full three-layer verification. Medium-impact decisions get structural + light operational verification. Low-impact decisions might get structural only. Reserve human review time for where it matters most. Use automation (structural checks) to reduce reviewer burden for mechanical verifications.
Real Schema: Verification Protocol Definition
```json
{
"verification_protocol": {
"protocol_id": "VP-PROCESS-DESIGN-001",
"applies_to": "Process redesign decisions",
"layers": [
{
"layer": 1,
"name": "Structural Verification",
"type": "automated",
"checks": [
{
"check_id": "struct_json",
"description": "Output must be valid JSON",
"pass_criteria": "JSON parses without error"
},
{
"check_id": "struct_required_fields",
"description": "Output must contain required fields",
"pass_criteria": "All fields in [process_id, phases[], timeline_weeks, resource_requirements] present"
},
{
"check_id": "struct_timeline_sequence",
"description": "Phase timeline dates must be in sequence",
"pass_criteria": "For each phase, end_date > start_date; next phase start_date >= previous phase end_date"
}
],
"failure_action": "Reject output, rerun with clarified prompt, re-verify"
},
{
"layer": 2,
"name": "Logical Verification",
"type": "mixed",
"automated_checks": [
{
"check_id": "logic_cost_consistency",
"description": "Itemized costs must sum to total",
"pass_criteria": "SUM(cost_items) == total_cost"
}
],
"human_checks": [
{
"check_id": "logic_reasoning",
"description": "Does reasoning chain make sense?",
"reviewer_role": "Process Engineer",
"pass_criteria": "Reviewer confirms logic is sound and complete"
}
],
"failure_action": "Return to AI for revision with specific feedback, re-verify"
},
{
"layer": 3,
"name": "Operational Validation",
"type": "human",
"checks": [
{
"check_id": "ops_equipment_capacity",
"description": "Equipment assumptions match actual capability",
"reviewer_role": "Plant Manager",
"pass_criteria": "All equipment can perform proposed tasks within timeline"
},
{
"check_id": "ops_labor_realism",
"description": "Labor estimates match actual team capability",
"reviewer_role": "Operations Manager",
"pass_criteria": "Estimated effort is achievable with available staff"
}
],
"failure_action": "Escalate for design revision or decision override"
}
]
}
}
```
Implementing Verification Protocols: Step by Step
Step 1: Define Layers
What will you verify for your most important AI outputs? Structure (is it properly formatted)? Logic (is the reasoning sound)? Operational fit (does it work in our context)? Define which layers apply to which types of decisions. Not all decisions need all three layers.
Step 2: Design Checks
For each layer, design specific checks. For automated checks, write them in code or use a rules engine: "Check that all required JSON fields are present." For human checks, create a checklist: "Does the analysis answer the original question? Are major assumptions stated?" Make checks concrete and specific, not vague.
Step 3: Assign Reviewers and Create RACI**
For each check, assign who reviews (data analyst, domain expert, manager, compliance officer). Include backup reviewers (what if the primary reviewer is unavailable?). Create a RACI matrix: Who is Responsible for the check? Who must Approve the output? Who should be Consulted? Who should be Informed? Clear assignment prevents checks being skipped because "everyone assumes someone else did it."
Step 4: Make Verification Mandatory and Hard-Stop**
Build verification gates into your workflow system. Implement this technically: you cannot move to implementation phase until verification is marked "passed." Make it visible if someone tries to skip verification (log attempts, flag to management). Make verification non-negotiable for the most critical decisions.
Step 5: Risk-Based Verification Levels**
Don't verify everything the same way. Define risk tiers: High-risk decisions get full verification. Medium-risk get abbreviated. Low-risk get minimal verification. This prevents verification overload while ensuring critical outputs are properly checked.
Step 6: Track Verification Results and Learn**
Log what passed, what failed, what revisions were required. Analyze trends: "What types of errors does the AI make most frequently?" "Which checks catch the most errors?" "What checks are busywork that never catch anything?" Use this data to improve your prompts (address common errors), improve your checks (focus on high-value checks, eliminate busywork), and improve your reviewer training.
Real-World Verification Protocol Example: Procurement Process Design
Your organization is redesigning the vendor approval process using AI. The new process will affect compliance, speed, and risk. Here's how verification would work:
Structural Verification (Automated):** The AI output must be valid JSON with all required fields: process_steps[], approval_triggers[], responsible_parties[], controls[]. If any field is missing, fail the check and ask for revision.
Logical Verification (Mixed):** Automated: Check that approval sequence is logical (lower amounts don't require higher approvals; if a step requires manager approval, earlier steps don't require CFO approval). Human: Process owner reviews reasoning. "Why does the process require dual approval for expenses over $50K? Is this based on control requirements or just tradition?" If reasoning is sound, pass.
Operational Validation (Human):** Compliance officer reviews: "Does the process meet our internal control requirements? Are there audit trails? Is documentation clear?" Operations manager reviews: "Can our staff execute this process? Is the approval timeline realistic? Are there bottleneck risks?" Finance reviews: "Does this process work with our financial systems?" All must approve before implementation.
Building Your Verification Skills: Training Your Team
Verification is a skill. Your team needs training in:
Recognizing Plausible But Wrong Analysis:** An analysis can look coherent and well-reasoned while being factually incorrect. Train reviewers to spot this: "What facts does the analysis depend on? Can you verify them independently?"
Asking "What Doesn't the AI Know?":** The most common errors come from missing context. Train reviewers to ask: "Are there operational constraints the AI doesn't know about? Are there past experiences that inform this decision?"
Distinguishing Confidence from Accuracy:** AI outputs that are wrong can be very confidently stated. Train reviewers: "Confidence in the output is not the same as correctness. A wrong answer stated with certainty is still wrong."
Conduct monthly "verification skill-building" sessions where your team reviews actual AI outputs that failed verification. "Why did this pass layer 1 and 2 but fail layer 3? What warning signs did we miss?" This builds institutional knowledge about verification.
Monday Morning to Takeaways
Monday Morning Scenario: A process redesign is proposed. Instead of approving it immediately, it goes through your verification protocol: (1) Structural check confirms it has all required fields, PASS. (2) Logical check confirms costs are consistent and reasoning is sound, PASS. (3) Operational validation by plant manager confirms... FAIL. Equipment assumption is wrong; you don't have two pieces of equipment that can run in parallel as the design assumes. The design goes back to AI for revision. Revised design is re-verified and passes. Implementation proceeds with confidence. One verification failure prevented a costly implementation mistake.
Key Takeaways:
- Verification protocols have three layers: structural (automated), logical (mixed), operational (human).
- Structural verification checks that output has the right format and fields.
- Logical verification checks that output is internally consistent and reasoning is sound.
- Operational validation checks that output actually works in your operational context. This is where most real-world errors are caught.
- Build verification gates as hard stops. Make them mandatory. No proceeding without passing.
- Track verification results to learn where AI struggles and improve prompts.
Frequently Asked Questions
Q: Doesn't verification slow down the benefits of AI?
A: No. It feels slow upfront but saves far more time by catching errors before implementation. Errors caught during verification take minutes to fix (rerun AI with feedback). Errors caught during implementation take days to fix (rework, rescheduling).
Q: Should I verify everything, or only critical decisions?
A: Risk-based verification. Critical decisions (budget impact > $500K, affects compliance, affects customer delivery) get full three-layer verification. Routine decisions might get structural + light logical verification. Define risk thresholds for your organization.
Q: Who should be the human reviewer?
A: The person whose judgment the organization trusts for that type of decision. For process design, the process owner or plant manager. For budget analysis, finance controller. Match reviewer role to decision domain.
Q: What if a decision fails operational validation but I disagree with the reviewer?
A: Escalate. This is now a judgment call involving disagreement between an AI recommendation and a human expert. Escalate to the decision authority (VP, director) who can make the final call after hearing both perspectives.
Skill.re