Models, algorithms, data, and decisions should be recorded so that they can be audited in cases where harm is suspected.