Attesting a QA period
Somebody senior is being asked to confirm that quality was assured for a period, and
their name goes on it. The purpose of an attestation is to make explicit what is
actually being claimed — because the implied claim ("quality was good") is almost never
what the evidence supports, and the person signing usually has not been told the
difference.
The attestation's value is in its limitations section. An attestation with no
limitations is not a stronger attestation; it is a less careful one, and it exposes the
signer.
State the claim precisely
Write what is being attested to, in one paragraph, and be pedantic about the verb.
Defensible claims look like:
"The QA programme operated as designed during the period: coverage rules were applied,
N evaluations were completed against scorecard version V, M were reviewed by a human,
and the results are as stated."
That is a claim about process operation. It is verifiable, and it is what a QA
function can actually attest to.
What a QA function cannot honestly attest to:
- That quality was good. That is an interpretation of a score against a standard, and
it needs the score to be a valid measure of quality.
- That no poor outcomes occurred. Sampled assurance cannot support a negative across
the population.
- That every conversation was compliant. Unless there was a census, which there was
not.
If the person asking wants one of those, say which one is unavailable and what would be
needed. Signing a stronger claim than the evidence supports is the failure mode here, and
it is the signer who carries it.
The evidence the attestation rests on
Enumerate it, with numbers:
- Coverage — evaluations completed, as a share of eligible conversations, broken down
by channel, team and market. Zero-coverage segments named individually; they are the
most important line in the pack, and an average conceals them.
- Scorecard version(s) in force, and any change during the period. A mid-period change
breaks comparability and must be disclosed.
- Sampling — how conversations were selected, and whether selection was random,
stratified or reviewer-chosen. Reviewer-chosen selection cannot support a population
claim and needs saying.
- Grader mix — human, AI, or both, with the model version if applicable, and the
agreement measured in the period.
- Human review rate on AI-graded evaluations.
- Disputes raised, resolved, and outstanding at period end.
- Auto-fails raised, and how many were closed out rather than only recorded.
- Actions arising, and their status.
Limitations, written by you
Every one of these applies to most programmes. State the ones that apply to yours, with
numbers rather than adjectives:
- Sampled, not census. Give the coverage rate and state the obvious consequence.
- Statistical power. If per-agent evaluation counts are low, say what the scores can and
cannot support — at n=10 a score carries roughly a ±19 point interval, which does not
support ranking.
- Instrument validity. Whether the scorecard has been validated against an outcome. If
it has not, the attestation is about conformity to a rubric, not about quality, and that
distinction belongs in the document.
- Segments where the instrument is weaker — languages, voice, anything with materially
lower grader agreement. Scores are not comparable across those segments.
- Channels or queues not in scope.
- Data gaps — conversations not synced, transcripts unavailable, a period with a
different taxonomy.
- Disputes outstanding, which means some results in the period may change.
Governance the attestation implies
An attestation is a control, so the control needs to work:
- A named signer, with the authority to sign and enough understanding to be
accountable. Walk them through the claim and the limitations rather than sending a pack.
- Second-line review where the structure requires it, recorded.
- A trail to the underlying evidence, so the figures can be reproduced later. An
attestation whose numbers cannot be reproduced is worse than none.
- Consistency with prior periods, and disclosure of any definition change that breaks
the series.
- Escalation of anything that would change the claim, before signing rather than after.
When not to attest
Say this explicitly, because it is the situation the process exists for:
- Coverage collapsed in the period and nobody noticed until now.
- A whole segment has no evaluations and cannot be assured.
- The scorecard changed mid-period with no versioning, so results are not comparable
or explicable.
- A material dispute or finding is unresolved and would change the results.
- The evidence cannot be reproduced.
In these cases the right output is a qualified attestation — the narrower claim that
is supported, with the exclusion stated — or a statement that the period cannot be
attested and what is required to close it. Both are legitimate outputs and both are
better than a clean attestation that does not hold. Producing a qualified attestation is
a sign the control is working, not that it failed.
Guardrails
- Do not sign, and do not draft language that implies you did. This prepares an
attestation for an authorised signer.
- Do not soften a limitation to make the pack read better. The limitations are the
protection.
- Do not assert compliance with an obligation. Whether the evidence discharges a
requirement is a compliance and legal determination.
- Do not attest across a definition change without disclosing it, even if the numbers
look continuous.
- Escalate a finding that would change the claim immediately, rather than including it
as a caveat in a pack being signed.
- Cite ids and aggregates; no transcripts. Attestation packs go to audit committees and
sometimes externally.
Present results to the user
- The claim, in one paragraph, with the verb chosen precisely — and a note of any
stronger claim that was asked for and is not supported.
- The evidence table, with coverage broken down and zero-coverage segments named.
- Sampling method, and whether it supports a population claim.
- Grader mix and agreement, including model version where relevant.
- Disputes, auto-fails and actions, with outstanding items.
- Limitations, with numbers, written plainly.
- Whether the period can be attested cleanly, qualified, or not at all, and what would
close the gap.
- The reproduction trail to the underlying figures.
- What needs a compliance or legal view before the signer is asked.
1---2name: cx-quality-attestation3description: Use to sign off a QA period for audit or governance — stating what is being attested to, on what evidence, and with which limitations. Trigger for "sign off the QA period", "attest to our quality results", "monthly QA governance pack", "certify the quality figures", or being asked to confirm quality was assured for a period.4metadata:5 author: rulebase6 version: "1.0.0"7 archetype: playbook8---910# Attesting a QA period1112Somebody senior is being asked to confirm that quality was assured for a period, and13their name goes on it. The purpose of an attestation is to make explicit what is14actually being claimed — because the implied claim ("quality was good") is almost never15what the evidence supports, and the person signing usually has not been told the16difference.1718**The attestation's value is in its limitations section.** An attestation with no19limitations is not a stronger attestation; it is a less careful one, and it exposes the20signer.2122## State the claim precisely2324Write what is being attested to, in one paragraph, and be pedantic about the verb.25Defensible claims look like:2627> "The QA programme operated as designed during the period: coverage rules were applied,28> N evaluations were completed against scorecard version V, M were reviewed by a human,29> and the results are as stated."3031That is a claim about **process operation**. It is verifiable, and it is what a QA32function can actually attest to.3334What a QA function cannot honestly attest to:3536- **That quality was good.** That is an interpretation of a score against a standard, and37 it needs the score to be a valid measure of quality.38- **That no poor outcomes occurred.** Sampled assurance cannot support a negative across39 the population.40- **That every conversation was compliant.** Unless there was a census, which there was41 not.4243If the person asking wants one of those, say which one is unavailable and what would be44needed. Signing a stronger claim than the evidence supports is the failure mode here, and45it is the signer who carries it.4647## The evidence the attestation rests on4849Enumerate it, with numbers:5051- **Coverage** — evaluations completed, as a share of eligible conversations, broken down52 by channel, team and market. **Zero-coverage segments named individually**; they are the53 most important line in the pack, and an average conceals them.54- **Scorecard version(s) in force**, and any change during the period. A mid-period change55 breaks comparability and must be disclosed.56- **Sampling** — how conversations were selected, and whether selection was random,57 stratified or reviewer-chosen. **Reviewer-chosen selection cannot support a population58 claim** and needs saying.59- **Grader mix** — human, AI, or both, with the model version if applicable, and the60 agreement measured in the period.61- **Human review rate** on AI-graded evaluations.62- **Disputes** raised, resolved, and outstanding at period end.63- **Auto-fails** raised, and how many were closed out rather than only recorded.64- **Actions arising**, and their status.6566## Limitations, written by you6768Every one of these applies to most programmes. State the ones that apply to yours, with69numbers rather than adjectives:7071- **Sampled, not census.** Give the coverage rate and state the obvious consequence.72- **Statistical power.** If per-agent evaluation counts are low, say what the scores can and73 cannot support — at n=10 a score carries roughly a ±19 point interval, which does not74 support ranking.75- **Instrument validity.** Whether the scorecard has been validated against an outcome. If76 it has not, the attestation is about conformity to a rubric, not about quality, and that77 distinction belongs in the document.78- **Segments where the instrument is weaker** — languages, voice, anything with materially79 lower grader agreement. Scores are not comparable across those segments.80- **Channels or queues not in scope.**81- **Data gaps** — conversations not synced, transcripts unavailable, a period with a82 different taxonomy.83- **Disputes outstanding**, which means some results in the period may change.8485## Governance the attestation implies8687An attestation is a control, so the control needs to work:8889- **A named signer**, with the authority to sign and enough understanding to be90 accountable. Walk them through the claim and the limitations rather than sending a pack.91- **Second-line review** where the structure requires it, recorded.92- **A trail** to the underlying evidence, so the figures can be reproduced later. An93 attestation whose numbers cannot be reproduced is worse than none.94- **Consistency with prior periods**, and disclosure of any definition change that breaks95 the series.96- **Escalation of anything that would change the claim**, before signing rather than after.9798## When not to attest99100Say this explicitly, because it is the situation the process exists for:101102- **Coverage collapsed** in the period and nobody noticed until now.103- **A whole segment has no evaluations** and cannot be assured.104- **The scorecard changed mid-period** with no versioning, so results are not comparable105 or explicable.106- **A material dispute or finding is unresolved** and would change the results.107- **The evidence cannot be reproduced.**108109In these cases the right output is a **qualified attestation** — the narrower claim that110*is* supported, with the exclusion stated — or a statement that the period cannot be111attested and what is required to close it. Both are legitimate outputs and both are112better than a clean attestation that does not hold. Producing a qualified attestation is113a sign the control is working, not that it failed.114115## Guardrails116117- **Do not sign, and do not draft language that implies you did.** This prepares an118 attestation for an authorised signer.119- **Do not soften a limitation to make the pack read better.** The limitations are the120 protection.121- **Do not assert compliance with an obligation.** Whether the evidence discharges a122 requirement is a compliance and legal determination.123- **Do not attest across a definition change** without disclosing it, even if the numbers124 look continuous.125- **Escalate a finding that would change the claim immediately**, rather than including it126 as a caveat in a pack being signed.127- **Cite ids and aggregates; no transcripts.** Attestation packs go to audit committees and128 sometimes externally.129130## Present results to the user1311321. **The claim**, in one paragraph, with the verb chosen precisely — and a note of any133 stronger claim that was asked for and is not supported.1342. **The evidence table**, with coverage broken down and zero-coverage segments named.1353. **Sampling method**, and whether it supports a population claim.1364. **Grader mix and agreement**, including model version where relevant.1375. **Disputes, auto-fails and actions**, with outstanding items.1386. **Limitations**, with numbers, written plainly.1397. **Whether the period can be attested cleanly, qualified, or not at all**, and what would140 close the gap.1418. **The reproduction trail** to the underlying figures.1429. **What needs a compliance or legal view** before the signer is asked.