The accounting profession did not invent the audit opinion because it saw the crash coming.
It invented the audit opinion because the crash had already happened, the damage was visible in the public record, and the profession had the methodology ready when the political will arrived to demand something better than management's word for its own reliability. The Securities Acts of 1933 and 1934 did not create independent verification. They created the legal mandate for it. The profession built the architecture to deliver it.
That sequence—failure, mandate, architecture—has governed every major advance in professional accountability for a century. It is also the sequence that the AI governance moment is about to repeat. The only question is whether the profession participates in building the architecture before the mandate arrives, or waits to be handed the assignment after the failure has already compounded beyond the point at which early engagement would have mattered.
This article makes the case for early engagement. Not as advocacy. As professional arithmetic.
The net present value argument for early governance is not complicated. Every year the profession waits, two things happen simultaneously. The AI systems deployed across consequential professional domains become more deeply embedded in the workflows, decisions and institutional dependencies that will eventually require certification. And the baseline shifts—the threshold of what counts as acceptable reliance without independent verification moves quietly in the direction of whatever the current practice happens to be.
That baseline shift is the most dangerous element of the current moment. It does not announce itself. It does not produce a visible failure that triggers a professional response. It succeeds quietly, compounding over time, until the generation of practitioners forming inside the current environment has no independent recollection of what verified reliance felt like before AI-assisted work products became the norm.
The forensic accountant who has spent 40 years watching institutions certify themselves recognizes this dynamic precisely. The going concern problem is never most visible at the moment of maximum risk. It is most visible in retrospect, at the point where the accumulated weight of deferred recognition has made the disclosure both mandatory and insufficient. The profession's job is to make the disclosure before that point. Not after it.
Early governance is not idealism. It is the professional equivalent of a clean audit opinion issued while the controls are still functioning—before the scope limitation that would have prevented the opinion from being issued.
The Depression produced a layered system of protectors because no single mechanism could be trusted to prevent failure alone. Each path addressed a specific failure mode with a specific professional instrument. The transparency path produced mandatory disclosure. The oversight path produced continuous supervision. The conflict of interest path produced structural separation. The assurance path produced the independent audit opinion. The accountability path produced the investigative model. The stabilization path produced the institutional backstop.
Not one of those paths was sufficient alone. The AI governance moment has exposed the same six gaps in a different domain. The profession's contribution is concentrated in the three areas where its existing methodology is directly applicable and where no other professional body has both the standing and the instrument to act: assurance, accountability and transparency.
The profession does not need a legislative mandate to begin building on any of them.
The assurance path is where the profession's existing methodology lands with the most immediate force. The independent audit opinion for AI systems would not require examining every output. It requires examining the integrity of the system that produces the outputs—the training objectives, the reward model, the evaluation criteria and the materiality thresholds that determine what the system produces and what it withholds. That is internal control auditing applied to a new subject. The profession audits banks that process millions of transactions daily without examining each transaction. It examines the controls. The AI equivalent is the same engagement with a different entity under examination.
The immediate professional agenda on the assurance path is specific. Define the scope of an AI systems audit in the profession's own vocabulary. Identify the access requirements that would make an opinion professionally defensible. Establish the materiality threshold for AI system failures that parallels the standard the profession already applies to financial statement misstatements. And determine what opinion categories apply—because the unqualified, qualified, adverse and disclaimer framework built after 1929 maps directly onto the conditions the forensic examination of AI systems has already documented.
A system that cannot provide access to its training data provenance receives a scope limitation. A system whose self-evaluation cannot be independently corroborated receives a qualified opinion at a minimum. A system whose materiality threshold was set by its own legal department without external review receives an adverse finding on the independence condition alone.
The profession already knows how to write these opinions. It has not yet been asked to write them for AI systems.
What remains unresolved is whether the profession defines that framework itself—or inherits one designed by technology companies, regulators and litigators after the failure arrives.
The accountability path is where the forensic deposition methodology becomes a replicable professional instrument rather than one practitioner's examination record.
The governing question
The Pecora hearings didn't begin with a regulatory framework. They began with a governing question and the professional discipline to follow it wherever the record led.
The transparency path is where the profession's materiality standard becomes the instrument that forces the disclosure that the voluntary framework has consistently failed to require. The profession already defines materiality as the threshold above which a reasonable user would make a different decision if the information were known before reliance. Applied to AI systems, that definition produces a disclosure standard far more demanding than anything the current voluntary model card framework calls for.
A known failure domain is material if a reasonable practitioner would not have relied on the system for that domain had the limitation been disclosed. A variability rate is material if a reasonable practitioner would have applied additional verification procedures had the rate been known. A training data gap is material if a reasonable practitioner would have restricted reliance to domains outside the gap.
The profession does not need legislative authority to define that standard. It needs the professional consensus to apply its existing materiality framework to a new class of system whose outputs practitioners are already relying on for consequential professional judgments.
The professional liability thread running through all three paths is the one the profession cannot defer without consequences that compound in the same direction as the baseline shift. The CPA who signs off on AI-assisted work product today is signing off on a system that has not been independently certified by anyone with the authority, access and external standard required for that certification. The liability for material misstatement remains with the CPA. The developer's liability for the system's undisclosed limitations does not transfer to the engagement letter.
The profession that built the audit opinion after 1929 built it partly because practitioners who had signed off on financial statements without independent verification found themselves professionally exposed in ways the existing standards had not anticipated. The lesson was not that practitioners were dishonest. It was that the absence of an independent verification standard left honest practitioners without the professional instrument that would have protected both their clients and their own professional standing.
The AI governance moment is offering the profession the same lesson before the exposure rather than after it. That is not a common professional opportunity. It should not be deferred until it becomes a common professional catastrophe.
The Depression didn't produce one solution. It produced a layered system of protectors because no single mechanism could be trusted to prevent failure alone. The accounting profession was one of those protectors. It built the audit opinion after the crash because the failure made the need undeniable, and the profession had the methodology ready.
The methodology is still ready. The failure has not yet arrived.
The profession that could build this architecture hasn't been asked.
There's still a choice.
