The AI oversight a board
can only prove if it recorded it first.

AI shifts the evidentiary terrain.

What the instruments share is the moment at which the demand arrives. Delaware corporate doctrine offers the clearest mechanism. The Caremark standard, settled there almost three decades ago, holds directors liable for oversight failure in two situations: failing to install a reasonable information system, or ignoring the signals it produced.

In the reading of Pierluigi Matera, published on the Oxford Business Law Blog in March 2026, AI leaves the Caremark legal standard intact and shifts the evidentiary terrain on which good-faith oversight is demonstrated. The reason is structural: AI systems have come to produce the very information the board oversees, such as compliance monitoring, anomaly detection and whistleblower triage. They accelerate reporting and also shape what gets reported. Oversight migrates from signals people can detect to algorithm-mediated black boxes, and the second Caremark prong is compromised at the root, because a board cannot consciously disregard an alert that never appeared.

The doctrine is settled. Matera grounds the application of Caremark to AI oversight in that doctrine, and the article cites no Delaware ruling on an AI oversight failure. That is the standing in which this reading should reach the board.

The operational point follows. The question of assignment lies dormant until the moment it stops being dormant, and that moment is precisely the one in which it can no longer be answered well. A board does not enter an assignment into the minutes after the harm and obtain any effect from it. The window for the record precedes the event that makes the record necessary, and it closes without warning.

A partial functional analogy.

The American discussion usually reaches Brazil as an imported novelty. Brazilian law contains only part of the oversight function that discussion describes.

Arts. 142, I and III, and 153 of Law 6,404/76, the Brazilian corporations statute, give the board the general direction of the business, supervision of the officers, the power to examine books and papers and to request information, and a general duty of care. That is where the oversight function lives. Where the failure involves unlawful acts by other administrators, art. 158, §1º adds a specific rule: an administrator is liable who is complicit, who is negligent in discovering the acts, in the statute's words negligenciar em descobri-los, or who, knowing of them, fails to act to prevent their practice. Dissent entered into the minutes exonerates, within the limits of the provision.

Brazilian doctrine reads these situations through vigilance and culpa in vigilando. Even so, the object of §1º is narrower than that of the American doctrine: it addresses unlawful acts by other administrators, whereas Caremark addresses oversight of the company information systems, controls and operations. The mental element differs too: §1º allows liability for negligence in discovering those unlawful acts, while Caremark requires bad faith, shown by a conscious failure to oversee. The functional analogy between the regimes is only partial.

CVM votes help set the bounds of that comparison. In the Forjas Taurus case, in 2020, the vote of the reporting commissioner, Gustavo Gonzalez, treated the board's monitoring duty in light of the general duty of care, as an obligation of means rather than of result, in an analysis that links the supervisory competence of art. 142, III, with art. 153. In the T4F case, in 2025, the reporting commissioner, João Accioly, wrote that the Caremark standards are, in his words, por aqui em certa medida recepcionados, received in Brazil to a certain extent. Commissioner Marina Copola joined the acquittal with reservations about the reasoning, without addressing that reception expressly. These passages, on their own, do not show a settled CVM position equating the tests of the two regimes. Neither case concerns AI.

§3º adds the consequence that matters to this discussion. In publicly held companies, the joint liability of §2º, covering breach of legal duties necessary to the company's normal functioning, is restricted, save for §4º, to administrators who have received by provision of the bylaws the specific assignment to fulfil those duties. Assignment in the bylaws is legally operative in that specific regime. A committee charter, an internal policy, a responsibility matrix or minutes may carry evidentiary and governance weight, and are not automatically equivalent to the bylaw provision that §3º requires.

This does not mean that all liability is determined by the bylaws, nor that the absence of a designation produces immunity. Liability for one's own conduct remains, as do the duty of care, the board's supervisory function, the rule of §1º and the joint liability of §4º for anyone who knows of the breach and does not report it to the shareholders' meeting. The effect of the absence of a bylaw assignment on §2º is not expressly resolved. The restrictive reading, supported by §3º, is that in publicly held companies the civil joint liability of §2º does not expand automatically without a specific bylaw assignment. That produces no immunity. Individual liability under the caput, the article's main provision, and under §1º remains, as does the situation of §4º and, on a separate plane, the duty of care of art. 153, always depending on the facts, the imputation and the causal link. In sanctioning proceedings, CVM votes have diverged on using art. 144 to assign administrative liability in matters the bylaws do not allocate. The divergence was explicit in PAS CVM 19957.004388/2023-41, decided in 2025: the reporting commissioner invoked the provision to reach the entire executive management, the diretoria, in a vaguely described area; the voto-vista, an opinion delivered after a request to review the record and diverging on the reasoning, required a functional link and the elements of the administrative offence, and the CVM Collegiate unanimously acquitted the technology and operations officers. That controversy is administrative and does not resolve the civil joint liability of §§2º and 3º.

The two T4F votes, both for acquittal, converge on the insufficiency of a merely formal provision for controls. For João Accioly, merely formal provisions for internal controls would not suffice to fulfil the duty to supervise adequately if, in practice, the controls were not used, or if the board members ignored the alerts they generated. For Marina Copola, the mere existence of internal policies, detached from a critical analysis of their effectiveness, is not enough to determine whether the administrators are properly fulfilling the duty of care. The transposition to AI is Alkemia's reading: the record of the assignment documents the function received, and the assessment of how it was exercised also considers whether the controls are adequate and actually work, and the response to the alerts they produce.

The mechanism has a Brazilian case that needs no hypothetical. In PAS CVM 24/2006, an officer accused of failing to establish effective internal controls over an area that reported to him was unanimously acquitted by the CVM Collegiate, in a 2013 judgment in which the reporting commissioner read the supervisory dimension of the duty of care as subject to an assessment of the reasonableness and adequacy of controls. On the mandatory appeal that follows an acquittal, the recurso de ofício, the Conselho de Recursos do Sistema Financeiro Nacional, the last administrative instance, converted that acquittal into a fine in February 2018, on a majority decided by the President's casting vote, with the appeal's reporting councillor on the losing side. More than eleven years passed between the 2006 inspection that gave rise to the case and the CRSFN tiebreak.

The approximation to the American doctrine is a comparative reading by Alkemia. The Brazilian decisions and votes examined in this analysis do not show a settled institutional position equating the tests of the two regimes. Its application to a company or to a specific incident depends on the bylaw structure, the functions actually exercised and the applicable sector rules.