Preprint / Version 1

The Symbolic Blindspot: Measuring the Gap Between AI Governance Frameworks and Real-World Failure in Rule-Based Systems

##article.authors##

  • Habiba Effat ACSS

DOI:

https://doi.org/10.58445/rars.4151

Keywords:

AI Governance, Symbolic AI, Trustworthy Artificial Intelligence, AI Assurance, EU AI Act, NIST AI RMF

Abstract

Paradigm-Agnostic governance frameworks promise oversight for AI in a “one-size-fits-all” approach–but AI is not a monolith, and treating it like one fails to address a very critical elephant in the room. Symbolic AI–a method that saw intelligence as the application of explicit rules and logic to the manipulation of human-readable symbols–was long dismissed as a mere stepping stone for its flashier, probabilistic successor–Neural AI. While the attention of researchers, policymakers, and industries has shifted toward the neural paradigm, Symbolic systems remain widely deployed–particularly in safety-critical areas such as healthcare, where compliance is non-negotiable. Yet, major AI governance frameworks (e.g., the EU AI Act, NIST AI RMF) are written in paradigm-agnostic language or focus primarily on high-risk neural AI, leaving the governance of modern, sophisticated symbolic systems a critically underexplored area.

 

This paper tests whether the technical requirements of these frameworks produce meaningful assessments when applied to rule-based systems through a two-layer evaluation. First, governance requirements drawn from the EU AI Act (Articles 9–15, 72) and NIST AI RMF functions are operationalized into a three-point applicability score, measuring whether each requirement is satisfied natively by symbolic vs neural architectures. Second, these requirements are cross-referenced against documented, real-world failure modes of 103 rule-based clinical decision support malfunctions–to test whether theoretical applicability predicts operational reliability.

 

In our first layer of evaluation, Symbolic systems scored substantially higher compared to their neural counterparts—both scoring an average mean of 1.55 and 1.0, respectively. A result driven primarily by native traceability and oversight mechanisms. However, this advantage didn’t hold operationally: over a quarter of malfunctions fell into categories that weren't natively addressed by governance requirements—most notably conceptualization, which was the highest overall reported malfunction cause included in the study (20.3%). These findings reveal a crucial gap between theoretical governance applicability and real-world reliability for rule-based symbolic systems.

References

Ali, Mohamad Abou, and Fadi Dornaika (arXiv.Org). 2025. “Agentic AI: A Comprehensive Survey of Architectures, Applications, and Future Directions.” October 29. https://doi.org/10.1007/s10462-025-11422-4.

Kelvin D. O, Adjogri, Michael Uche Ikpade, and Sylvia Onataghogho Oyovwe. 2025. “From Symbolic AI to Generative Models: Tracing the Shifting Paradigms of Artificial Intelligence.” Journal of Institutional Research, Big Data Analytics and Innovation 1 (3): 147–60.

Tamponi, Roberta, Carina Prunkl, Thomas Bäck, and Anna V. Kononova. 2026. “Lost in Vagueness: Towards Context-Sensitive Standards for Robustness Assessment under the EU AI Act.” arXiv:2511.15620. Preprint, arXiv, July 5. https://doi.org/10.48550/arXiv.2511.15620.

Tanveer, Rizwan. 2026. “AI Governance Frameworks: ISO/IEC 42001, NIST AI RMF, and the EU AI Act.” SSRN Scholarly Paper No. 6740438. Social Science Research Network, May 9. https://doi.org/10.2139/ssrn.6740438.

European Union. Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act). Official Journal of the European Union L 2024/1689, July 12, 2024. https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng.

National Institute of Standards and Technology. (2023). Artificial Intelligence Risk Management Framework (AI RMF 1.0) (NIST AI 100-1). U.S. Department of Commerce. https://doi.org/10.6028/NIST.AI.100-1

Ugarte, Rodrigo Cilla, Miguel Ángel Patricio Guisado, Antonio Berlanga de Jesús, and José Manuel Molina López. “Making AI Compliance Evidence Machine-Readable.” arXiv:2604.13767. Preprint, arXiv, April 15, 2026. https://doi.org/10.48550/arXiv.2604.13767.

Thayer, Jeritt G., Amy Franklin, Jeffrey M. Miller, Robert W. Grundmeier, Deevakar Rogith, and Adam Wright. “A Scoping Review of Rule-Based Clinical Decision Support Malfunctions.” Journal of the American Medical Informatics Association : JAMIA 31, no. 10 (2024): 2405–13. https://doi.org/10.1093/jamia/ocae187.

Adam Wright, Angela Ai, Joan Ash, Jane F Wiesen, Thu-Trang T Hickman, Skye Aaron, Dustin McEvoy, Shane Borkowsky, Pavithra I Dissanayake, Peter Embi, William Galanter, Jeremy Harper, Steve Z Kassakian, Rachel Ramoni, Richard Schreiber, Anwar Sirajuddin, David W Bates, Dean F Sittig, Clinical decision support alert malfunctions: analysis and empirically derived taxonomy, Journal of the American Medical Informatics Association, Volume 25, Issue 5, May 2018, Pages 496–506, https://doi.org/10.1093/jamia/ocx106

Downloads

Posted

2026-09-10