Skip to content
A flight data recorder resting on a workshop bench under a single lamp.

Agent Audit Trails

Agents you can sign off

You cannot sign off an agent that cannot show its work. So its record is written while it runs.

  • Each action written to a log kept with the work
  • A named person against each consequential decision
  • Refused actions recorded with their reason
  • A trail your assessor reads without reconstruction

Example record

The record you hand the assessor

Appended while the agent works, with a name against each decision.

Nobody rebuilds this afterwards.

action log · sessionSample log
  • Edited src/billing/invoice.ts

    agent session, unit 3

    Logged
  • Read .env

    secret path

    Refused
  • Merge to main

    approved by a named reviewer

    Signed
  • Deploy to production

    waiting for your release manager

    Awaiting

The question that comes after the incident

Somebody asks what the agent did and who approved it. A chat transcript does not answer that.

  • Logs that keep the output and lose the steps

  • Approvals given in a meeting and written nowhere

  • Tool calls with no record of their arguments

  • A reconstruction that takes weeks and stays incomplete

Capabilities

What your record holds

Configured in your repository, so it holds on each machine that runs the agent.

01Action logFiles touched and commands run, appended as they happen.
02Named sign-offs4 sign-offs, each closed by a person whose name is recorded.
03Refusals with reasonsA blocked action is logged with the rule that blocked it.
04Review in a separate sessionThe reviewer did not write the code, and its findings stay with the change.

Model

What we fix, and what you decide

What we fix

  1. F1An append-only action log
  2. F24 named sign-offs
  3. F3Refusals recorded with their reason

What you decide

  1. C1Where the log is stored and for how long
  2. C2Who holds each sign-off
  3. C3Which actions need approval first

Next step

Show us an agent you need to sign off.

We list what its record is missing and how to close it. Then you can put your name to it.