Audit trail
In short: An audit trail is the ordered record of what happened, who caused it and what was decided. For agents, a useful trail logs each action with the agent, the person it acted for, the tool, the policy decision and the time. Denied and approved actions belong in it too.
Which controls use this term?
- GOV-13Per-action audit log tied to a person. Log every agent action with the agent, the person it acted for, the tool, the decision and the time.
- GOV-23Evidence retention. Keep agent logs, approvals and review records for a defined period that meets legal and contractual requirements.
Which terms are related?
Chain of custody, Evidence retention, On-behalf-of, MCP gateway, AI Act.
Reviewed by The Register desk