Chain of custody
In short: Chain of custody is an unbroken record that links an outcome back to the person who started it. For agents, it connects a human request through every delegation and tool call to the final action. An auditor can then see exactly who is accountable at each step along the way.
Which controls use this term?
- GOV-13Per-action audit log tied to a person. Log every agent action with the agent, the person it acted for, the tool, the decision and the time.
- GOV-18Delegation bounded by the person's permissions. Ensure an agent acting for a person can never do more than that person is allowed to do.
Which terms are related?
Least privilege, Audit trail, Delegation, On-behalf-of, MCP gateway.
Reviewed by The Register desk