Part 1 — For the Business
Ch. 6 — Audit, Evidence, and Accountability
The log is the evidence — what every framework requires you to record, who must own it, and why "the model decided" is never a sufficient answer.
Logging is not compliance. But without logging, compliance is impossible.
6.1 Key Takeaways
When a regulator asks what the agent did, you need a record. When an auditor asks whether the agent processed data as authorized, you need a record. When an incident occurs and you need to reconstruct what happened — to satisfy a breach notification requirement, to close a security finding, to answer a lawsuit — you need a record.
Platform Agentic
Compliance, governance, and accountability for teams building agentic AI systems.