← Control library
O01 · Operations
Tamper-evident event trails
After an incident, the organization cannot reconstruct what the agent saw, decided and did.
Requirement
Record identity, version, inputs references, policy decisions, tool calls, approvals and outcomes in append-only or alteration-evident storage.
Expected evidence
- Event schema, integrity design and access rules.
- Sample trace linked across agent, approval and tool systems.
Proposed verification
- Reconstruct a sampled transaction end to end.
- Alter or remove a test event and confirm detection.
Limit
Logs can expose sensitive data; integrity does not justify excessive collection.