The auditor’s three questions
- Who did what, when, and with which permission?
- Can the record be trusted — could someone have edited it?
- Who reviews the record, and how often?
What answers them
- An append-only audit trail for every agent action — not just model calls, but tool calls and policy changes.
- Tamper evidence: a signed, hash-linked chain makes silent edits detectable.
- A review cadence: a weekly skim of the log is a control; a log nobody reads is decoration. See fleet management for the routine.
- Access reviews: dated records of who holds which permissions and when they were checked.
Prepare before the review, not during
Compliance evidence is cheapest when it is a byproduct of normal operation: logs on by default, exports one command away, and policy documents kept current. Reconstructing evidence after the fact is where compliance budgets go to die.
Frameworks map onto the same evidence
SOC 2, ISO 27001 and GDPR all ask variants of the same three questions. If your audit trail, access reviews and change log are real, most of the evidence work is already done — see SOC 2 for agents for the specifics.