The audit trail distinguishes what the agent proposed, what the policy gate decided, what a human decided, what a tool actually did and which incidents were raised. Each entry is hash-chained to the previous one, so the ledger is tamper-evident, and any task can be exported as an evidence pack.