AI audit logs should explain the path to an action

An account changes unexpectedly. The team can find a conversation but cannot establish which retrieved source, tool call or human approval led to the update.

Connect the material events

Record task identity, relevant input versions, tool requests, authorisation decisions and confirmed outcomes. Apply suitable privacy and security controls to the record itself.

W3C’s provenance model describes relationships between information, activities and responsible agents. An AI action log can use that principle to connect evidence with execution.

An illustrative sales assistant should link a proposed field update to its source and the action that actually changed the CRM. A generated sentence saying “updated” is not confirmation from the receiving system.

Preserve uncertainty honestly

Distinguish attempted, confirmed and unresolved actions. If a request timed out, retain that state until an authorised check establishes the outcome.

Avoid recording unsupported explanations of the model’s internal reasoning as though they prove causation. Observable inputs and operations provide a more dependable investigation trail.

Keep the record usable. Logging every available payload without structure can increase exposure and still leave the important sequence difficult to reconstruct.

Test an investigation before an incident

Select a suitable completed task and ask an authorised reviewer to reconstruct what happened. Identify missing relationships and excessive retained data.

Define how an authorised investigator can connect events without reading every sensitive payload. Stable identifiers, status transitions and access-controlled references may provide a more proportionate trail. Logging should support accountability while avoiding a new unrestricted repository of the customer information the application was designed to protect.

Use the exercise to improve the design rather than add logs indiscriminately. The objective is accountable explanation: who requested the work, which authority applied and what the connected systems actually did.