Designing an audit trail for tool-using agents

If your agent reads private material or changes things in another system, the chat transcript isn't going to tell you what actually happened. Here's what I'd record, how I'd tie it to a task and how I'd keep the log useful when someone has to review or recover a run.