An AI audit trail that starts at the decision boundary

    Logs tell you something happened. An audit trail has to prove what was authorized, what controls applied, and what evidence still stands later.

    Most teams begin their AI audit story with logs because logs are what they already have. The problem is that audit and procurement questions rarely start with "did you log the request?" They start with "how do you prove the request was authorized under policy?"

    What an AI audit trail must prove

    • who initiated the action
    • what the system was asked to do
    • which policy and budget state applied
    • what the system decided before execution
    • what evidence survived after the fact

    Why request logs are not enough

    Request logs are useful for debugging, but they do not automatically preserve the actual decision boundary. Without that boundary, teams end up reconstructing history from partial sources:

    • provider logs for what ran
    • application logs for what the caller tried to do
    • dashboard views for cost and usage
    • policy snapshots assembled after the incident

    That is workable during an outage. It is weaker during an audit or a contract review.

    What Keel stores on the permit

    Keel treats the permit as the decision artifact. That means the decision record can carry:

    • authorization context
    • policy and budget evaluation outcome
    • reason codes and constraints
    • routing context and model selection state
    • lineage into later execution and usage closeout

    How governance events become tamper-evident

    The trust story is not built on marketing superlatives. It is about giving teams stronger evidence primitives:

    • tamper-evident governance chain
    • signed exports on higher tiers
    • externally anchored checkpoints for later verification
    • evidence packaging that does not depend on screenshots

    Where the evidence is strongest

    Managed execution

    Managed execution produces the richest lifecycle record because routing, execution, and usage can be tied directly to the governed path.

    Permit-first integration

    Permit-first still preserves the decision artifact first, but execution ownership remains with the caller and later closeout is attached afterward. That is still useful evidence. It is simply a narrower claim.

    Why this page matters commercially

    Cost control opens conversations. Evidence closes them. The buyer who comes in asking about logging often becomes a buyer asking about signed exports, checkpoints, or audit evidence within one or two calls.