Agent accountability, written down.
Verifiable receipts, ground-truth verification, and the regulation arriving for AI agents.
13 October 2026EU AI Act Article 14: human oversight for AI agents, and what an oversight record should prove
What Article 14 asks of the people overseeing a high-risk system, who carries the duty, the new December 2027 start date, and why an agent's own log cannot show that a person approved an action first.
6 October 2026Trusted timestamps for AI agent logs: what RFC 3161 proves, and what it does not
A signature fixes who wrote an agent record, not when. What an RFC 3161 token adds, why it is only an upper bound, how eIDAS treats qualified time stamps, and how a witnessed log compares.
29 September 2026OWASP Top 10 for Agentic Applications: what it asks you to record, and who should sign it
The ten agentic risks in one pass, how the prevention advice tightens from “record it for audit” to signed, tamper-evident logs, and the ASI10 rule that the agent must never hold the signing key.
22 September 2026MCP security: what to log when an AI agent calls tools, and what the log can prove
Where the Model Context Protocol spec asks you to log, why a tool annotation is a claim rather than a fact, the four places a tool call gets recorded, and what none of those records can establish on their own.
15 September 2026SOC 2 for AI agents: what evidence an auditor can actually accept
Where agents land in the Trust Services Criteria, what CC7.2 and ISO/IEC 42001 A.6.2.8 expect you to record, and why a transcript written by the agent under review is not evidence an auditor can test.
1 September 2026The EU AI Liability Directive is dead: what actually governs AI agent harm now
Withdrawn in October 2025 after two years without agreement. What the revised Product Liability Directive covers instead, and the gap it leaves for AI agents used business-to-business.
25 August 2026Indirect prompt injection: how an AI agent gets hijacked by the data it reads
Instructions hidden in the content an agent reads, why OWASP says there is no fool-proof prevention, and what to record so a compromised agent’s actions stay provable afterwards.
18 August 2026Transparency log witnesses: how cosigned checkpoints make a log tamper-evident
What a witness actually checks, why a split-view attack defeats a self-hosted Merkle tree, the obligations you accept when a third party pins your checkpoint — and how to verify ours, which gained an independent witness on 17 August.
11 August 2026AI agent audit trails: what to record, and what your records can prove
The fields an agent audit trail needs, the EU AI Act's six-month log retention floor in Articles 12, 19 and 26, and the gap between a record that is complete and one a third party can believe.
4 August 2026How to sandbox an AI coding agent (and what a sandbox cannot prove)
A working bubblewrap profile, the DNS leak we found when we actually ran it, and the point at which a containment boundary stops being something you can demonstrate to anyone else.
30 July 2026Alibi: grade coding agents on what actually happened on disk
A small open-source harness that runs the same missions through agentic CLIs and grades every run against ground truth on disk, never the transcript — with runs sealed by signed receipts a witness can cosign.
28 July 2026Signed execution receipts: a primer on why logs are not evidence
What evidence actually demands, where centralised logging, WORM storage and hash chains each stop, and what a canonical signature over an execution record adds.
21 July 2026How to verify what an AI agent actually did
A practical walkthrough of traceseal-verify and the anatomy of a signed execution receipt: what the signature covers, what an [OK] proves, and what it honestly does not.
19 July 2026EU AI Act Article 50: what it means for teams running AI agents
Transparency obligations apply from 2 August 2026. What Article 50 requires, who it covers, and why signed execution receipts turn compliance into a one-command check.