Evidence and audit

Audit trail

A chronological record of who accessed a system and what operations they performed, enough to reconstruct events.

An audit trail is a chronological record of system activity, showing who accessed a system and what operations were performed, sufficient to reconstruct and examine the sequence of events. NIST's glossary gives several closely related definitions of the term. For agents, the trail must record both identities, the agent and the principal, along with the mandate relied on, each tool call and its result, and any human approvals.

Agent Minute explains this term on 16 October 2026.

Related terms