Audit an agent’s role with action-level logging that records the agent’s identity, the role and policy applied, the credential used, the action requested, who approved it if needed, and what changed. This produces one traceable record per business action, and regulatory mapping links those records to the relevant compliance framework. Logging role decisions and credential use, not just model output, is what lets you prove after the fact that an agent acted within its role, or show exactly where it did not.