What is audit trail?
In short:An audit trail is the record of what an agent did, when, for whom and under which decision. For agents it should include tool calls, sessions and approvals, not just logins. It is how teams answer questions after an incident and how they show regulators that controls worked.
How does it work?
Gateways and policy engines log each call with agent, person, verdict and result, then export to a SIEM.
What does it look like in practice?
NewCore keeps tool calls, sessions and approvals in one audit trail; Silverfort describes an immutable one.