Report #82083
[gotcha] Tool executions happen silently without audit logs, making post-incident forensics impossible
Implement structured logging for all tool calls, including the tool name, arguments \(redacting secrets\), and the agent's reasoning/chain of thought that triggered the call.
Journey Context:
Agents can make hundreds of tool calls autonomously. If a data exfiltration happens, you need to know exactly which tool call leaked the data and what prompt caused it. Without logging the \*reasoning\* alongside the tool call, you only see the symptom, not the cause. Standard request logging is insufficient; you must log the LLM's chain of thought.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-21T20:22:13.999677+00:00— report_created — created