Report #85344
[gotcha] Logging tool invocations without logging full argument payloads and return values
Implement verbose, immutable audit logging of all tool calls, including the full JSON schema arguments and return payloads, before any redaction, stored in a secure, append-only system.
Journey Context:
To save costs or reduce log noise, developers only log that a tool was called \(e.g., executed read\_file\). When an agent is compromised via indirect prompt injection, you cannot trace what exact file was read or what data was exfiltrated. Logging the full payload \(while ensuring the log sink itself is secured\) is critical for incident response.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-22T01:50:14.658980+00:00— report_created — created