AI Systems
Agent audit trail: reconstruct the action, approval, and outcome
If the only witness is the agent, you do not have an audit trail. You have a testimony.
Category
Practical analysis of AI agents, reasoning systems, and reliable automation for founders and operators shipping production software.
AI Systems
If the only witness is the agent, you do not have an audit trail. You have a testimony.
AI Systems
A cap that resets on every retry is a cap per attempt, not per task.
AI Systems
Let the agent be wrong on paper first, where a mistake costs a comparison instead of a customer.
AI Systems
A scorecard records how the role performed. The ladder decides what it may do next. The action still sets the ceiling.
AI Systems
A script repeats a path. An agentic workflow holds a goal, uses tools, and needs a ceiling.
AI Systems
If it cannot refuse a tool call, it is not an agent you can run. It is a demo that can spend money.
AI Systems
Agents are infrastructure, not toys. This book installs a strategic intelligence layer you can design, govern, and run in ninety days.
AI Systems
A citation makes two claims: this document exists, and it says this. Check both in the source itself, not by asking the tool.
AI Systems
One is a way of working you write down. The other is software you install.
AI Systems
Same content, same author, two languages. The Dutch version was 2% longer in words and 20% longer in tokens.
AI Systems
A fluent answer is not a graded one. Score the trace before you trust the sentence.
AI Systems
The forum fight is cloud versus local. The operator question is which class owns this task.
AI Systems
An agent's memory is a database that the agent writes itself. Give it the rules you would give any other database.
AI Systems
If the model can ship while the reviewer is on a plane, you did not apply HITL. You labelled a spectator.
AI Systems
Starting another agent is a one-time decision. Reading its work, checking its handoffs and handling its exceptions come back every week.
AI Systems
An expired request records silence. A rejected request records a decision. Both must block the action.
AI Systems
If nobody can fail the output against written criteria, the loop is decorative.
AI Systems
If the work can ship while the watcher is on the gallery, the loop is already the wrong loop.
AI Systems
Best first. Then price. The board that names every model something else beats without a trade-off.
AI Systems
One is a human representative. The other is a worker with a ceiling. They do not replace each other.
AI Systems
The scarce work is ownership, permission, and review, not the model name on the invoice.
AI Systems
Care about the permission and the log. The logo on the protocol is the least interesting part.
AI Systems
The plug is standard. What the model reads through it is not.
AI Systems
The full form is the least interesting part. The permission boundary is the operating decision.
AI Systems
OAuth tells your server the token is genuine and meant for it. Your code decides whether this call may approve this expense.
AI Systems
In most MCP setups the model still makes a function call. MCP changes where the tool lives, not how the model asks for it.
AI Systems
A contract can clear a supplier while a production model remains unknown. Compare actual calls with the register before you trust it.
AI Systems
An agent's mistake and the workflow that let it through are two different problems. MAST gives you a vocabulary for both.
AI Systems
The number of models is the wrong question. The right one: did anyone write down why each model runs, and what happens when it stops?
AI Systems
HITL is who can fail the output. The doctrine is what must be refused when no one is watching.
AI Systems
An instruction to stop is a request. A stop is a control that someone outside the agent can operate.
AI Systems
The system can retrieve clause 12.3 perfectly and still miss the signed amendment.
AI Systems
A vector store is not a trained model. A trained model is not a worker. A worker without a ceiling is a demo.
AI Systems
A stopped agent is not a retired agent. The next schedule, a copied key or a monthly plan can keep it working and billing.
AI Systems
Count the people who can say no to the work. One name means ROSTER. Several names mean you need CHORUS as well.
AI Systems
Stop collecting briefings. Start changing Monday.
AI Systems
Rules in five tools. MCP without contracts. Skills nobody owns. That is not a model problem.
AI Systems
An instruction file is a request. A control is a refusal.
AI Systems
You are not writing a book. You are building a knowledge-production system that happens to output books. BooksOS makes that system auditable.
AI Systems
Prompts in chat are not architecture. Scattered rules are not governance. STACK turns your repository into a maintainable agent operating system.
AI Systems
Tools store state. Protocols decide. CHORUS is the operating layer between having agents and running them as one team.
AI Systems
An answer can quote the right document and still draw the wrong conclusion.
AI Systems
A second tool without a ceiling is not leverage. It is a second way to spend.
AI Systems
If you cannot name the edge, you have a poster. If you cannot open the node, you have a rumour.
AI Systems
A cascade without a stop rule is spending until something sounds fluent.
AI Systems
If it answers as a doctor, it is already the wrong worker. If it cannot show the row it used, it is a vibe.
AI Systems
If ownership or review disappears at a boundary, the canvas is not coordinating the work.
AI Systems
A well-run agent can still be the wrong worker to deploy first.
AI Systems
If the founder is the universal exception handler, you do not have dynamics. You have a queue with extra tools.
AI Systems
If it cannot refuse a tool call, it is not an agent you can run. It is a demo that can spend money.
AI Systems
If you cannot fill the seven fields, do not hand it a key.
AI Systems
The ledger is the product. The reference list is a rendering.
AI Systems
The connector is a plug. The server is the tool. The ceiling is still the product.
AI Systems
Agents draft. Gates decide. A fluent chapter that cannot survive a fact-check is inventory you will throw away.
AI Systems
Org charts name reporting lines. CHORUS names coordination lines.
AI Systems
RAG names the architecture. GRAIN names the honesty check.
AI Systems
Keywords catch the name. Vectors catch the paraphrase. You still have to open the hit.
AI Systems
A real source ID can decorate a false claim. Grounding begins after the citation resolves.
AI Systems
If you cannot name which model owns which job, you do not have a routing policy. You have a default.
AI Systems
A fluent AI answer can still be unsourced. RAG is the method that has to show the page it used.
AI Systems
An AI assistant can sound certain. ReasonKit makes it show which claims were checked, and stop when the evidence is missing.
AI Systems
A role is defined by what it may not do. Six written decisions turn an AI agent into a specialist you can grade, fix or retire.
AI Systems
A digest proves that a system can produce text. SENSE asks where that text changes the work.
AI Systems
The agent OS should be versioned like the app. If the rules live in five tools, you have debt, not a model problem.
AI Systems
Three links can be one source. TRACE is how you find out before the decision does.
AI Systems
An agent earns its cost only when the next step depends on what it finds. Most tasks never get there.
AI Systems
The furniture is optional. The named passage is not. If you cannot open the file, you did not ship retrieval.
AI Systems
Capability arrived in an afternoon. The protocol never did. That gap is the whole story.
AI Systems
The model is the last thing to blame, not the first.
Desk companion
I know this page, the blog, the glossary, and the books. Ask what it means, or what to read next. I will not invent a buy button.