Annex A — the controls an agent touches
5 of 6 answered from the record. 1 obligation still open. 1 more is outside the record — real obligations that no runtime log can evidence, listed rather than counted.
| Obligation | What proves it | Status |
|---|---|---|
| Activity is logged, and the log is kept.A.8.15 | Append-only at the database level — UPDATE and DELETE are refused, not discouraged.4827 actions · 184 checkpoints, 180 countersigned · #0 | Satisfiedfrom the record |
| Activity is monitored, and a gap in it is noticed.A.8.16 | An agent that stops reporting is a finding rather than a quiet absence.1 of 5 agents have gone quiet · Instrument the agents that stopped reporting. | Openfrom the record |
| An agent may use only the tools its grant names.181 refusals recorded · #18, #23, #24, #48 |
| Satisfiedfrom configuration |
| Evidence can be collected in a form that stands up later.A.5.28 | A self-contained bundle whose verifier runs offline, with no account.184 checkpoints · 180 countersigned externally | Satisfiedfrom the record |
| Systems are protected during audit testing.A.8.34 | Reading the record cannot alter it — there is no write path from a report.reads never write | Satisfiedfrom configuration |
| Personal data in the log is protected.A.5.34 | Metadata and hashes only by default — payloads never leave your storage.metadata-only custody | Satisfiedfrom configuration |
| Information-security policies are defined and approved.A.5.1 | Governance, not runtime.Held in your compliance platform. | Outside the recordnothing here can answer it |