Agent Flight Recorder proposes tamper-evident audit trails for agents that run thousands of actions

arXiv·low signalXBlueskyLinkedInCopy link

arXiv 2609.01931 (2026-09-01) frames the problem concretely: when a coding agent deletes a production database or a prompt injection spreads across agents, you need causality, authority and non-repudiable third-party verification, not a log file. It captures each action as a canonically serialized event binding eight semantic fields from intent through execution to provenance, with hash chaining and Merkle batching. The on-chain anchoring is optional dressing; the eight-field event schema is the part worth reading.