Ask HN: AI agent acts. Your logs say so. But you wrote the logs

5 points · 2 visible top comments · 2026-08-27 17:36:42 UTC

news.ycombinator.com · Read Story HN original

Hi I am really lost here, if you are deploying AI agents in production, how are you handling auditability? also what would make you trust an external witness protocol? fo reference, the Amazon vs Perplexisty use case!!

Comments

Akaoutar · 2026-08-27 17:42:59 UTC

I dont think that you need that. So you shoudnt be lost at all

Yahyaaa · 2026-08-27 17:49:32 UTC

I dont think so, You dont need independent proof until you are in court, Perplexity and Amazon both had logs, neither could prove who was behind thoses actions or who authorized what!

Akaoutar · 2026-08-27 17:52:00 UTC

You may be right but I'm not convinced

sshussain270 · 2026-08-28 09:15:24 UTC

Can you use public-key signatures like RSA/ECDSA like TLS certificates do but for agents entering logs? So the private key remains private to agent only, not even the LLM. Also, each log entry could include the hash of the previous one before the agent signs it so any alternation in previous log signatures break the ones after it, like block chains do.

Yahyaaa · 2026-08-28 11:40:28 UTC

Yes true, and this is somehow we are doing it. However, integrity is necessary but not sufficient, the chain proves nothing was changed It doesnt prove the record was accurate