Logging can tell you something happened. But none of that alone determines whether the action should be allowed, given the full chain of authority behind it.

Knowing who an agent is and what it may access tells you nothing about whether what it just did was supposed to happen.

Logging can tell you something happened. But none of that alone determines whether the action should be allowed, given the full chain of authority behind it.