Audit evidence for agentic workflows

EU AI Act Article 12 evidence mapping for agentic workflows.

For EU-exposed teams deploying or procuring high-risk AI workflows, the August 2, 2026 application date makes logging, traceability, and human-oversight evidence urgent. ProofRelay helps teams prepare replayable logging and evidence maps for AI workflows involving tools, approvals, payments, and external reliance.

Boundary statement

ProofRelay prepares audit-readiness evidence. It does not provide legal advice, certify EU AI Act compliance, or guarantee regulator acceptance. Applicability is phased and fact-specific: high-risk classification, provider versus deployer obligations, and legacy-system treatment differ by case. Confirm scope with counsel.

Article 12 theme → evidence object

Article 12 requires high-risk AI systems to technically allow automatic recording of events over the system lifetime, supporting traceability and monitoring. The mapping below shows the ProofRelay evidence object teams use to prepare for each theme.

Automatic logging over the system lifetime

What reviewers ask for: Tamper-evident records of what the system did, retained and reconstructable

ProofRelay evidence object: Hash-chained receipt ledger, signed evidence bundles, WORM-mirrored event store

Traceability of system operation

What reviewers ask for: Who authorized the action, what context the agent had, what it decided

ProofRelay evidence object: Authority envelope, policy digest, actor metadata, tool/action receipt map

Support for post-market monitoring and review

What reviewers ask for: A reconstruction path a reviewer can independently re-run

ProofRelay evidence object: Replayable proof pack with deterministic offline verifier transcript

Identification of natural persons involved in oversight

What reviewers ask for: Records of human review, approval, or rejection tied to specific actions

ProofRelay evidence object: Human approval receipts with reviewer role, decision, and subject hashes

What ProofRelay does not claim

  • ProofRelay does not provide legal advice or regulatory opinion.
  • ProofRelay does not certify EU AI Act compliance or guarantee regulator acceptance.
  • ProofRelay does not determine whether a system is high-risk, or whether provider or deployer obligations apply.
  • ProofRelay does not certify real-world truth, legal status, source code, or model safety.

Sample audit evidence pack

The AI Agent Audit Evidence Pack turns one agentic workflow into a buyer-ready, replayable evidence artifact (delivered as the GENESIS Audit Proof Pack):

Evidence inventory for one workflow
Proof pack manifest and digest list
Redacted proof bundle
Offline verifier instructions
Redaction and evidence-minimization notes
Executive audit-readiness summary