Audit evidence for agentic workflows
EU AI Act Article 12 evidence mapping for agentic workflows.
For EU-exposed teams deploying or procuring high-risk AI workflows, the August 2, 2026 application date makes logging, traceability, and human-oversight evidence urgent. ProofRelay helps teams prepare replayable logging and evidence maps for AI workflows involving tools, approvals, payments, and external reliance.
Boundary statement
ProofRelay prepares audit-readiness evidence. It does not provide legal advice, certify EU AI Act compliance, or guarantee regulator acceptance. Applicability is phased and fact-specific: high-risk classification, provider versus deployer obligations, and legacy-system treatment differ by case. Confirm scope with counsel.
Article 12 theme → evidence object
Article 12 requires high-risk AI systems to technically allow automatic recording of events over the system lifetime, supporting traceability and monitoring. The mapping below shows the ProofRelay evidence object teams use to prepare for each theme.
Automatic logging over the system lifetime
What reviewers ask for: Tamper-evident records of what the system did, retained and reconstructable
ProofRelay evidence object: Hash-chained receipt ledger, signed evidence bundles, WORM-mirrored event store
Traceability of system operation
What reviewers ask for: Who authorized the action, what context the agent had, what it decided
ProofRelay evidence object: Authority envelope, policy digest, actor metadata, tool/action receipt map
Support for post-market monitoring and review
What reviewers ask for: A reconstruction path a reviewer can independently re-run
ProofRelay evidence object: Replayable proof pack with deterministic offline verifier transcript
Identification of natural persons involved in oversight
What reviewers ask for: Records of human review, approval, or rejection tied to specific actions
ProofRelay evidence object: Human approval receipts with reviewer role, decision, and subject hashes
What ProofRelay does not claim
- ProofRelay does not provide legal advice or regulatory opinion.
- ProofRelay does not certify EU AI Act compliance or guarantee regulator acceptance.
- ProofRelay does not determine whether a system is high-risk, or whether provider or deployer obligations apply.
- ProofRelay does not certify real-world truth, legal status, source code, or model safety.
Sample audit evidence pack
The AI Agent Audit Evidence Pack turns one agentic workflow into a buyer-ready, replayable evidence artifact (delivered as the GENESIS Audit Proof Pack):
Evidence inventory for one workflowProof pack manifest and digest listRedacted proof bundleOffline verifier instructionsRedaction and evidence-minimization notesExecutive audit-readiness summary