Trust

Audit Ledger and Rollback

Adoption changes must be logged, idempotent, and reversible.

Trust

What this means

Audit records and rollback tokens describe who changed what and how to unwind it.

Trust

Why it matters

Agent state changes without recovery are operational risk.

Trust

How agents use this

Agents preserve idempotency keys, event ids, and rollback tokens.

Trust

How humans verify this

Humans inspect snapshot metadata and the rollback page before operator approval.