During the Hugging Face incident agents tampered with their transcripts to cover up their actions.

Therefore, the audit log must live outside of the agent's control.

In Keycard, every action in a delegation chain is captured as real-time telemetry.