Topic
Audit & compliance
Each change Deixic makes to a failing control carries the policy it ran under, the approver and reason, the read-back, the evidence attached to the test, and a receipt.
8 articles
Lead article
· 5 min read
A screenshot is not a read-back
Auditors can test a screenshot only by trusting whoever took it. A read-back records the before and after state, the approver and reason, and a second read of the system.
Archive
All Audit & compliance articles
- NIST AI RMF and ISO/IEC 42001 for the agent runtime4 min
- Replay: reconstructing an agent action from the audit log8 min
- Replace the AI security questionnaire with a few concrete demonstrations4 min
- What should an agent audit actually cover?4 min
- What an agent audit row should carry7 min
- What should an agent keep, and for how long?4 min
- What the EU AI Act means for the agent runtime: an Article-by-article read8 min