Audit Trails for Accountability in Large Language Models
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) are increasingly embedded in consequential decisions across healthcare, finance, employment, and public services. Yet accountability remains fragile because process transparency is rarely recorded in a durable and reviewable form. We propose LLM audit trails as a sociotechnical mechanism for continuous accountability. An audit trail is a chronological, tamper-evident, context-rich ledger of lifecycle events and decisions that links technical provenance (models, data, training and evaluation runs, deployments, monitoring) with governance records (approvals, waivers, and attestations), so organizations can reconstruct what changed, when, and who authorized it. This paper contributes: (1) a lifecycle framework that specifies event types, required metadata, and governance rationales; (2) a reference architecture with lightweight emitters, append only audit stores, and an auditor interface supporting cross organizational traceability; and (3) a reusable, open-source Python implementation that instantiates this audit layer in LLM workflows with minimal integration effort. We conclude by discussing limitations and directions for adoption.
Key facts. Cited by 12 papers in the map (data through 14 Oct 2026). First posted on arXiv 28 Jan 2026.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2026: 12.
12 papers.
- 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agentscited by 37
- 2026Auditable Agentscited by 15
- 2026Reinforcement Learning from Human Feedback: A Statistical Perspectivecited by 4
- 2026Responsible Agentic AI Requires Explicit Provenancecited by 3
- 2026Agent Flight Recorder: Tamper-Evident Audit Trails with On-Chain Anchoring for Long-Horizon Tool-Using Agentscited by 2
- 2026Trustworthy Agent Network: Trust in Agent Networks Must Be Baked In, Not Bolted Oncited by 1
- 2026Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Responsecited by 1
- 2026Security and Privacy in Agentic AI: Grand Challenges and Future Directionscited by 0
- 2026AuditWeave: A Tamper-Evident, Auditor-Navigable Evidence Layer for AI-Assisted and Data-Transformation Workflowscited by 0
- 2026Schema-Bound LLM Control of Scientific Instrumentation through Model Context Protocol Skillscited by 0
- 2026Operational Identity: A Finite Audit of Declared and Implemented Rules of Samenesscited by 0
- 2026Pollard: Governed Semantic Execution Trees for Framework-Independent AI Agent Control and Replaycited by 0
- 2026Pollard: Governed Semantic Execution Trees for Framework-Independent AI Agent Control and Replay12 Oct 2026
- 2026Agent Flight Recorder: Tamper-Evident Audit Trails with On-Chain Anchoring for Long-Horizon Tool-Using Agents1 Sep 2026
- 2026Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response28 Jul 2026
- 2026Operational Identity: A Finite Audit of Declared and Implemented Rules of Sameness22 Jul 2026
- 2026Schema-Bound LLM Control of Scientific Instrumentation through Model Context Protocol Skills19 Jul 2026
- 2026Security and Privacy in Agentic AI: Grand Challenges and Future Directions7 Jul 2026
- 2026AuditWeave: A Tamper-Evident, Auditor-Navigable Evidence Layer for AI-Assisted and Data-Transformation Workflows14 Jun 2026
- 2026From Agent Traces to Trust: A Survey of Evidence Tracing and Execution Provenance in LLM Agents3 Jun 2026
- 2026Trustworthy Agent Network: Trust in Agent Networks Must Be Baked In, Not Bolted On18 May 2026
- 2026Responsible Agentic AI Requires Explicit Provenance16 May 2026
- 2026Auditable Agents7 Apr 2026
- 2026Reinforcement Learning from Human Feedback: A Statistical Perspective2 Apr 2026