Checklist for Evidence-Grade Auditability in Workflows

This document is a checklist designed to assist teams in evaluating whether their approach to producing audit records meets the necessary standards for completeness, integrity protection, and usability under scrutiny. It outlines specific criteria that must be met for an agent workflow to pass security reviews, define evidence requirements for production approval, and prepare for regulated reviews, incident responses, or internal audits. The checklist includes items such as the ability to export an evidence package that reconstructs activity end-to-end, ensuring records include comprehensive details about actions taken, and verifying that timestamps are reliable and synchronized. Additionally, it addresses the importance of integrity protections to prevent silent modifications, maintaining a chain of custody for evidence handling, and implementing privacy controls to minimize raw data capture. The document emphasizes the need for incident response readiness to quickly utilize evidence in understanding what occurred during an incident.