A tamper-resistant record of who did what, when, and with which data, kept long enough to answer an investigation.
You have done this if
You logged every tool call with the user, the arguments and the result to an append-only store.
Say it in a review
Every tool invocation is audited with the user identity, inputs and outcome, retained for a year.
On the AI Application map Audit