The evidence problem
Most SMBs pass an audit by reconstructing history from Slack threads and memory. It is slow, it is expensive, and it degrades the moment someone leaves.
Because every agent action and every human approval is written to an immutable decision log, the audit artefact is a by-product of doing the work rather than a project you schedule each year.
What the log actually contains
The trigger, the agent that responded, the reasoning it produced, the action proposed, who approved or declined it, and the resulting state change — with timestamps you did not write.
Takeaway. Compliance stops being a project when the evidence writes itself.