The Take — The audit trail is becoming the product.
On October 9 Google introduced a Gemini agent for work that keeps one set of memories and a personalization graph across devices, and said every action it takes is written to an audit trail attributed to the agent rather than to a person. Three monitors surfaced it (memory, general news, decision lineage). Same 48 hours: Auth0's guide to closing the human-to-agent audit gap (workflow IDs, Token Vault, CIBA approvals); RSA Agent ID with a gateway enforcing policy to tool/argument level; Snowflake Cortex AI Gateway in public preview with 100+ MCP servers; Oracle IAM policies by model ID; TrueFoundry dollar budgets; Mastercard Agent Pay trust services. Demand: Brookings on continuous governance; Thoughtworks survey of 3,200 CIOs (91% of North American CIOs say adoption outpaces governance); Orange Spain's 1,000+ agents on Gemini Enterprise. Implication: the gateway/control plane is the contested layer; Temporal absorbed the Oso (agent authorization) team. Counterpoint: a log is not a control, the trail can be an attack surface (NeuralTrust: attacker content in logs/tickets/emails can prompt AI systems), and most launches are previews or guidance with no quantified outcomes.
Signals that matter
- Google Gemini agent for work (Oct 9): agent-attributed audit trail + persistent memory — hyperscaler sets the attribution default.
- Snowflake Cortex AI Gateway (public preview) + RSA Agent ID (Oct 8-9): gateway becomes tool-level enforcement point.
- Auth0 delegation audit-gap guide (Oct 10): concrete recipe for tracing who authorized what.
- Mastercard Agent Pay trust services; HSBC/Ant agent micropayment test (Oct 10): card and bank rails adding agent verification.
- Orange Spain: 1,000+ custom agents on Gemini Enterprise (Oct 9): scale past pilots, no ROI figure.
- Temporal brings in Oso team (Oct 8); Doxx.net $38M Series A (a16z); Restate $20M Series A: money follows authorization, networking, durable execution.
- MCP servers from Functionize, Precisely, Datasparc; Anthropic SDK computer-use beta classes (Oct 8-9): MCP is the default integration door.
- KPMG State of AI 2026: coding-study speed gain not statistically significant; comprehension 50% vs 67% — measure quality, not just speed.
STALE: open-source infra (Oct 2, agentgateway v1.6.0), RaaS pricing (Oct 1), regulation (Sep 17, ASD agentic AI harness guidance); funding/M&A aging (Oct 8).