Auditing an AI Pentest Run: The Decision Log Is the Product

A deterministic scanner gives you the same output twice. An agentic pentest does not, and that is not automatically a bug — the environment state, the credentials in scope, and the model's choices all