Useful checklist. The next layer I’d want beyond command audit logs is an action receipt.

For each agent-triggered action, capture not only command, invoker, source, and grant, but also authority boundary, evidence references, policy/check version, idempotency key, redaction class, result, and safe next action. That gives security/compliance a record of why the action was admissible, not just that it happened.

The command log tells you what ran. The receipt tells you whether it should have been allowed to run.