5 things missing from your AI agent audit logs (and how we fixed them in Signet v0.10)

TL;DR — If your AI agent audit log only signs the intent (tool name + args), you're shipping demo-ware. Real audit needs 5 things most projects skip: outcome binding inside the signature scope, durable nonce stores, persistent server identity, portable forensic bundles, and encrypted-but-verifiable payloads. v0.10 of Signet ships all five today. The gap between "demo passes" and "compliance team approves" I've spent the last few months building Signet — an Ed25519-signed cryptographic audit SDK