​Why Authentication Is Not Enough For Agents

Logging can tell you something happened. But none of that alone determines whether the action should be allowed, given the full chain of authority behind it.