AGEI

Audit Pack Workflow

How AGEI Creates Audit Packs

See how governance evidence gets organized into verifiable, exportable audit packs for internal auditors, external auditors, and regulators.

What is an Audit Pack?

An audit pack is a sealed collection of governance evidence that auditors can review, verify, and export. Instead of hunting for screenshots, logs, and approval emails, auditors get one organized package containing:

Evidence Items

Signed receipts for AI actions
Gate evaluation decisions
Human review decisions (HITL)
Authorization events
Decision lineage (input → gate → output)

Verification Features

Cryptographic seal (pack cannot be modified)
Tamper-evident verification
Timestamp of pack creation
Completeness assessment
Exportable format for submission

Audit Pack Workflow (7 Steps)

AI Activity Creates Receipts

Governance events generate signed evidence

As AI systems operate, AGEI creates receipts for:

• User requests to AI agents
• Policy gate evaluations (approve/deny/escalate/inspect)
• AI responses or generated outputs
• Human review decisions
• Authorization checks

📋 Each receipt is signed, timestamped, and linked to related receipts.

Audit Period Defined

Organization selects evidence scope

Auditors or compliance teams define what evidence to review:

• Date range (e.g., Q1 2026, last 90 days)
• AI system or agent type
• Outcome filter (e.g., all denials, all escalations)
• Department or user group
• Specific incidents or decision types

🎯 Scope determines which receipts get included in the pack.

Audit Pack Created

Empty pack initialized with metadata

The system creates a new audit pack container:

• Unique pack ID assigned
• Creator identity recorded
• Audit period timestamps set
• Purpose/description documented
• Status: Open

📦 At this point, the pack is empty but ready to receive evidence items.

Evidence Items Added

Receipts and related evidence included

Evidence items are added to the pack:

• Receipt snapshots (full content preserved)
• Gate evaluations with decision reason codes
• Human review records
• Authorization event logs
• Related lineage references

➕ Items can be added incrementally until the pack is sealed.

Pack Sealed

Cryptographic seal prevents modification

Once evidence collection is complete, the pack is sealed:

• Pack hash computed (SHA-256 of all items)
• Digital signature applied (Ed25519)
• Sealed timestamp recorded
• Status: Sealed
• No further modifications allowed

🔒 After sealing, any change to the pack breaks verification.

Verification & Review

Auditors verify pack integrity

Auditors can verify the pack:

• Pack hash verification (content integrity)
• Pack signature verification (authenticity)
• Individual receipt verification (each item)
• Lineage completeness check
• Timeline review (chronological order)

✅ Verification confirms the pack hasn't been tampered with since sealing.

Export & Submission

Pack exported for audit submission

The sealed pack can be exported:

• JSON export (machine-readable)
• PDF report (human-readable)
• CSV data export (for analysis)
• Verification instructions included
• Public verification URL provided

📤 External auditors or regulators can verify the pack independently.

Example: Q1 2026 Medical AI Audit Pack

Pack Metadata

Pack ID:

pack-q1-2026-medical-ai

Period:

Jan 1, 2026 - Mar 31, 2026

Items Included:

247 receipts, 89 gate evaluations, 12 HITL decisions

Status:

Sealed

Pack Contents:

142 approved patient information requests
12 escalations to medical professionals (chest pain, severe symptoms)
8 denied diagnosis/treatment requests (outside AI scope)
85 informational responses (general health questions)

Verification Status:

Pack hash verified

Pack signature verified

All 247 receipts verified

Lineage complete (no gaps)

Why Audit Packs Matter

For Internal Auditors

✅ Evidence organized and ready for review

✅ Completeness checks identify gaps

✅ Reduces manual evidence hunting from weeks to hours

✅ Verifiable integrity (not just screenshots)

For External Auditors

✅ Independent verification possible

✅ Export format for submission

✅ Cryptographic proof of authenticity

✅ Timeline reconstruction supported

For Compliance Teams

✅ Regulatory submission ready

✅ Demonstrates governance controls

✅ Shows oversight evidence

✅ Supports SOC 2, ISO, FDA, etc.

For Legal Teams

✅ Defensible evidence of AI governance

✅ Tamper-evident record

✅ Decision lineage traceable

✅ Supports litigation defense

Ready to See AGEI in Action?

Explore more examples or try the interactive demos

Try Policy Gate Sandbox

See how AI actions create governance receipts in real-time.

See Auditor Review Workflow

Learn how human review decisions become verifiable evidence.

Verify Evidence

Check the cryptographic integrity of AGEI receipts.