Why should you care?

SOX and HIPAA reviews require reconstructing AI-assisted decisions months later.

See it live — copy this example

Paste into an ASP.NET Core 8+ / AgentNest project, then run with dotnet run (set your API keys in user-secrets).

// AgentNest.Audit/AiAuditWriter.cs
public sealed class AiAuditWriter(AgentNestDbContext db)
{
    public async Task WriteAsync(AiAuditEntry entry, CancellationToken ct)
    {
        db.AiAudits.Add(new AiAuditEntity
        {
            TenantId = entry.TenantId, UserId = entry.UserId, Agent = entry.Agent,
            PromptHash = SHA256.HashData(Encoding.UTF8.GetBytes(entry.Prompt)),
            ToolsJson = JsonSerializer.Serialize(entry.Tools), CreatedUtc = DateTime.UtcNow
        });
        await db.SaveChangesAsync(ct);
    }
}

What happened?

• AiAuditWriter stores prompt hash and tool list — not always full prompt text — balancing forensics with PHI minimization.
• Follow the steps below — typing the code yourself is the fastest way to learn.

Practice next

1. Create AiAudits table with tenant, user, agent, prompt_hash, tools_json.
2. Call AiAuditWriter from AgentBase after each successful run.
3. Retain audits per tenant contract — e.g., 7 years finance.
4. Ship audit events to Azure Event Hub for SIEM.
5. Add chunk IDs retrieved field for RAG traceability.

Remember

Audit agent runs with tenant, user, tools, prompt hash. Minimize PHI in stored prompt content. Immutable SQL audit trail for enterprise customers.

SOX ERP review

Auditors trace AI-generated variance narrative to tools and source GL lines.

Outcome: AiAudit rows link agent run to fetch_balance calls and user identity.