Software Design Catalog
Owasp AIvss
Back to Catalog
Owasp AIvss core_security_risks

AIVSS09 - Agent Untraceability

Inability to reconstruct who/what/why behind an agent's action — a "forensic black hole."

Intent & Description

'

🎯 Intent

Ensure all agent actions are traceable, auditable, and attributable to specific causes and actors.

📋 Context

Without proper logging and traceability, it becomes impossible to reconstruct who or what caused an agent’s action, creating forensic black holes that hinder incident response and accountability.

💡 Solution

Implement comprehensive logging of all agent actions. Maintain audit trails of decisions and reasoning. Use immutable logs. Monitor for untraceable actions. Implement distributed tracing across agent systems. Ensure log integrity and availability. Use tamper-evident logging mechanisms.'

Real-world Use Case

Use when deploying agents in production environments where accountability and forensic analysis are required.

Source

View Original Source →
📌 TL;DR

Ensure agent actions are traceable. Log comprehensively, maintain audit trails, use immutable logs, and monitor for untraceable actions.

Advantages
  • Enables forensic analysis
  • Supports incident response
  • Provides accountability
  • Facilitates compliance requirements
Disadvantages
  • Logging storage costs
  • Performance overhead
  • Log management complexity
Previous
9 of 10
Next