What do you log before trusting an AI worker with another real tool call?

A lot of agent demos show the final answer. I care more about the trail before the answer.

For any AI worker that can act, I want to see the source it used, the exact tool target, the permission check, the confidence band, the owner, and the reason it did not escalate. If those are missing, I do not really know what happened.

My stop condition is: no audit trail, no second tool call.

What is the minimum log line you need before you trust an agentic worker to keep going?