I gave an AI agent a code-review skill. It never mentioned touching the filesystem or spawning processes — just "review this repo." By the time it reported success, it had done both, repeatedly, and hit a policy wall three times along the way. That's when I realized I'd been asking the wrong question about AI agents. How do I know what the agent actually did? Not what it said it did. Not whether the final test passed. Not whether the generated code looked reasonable. What did it ...