Copilot Audit and Provenance

Every copilot request, reasoning trace, citation, proposal, and authorization decision is retained immutably so any output can be reconstructed and reviewed.

Everything is on the record

A copilot that advises on a nuclear machine must be fully auditable. Kronos retains, for every request, the complete record: the assembled context (with the twin-state snapshot and prompt version), the reasoning trace of tool calls and observations, the retrieved sources with their provenance ids, the composed answer with its citations, any proposal submitted, and the L4 authorization and human-approval decisions.

The audit record

audit_record:
  request_id, timestamp, operator, copilot, machine
  context: {prompt_version, twin_state_snapshot_id, budget}
  trace:   [(thought, tool_call, observation), ...]
  sources: [provenance_id, ...]
  answer:  {text, citations[], uncertainty}
  proposal: {action, L4_decision, human_decision} | null
  eval:    {grounding_score, calibration}   # if sampled
  -> append-only, hashed, linked to L2 lineage

Why this depth

• Reconstruct exactly why any advice was given, months later
• Attribute an outcome to a specific proposal and approval chain
• Feed the evaluation harness with real production cases
• Detect drift by comparing production behavior to golden-set behavior
• Support regulatory and safety review of an autonomous-adjacent system

The record is append-only and hashed, linked into the L2 data-lineage and provenance systems, so it cannot be quietly altered. Because prompt version, model version, twin version, and retrieval snapshot are all captured, any answer is reproducible: re-running the recorded context should yield the recorded answer, which is itself a check on determinism.

Confidentiality preserved in the record

Audit depth does not override confidentiality. The record respects the same tier controls as retrieval: internal-confidential sources are referenced by provenance id and access-scoped, never copied into a lower-tier context. This keeps the full chain reviewable by authorized people while honoring the firewall between confidential and public material.

The audit record is the ground truth for accountability, evaluation, and improvement. It closes the loop with continuous evaluation (production cases become test cases) and underpins human oversight (an operator can always answer 'why did it say that').