← Vetro Attest · Free Art. 12/14 checker · Free EU AI Act tools
Audit log for the OpenAI Agents SDK
The OpenAI Agents SDK has tracing built in: every agent run produces a trace with spans for generations, function (tool) calls, handoffs between agents and guardrail checks. By default those traces go to OpenAI's dashboard, which is excellent for debugging and not something you control as evidence.
The SDK lets you register your own trace processors. That is the hook for an audit log you keep.
The span types that matter
generation: an LLM call, with model and usage.function: a tool call, with input and output.handoff: control passing from one agent to another.guardrail: an input or output guardrail and whether it tripped.agentandcustom: run structure and your own events.
The Vetro processor
Vetro ships a trace processor with no dependency on the SDK packages. Register it before running an agent:
import { addTraceProcessor } from '@openai/agents';
import { createVetroTracingProcessor } from './openai-agents-tracer.mjs';
const run = vetro.startRun({ name: 'billing-agent' });
addTraceProcessor(createVetroTracingProcessor(run));
Generations and tool calls map to typed ledger events; handoffs, guardrails and custom spans are recorded as generic agent events. Every event is hash-chained and the run is signed with ed25519.
Enforcement vs. recording
Policies are evaluated at span start, before the tool runs. Whether a block actually stops the agent depends on whether your SDK version propagates a processor's error back to the caller. If you need hard blocking, verify that behaviour; the SDK's own guardrails are the other place to enforce.
Why keep your own copy
Guardrail trips and handoffs are exactly what an auditor asks about under Article 14. A signed ledger you hold, verifiable with a public key, answers without depending on a vendor dashboard's retention.
Check your own logs
Paste a Vetro ledger or an OpenTelemetry GenAI trace export into the free checker: it verifies integrity and shows which record-keeping obligations your evidence covers, in your browser. When you need something to hand to an auditor or a customer, the countersigned EU AI Act report costs 49 USD, one-off: an ed25519 counter-signature over your evidence plus a mapping to the articles, including an explicit list of what the log cannot show.
See a sample ledger verified in one click, check your own logs free or get the countersigned EU AI Act report.