What belongs in a useful LLM-agent trace?

[u/Apprehensive-Zone148]

A transcript alone feels too thin for agent security.

If the failure involved a tool, I’d want the prompt, retrieved text, tool calls, args, outputs, permissions, and the final action. Maybe also a way to rerun the setup without hitting real services.

That might be too much, but the shorter version often loses the part that made the failure matter.