How do I get an audit trail of what AI did, what data it touched, and who approved it?

Log every AI request at the platform layer — usage, cost, and logs per model, key, and endpoint — attribute activity to named users, and require a recorded human approval before consequential output leaves the business, with an AI-disclosure footer on the message itself. The audit trail is generated as work happens, not reconstructed afterwards.