How do you verify what your agent actually changed, not just what it says it did?
A builder caught an agent that reported updating one customer while silently modifying another, and argues that transcripts and LLM grading both trust the agent's own story. The working fix is running agents against a throwaway database, logging every tool call through a gateway, and deciding pass or fail from a before-and-after state diff instead of the agent's report.