How to build an audit trail for AI agent tool calls that survives an auditor — NullRun