Kastra enforces restricting file-system access for agents at the moment of execution and writes a signed evidence record for every file operation. Auditors get a complete, append-only trail of who attempted what, what policy fired, why the decision was made, and what data was touched. This evidence maps directly to 21 CFR Part 11, GxP, HIPAA control families.