The semantic gap is the investigation target
A tool-call record says what the agent requested. Process and file evidence says what executed. Connecting the two lets a reviewer distinguish a declared action from the low-level effects it produced.
System evidence does not replace application context
Framework spans, gateway logs, and evaluation platforms remain useful. AgentSight adds another boundary for closed components and host effects, and can export supported model activity into standard telemetry paths.