Agent audit trails record the tool call and drop everything the agent read before making it. The reason lived in a context window nobody kept.
