A commit shows who changed a file and an attestation shows how it was built. Neither explains why an AI agent made the change or which decision it honored.