---
title: "Auditability"
description: "2 posts about Auditability, summarised, each linking to the original."
---

# Auditability
> 2 posts about Auditability, summarised, each linking to the original.

## Articles

### [When AI takes the wheel: The rise of invisible identity intelligence in 2026](https://yomu.fyi/post/when-ai-takes-the-wheel-the-rise-of-invisible-identity-intelligence-in.md)
- Company: [Twilio](https://yomu.fyi/company/twilio.md)
- Author: Catie Kolander
- Published: Sep 1, 2026
- Type: Explainer

Point-in-time authentication treats an initial password, MFA, or passkey check as sufficient trust for the rest of a session, leaving post-login account takeovers, session hijacking, and risky API actions insufficiently evaluated. The proposed model replaces this front-door assumption with continuous context evaluation using passive telemetry such as network, telecommunications, device, behavioral, and transaction signals, then intervenes when risk scores or policy thresholds rise. For AI agents, delegated authority sets temporal, monetary, and API limits through short-lived credentials, while Know Your Agent lineage links execution to the authorizing human and deploying enterprise. High-impact actions can trigger human checkpoints through SMS, push, or voice channels, while immutable logs, transparent scoring, tenant isolation, and session lineage support auditability and compliance. The resulting architecture aims to keep low-risk autonomous work unobtrusive while making sensitive operations controllable and provable.


### [Setting the standard for support: What Spain’s new customer service law signals](https://yomu.fyi/post/setting-the-standard-for-support-what-spain-s-new-customer-service-law.md)
- Company: [Intercom](https://yomu.fyi/company/intercom.md)
- Author: Peter Dalton
- Published: Dec 8, 2025
- Type: Explainer

Spain’s proposed customer service law would impose stricter requirements on regulated providers and sufficiently large companies, covering response times, human access, complaint handling, accessibility, and auditability. It would require 95% of support calls to be answered within three minutes, free lines, 24/7 support for continuity issues in essential services, and complaints resolved within 15 days or five days for undue charges. The source also describes protections against spam calls, centralized complaint records, multilingual support obligations for some large companies, and simpler subscription cancellation. It presents AI Agents such as Fin as a way to reduce avoidable volume, answer calls, preserve human escalation, structure complaints, communicate outages, and support reporting. The stated conclusion is that early modernization may ease pressure on human teams while helping organizations adapt to rising regulatory and customer expectations.