Picture this: your AI agents approve code merges at 2 a.m., move secrets between regions, and call APIs you forgot existed. Impressive automation, until the auditor asks who did what, from where, and under which policy. In the age of AI‑enhanced observability and AI data residency compliance, that