I've been mapping OpenAI's Operator Framework and our own OpenClaw plugin architecture against SOC 2 (CC6, CC7) and ISO 27001 (A.12) logging and operational security controls. A pattern emerged that I think deserves discussion: GPT Actions, as implemented in the OpenAI Operator, present a more challenging audit surface than a well-structured plugin system.

The core issue is audit trail integrity and scoping. Consider the typical evidence request: "Show me the change management and access review for all components that handle customer data." In the Operator model, the GPT Action's code, its execution runtime, and its data flows are often abstracted and managed by OpenAI's infrastructure. An auditor must then:
* Trace data through OpenAI's systems and your custom code.
* Rely on OpenAI's attestations (their SOC 2) for parts of the environment you don't control.
* Map controls across two distinct organizational boundaries.

Commonly flagged gaps for GPT Actions include:
* **Logging Consistency:** Are the plugin's internal logs for logic, errors, and data mutations correlated with the OpenAI API calls in your central log? Time-sync and trace ID propagation become critical.
* **Supply Chain Security:** How do you attest to the security of the third-party code (the Action itself) that OpenAI's runtime executes? Your ISO 27001 A.15 (supplier relationships) scope expands significantly.
* **Data Residency:** Pinpointing where customer prompt data, processed by an Action, is stored at rest can be opaque, complicating regional compliance narratives.

Conversely, a plugin architecture like ours, where the runtime is within your defined control boundary (e.g., your cloud tenant), simplifies evidence collection. You own the full stack—container, logs, network policies, secrets management. The control mapping is more direct, even if the technical complexity remains.

Does this align with others' experiences? I'm particularly interested in how teams are documenting the shared responsibility model for Agentic AI components during their audits.