How to Build AI Audit Trails That Stand Up to Regulatory Scrutiny