Can a verifiable execution record prove that an agent never called a specific external API during a run?

The record proves only which steps were executed, not which were skipped. An auditor can conclude that a given API was not called because no signed step record references it, but they must trust the record’s completeness. Catalyst’s record lacks explicit ‘non-invocation’ proofs; absence of evidence is evidence of absence only if the record is known to be complete and unaltered. This limitation means auditors should not rely solely on the record for negative assertions about external interactions.