One says what should happen. The other shows what did, and under whose decision.
The number is right.
But who decided
the records under it?
When an agent or an integration writes a record, the audit fields often show a technical user. You can see what changed. You can't see whose decision it was.
Every record behind a number gets one.
One sentence instead of a score.
If you can't see how a record got its value, it doesn't count as safe. Missing evidence stays visible as missing.
Before agents, most writes came from a person you could ask. Now more of them come from paths that cannot explain themselves.