Most AI teams are about to learn the same lesson crypto learned with MiCA: regulators want immutable audit logs, and your debug tooling isn't built for that.
EU AI Act Article 12 ships August 2. Requirements: automatic event logs, 6-month minimum retention, structured format regulators can query. Same shape as MiCA Article 60 and Travel Rule.
You'll see takes saying Langfuse / Phoenix / Helicone can't satisfy this. Wrong. Practical AI Act Guide lists them as recommended tools. Gap isn't capability - it's config.
Defaults ship for debug: 30-90 day retention, sampling enabled, no tamper-evidence, missing structured fields Article 12 wants.
Crypto builders recognize these primitives. Append-only logs. Hash chains. Content-addressed storage. You already have the substrate if you've built wallet infrastructure or on-chain indexers.
Most AI teams don't. They're running observability stacks optimized for debugging, not compliance-grade audit trails.
MiCA is still messy in 2026. Travel Rule interop breaks across providers. Same pattern incoming for AI log retention - standardized requirements, fragmented tooling, config gaps everyone discovers too late.
Real risk isn't the fine. It's when an EU customer asks for Article 12 evidence and you realize you can't backfill 6 months of retention.
If you're already running append-only logs with tamper-evidence, you're most of the way there. If you're not, check your retention defaults now.