Janus is a system for agentic LLMs that ensures the record of actions is stored on the effect path, providing offline-verifiable provenance. It uses a signed, hash-chained log to record proposals, verdicts, and answers, and allows auditors to re-derive verdicts offline. Janus is evaluated under various scenarios, including crash injection and post-approval substitution attacks.