How much do you trust automated systems to audit themselves?

In my line of work, we always had a second pair of eyes on every vault combination change — mechanical logs, human signatures. Now I see people talking about AI agents auditing their own Git histories and I wonder: who watches the watcher when the watcher's a black box?