Docs · Concepts
Audit
Two records answering two questions: what agents did, and what people did.
What it is
Agent activity records authorization decisions: who asked, for what, and what was decided. Control-plane activity records what people did to the configuration: keys created, agents frozen, policies activated.
They are separate records because they answer separate questions, and merging them lets a control-plane refusal render as an authorization approval.
AVAILABLE Read the audit trail — /projects/:id/audit
Where: Audit
Requires: ADMIN, AUDITOR, APPROVER, POLICY_AUTHOR
Append-only
Audit rows cannot be updated or deleted, including by the schema owner. A trail that can be edited answers no question worth asking.