Audit Log

The Audit log is the record of what the platform did and why — every policy decision, approval, rejection, and the events around them. Use it to understand why the AI acted as it did, investigate incidents, and demonstrate compliance.

Open Audit log in the sidebar, under the Governance group, or go to /workspace/audit. The page has four tabs:

• Activity (default) — the event stream described in Activity
• Decisions — the policy-decision log
• Runs — automation execution history
• Changes — who changed the workspace's rules and settings, and when. Only admins and owners see this tab

The Decisions Log

The Decisions tab is the policy-decision log. Each record captures a governance evaluation and its outcome:

Records are append-only — once written, a decision is not edited, so the log stays a faithful reproduction of what was evaluated.

Filtering the Decisions Log

The Decisions tab supports:

• Date range — choose the lookback window (1–365 days, default 30) from the page header
• Decision type — narrow to a single verdict (e.g. only block or only require_approval)
• Free-text search — match on decision content

Deep-linking to Decisions

The Decisions view opens directly from a drill-in when an approvalId or executionId is present in the URL — for example, from an approval card or an outcome. The deep-link forms are:

• A specific execution: /workspace/audit?executionId={id}
• A specific approval decision: /workspace/audit?approvalId={id}

These links are stable, which makes them useful for incident reports, compliance reviews, and team handoffs.

Exporting

The Activity tab's Export button downloads the filtered activity stream as CSV. Use it to capture a snapshot of recent events for an incident write-up or review.

Retention

Policy decision records are append-only. The default retention is 90 days — the same window applied to audit logs, swept by a weekly automated cleanup job. Enterprise customers can extend this under a Data Processing Agreement, which may set a longer retention than the standard default. See the data-retention documentation for the full retention matrix and the cleanup jobs that enforce it.