Every agent run is audit-logged, and every trust-phase transition is audit-logged. The audit trail is the answer to “what did the agent do, when, and on whose say-so?”
What’s recorded for a run
- The agent key.
- The tenant and Client the run was scoped to.
- The trust phase the agent was in at run time.
- The input that was passed in.
- The output — the structured result, the
reasoningTrace, and the list ofaffectedRecords. - The status — succeeded, failed, skipped, applied, rejected.
- Triggered-at and completed-at timestamps.
What’s recorded for a phase transition
- The from-phase and to-phase.
- The user who triggered it.
- Whether it was a gates-met promotion or a force promotion.
- If force, the bypassed gates and the reason given.
Where to find it
Under /admin/agents, expand any agent to see its run history. Filter by status, trust phase, or date range. The audit trail is read-only — there’s no edit, no delete.