AdvancedAudit Logs

Audit Logs

Every intent, approval, denial, and receipt verification should leave an audit trail. Open Preview exposes resolved intent history in the dashboard and API; production audit export can add retention policy, tamper-evident chaining, and compliance workflows.

Querying Resolved Decisions

GET /api/intents?status=resolved
Authorization: Bearer <user session token>
{
  "data": [
    {
      "id": "int_xK9mNpQ2",
      "status": "approved",
      "action": "production.deploy",
      "parameters": { "env": "prod", "version": "2.1.0" },
      "approved_by": "jane@acme.io",
      "permit_token": "eyJhbGciOi...",
      "resolved_at": "2026-06-18T21:30:00.000Z"
    }
  ],
  "error": null
}

Log Entry Fields

FieldDescription
idUnique log entry ID
typeEvent type: intent.created, intent.approved, intent.denied, receipt.verified
timestampISO 8601 timestamp of the event
intent_idID of the associated intent
actionAction name from the intent
approved_byEmail of the human approver (if applicable)
approver_ipIP address of the approver at sign time
chain_hashHash of previous entry for tamper detection in production export

Log Export

Export logs in JSON or CSV format for compliance purposes. This is a production target, not a current Open Preview endpoint:

GET /api/projects/{projectId}/audit/export?
  format=csv&
  from=2024-01-01T00:00:00Z&
  to=2024-01-31T23:59:59Z

During Open Preview, export and retention settings should be treated as product configuration rather than a compliance guarantee. Production retention policy can be finalized before paid plans launch.