Audit Log
Append-only event stream backed by S3 Object Lock (WORM 7y). Every consequential action across the platform writes here.
Events · 24h
247
Subject Deletions
3
2 sync-complete · 1 finalised
Deploy approvals
8
6 self-service · 2 reviewer
Guardrail trips
14
all blocked pre-model
Event stream
Newest first. Records are written by both platform services and customer actions.
- deployDeploymentApprovedon
agent-triage-prodstamp v3.2.1 · eval 24/24 pass · self-attestation false2026-05-26T17:42:18Z · actor: Marcus Chen · event_id evt_8d2c91a4 - deletionSubjectDeletionRequestedon
eu_8c2f4a1bteam Customer Operations · cascading to LtM + Trajectory Store2026-05-26T08:14:00Z · actor: system · event_id evt_8d2c8f7e - deletionSubjectDeletionSyncCompletedon
eu_8c2f4a1bLtM phase-1 tombstone · Trajectory Store DEK destroyed · 17m elapsed2026-05-26T08:31:00Z · actor: system · event_id evt_8d2c8b22 - skillSkillCandidateProposedon
outage-bulletinproduction-LSS · 14 occurrences over 90d · queued for Team Admin2026-05-26T05:20:00Z · actor: Suggestion Pipeline · event_id evt_8d2c81f0 - toolToolRegisteredon
kyc-vendorteam-tier · in-VPC HTTP · approved against security questionnaire2026-05-25T22:11:09Z · actor: Priya Shah · event_id evt_8d2c7e10 - guardrailGuardrailTriggeredon
agent-billing-specialistsession sess_72ad · jailbreak pattern blocked pre-model · trajectory tagged2026-05-25T19:01:43Z · actor: Bedrock Guardrail · event_id evt_8d2c7102 - configApprovalPolicyChangedon
team-claimsself-service → approval-required · effective immediately2026-05-25T13:48:00Z · actor: Linnea Park · event_id evt_8d2c66bb - deployStampUpgradedon
agent-triage-prodv3.2.0 → v3.2.1 · zero-downtime · CFN nested stack rollover2026-05-24T11:32:14Z · actor: system · event_id evt_8d2c5400
Full export available via the Audit API · CloudTrail correlation IDs included on every record