Search the audit log
Immutable, append-only, hash-chained. Filter by who, where, what, outcome, case or time to answer "who changed what, when" — then isolate a case id to read its full timeline.
Case audit timeline · RUN-0715AE82
Every audited action against this one case, oldest first — the "who did what, when" an auditor reconstructs after the fact. Ordered by append sequence, so it mirrors the hash chain.
Alex Rivera → E-1009
Inspect event evidence
EV-2158C5678B25465C9D4666A94FF89E3E
2026-08-13T05:15:02.166+00:00
0 ms (0 s)
GENESIS
e6c09c0791e542cbffc9c1b9f51e84af61ef89ec50678e16a013e42f0263b647
Alex Rivera → E-1009
approver=V. Osei (schema-validated)
Inspect event evidence
EV-20F6AB535C0B4B76962AA98531E815B5
2026-08-13T05:15:02.406+00:00
0 ms (0 s)
e6c09c0791e542cbffc9c1b9f51e84af61ef89ec50678e16a013e42f0263b647
f5b5fe84caa2def0a1ae86ea76d98e1f8376a20f5696ccd6a747f506f55369ce
approver=V. Osei (schema-validated)
Input completeness & authorization: Authorization control failed: exists, signed, authority ok, sod ok, subject ok, date ok. Advice: File a signed termination_authorization for this employee, with an authorized signer who is not the payroll owner.
Inspect event evidence
EV-F496603C88D1411F99107DBE1B172597
2026-08-13T05:15:02.558+00:00
0 ms (0 s)
f5b5fe84caa2def0a1ae86ea76d98e1f8376a20f5696ccd6a747f506f55369ce
0f845c5283a1a31fdf0ef25031288d9e8bfc99514ccd6f4b863bca4c72050679
Input completeness & authorization: Authorization control failed: exists, signed, authority ok, sod ok, subject ok, date ok. Advice: File a signed termination_authorization for this employee, with an authorized signer who is not the payroll owner.
Activity by operator
Event count per actor in the current view — the accountability pivot. A named, signed-in operator (Identity → session) is stamped on every action they drive; service principals and the concierge are stamped too, so nothing is anonymous.
| Actor | Events | |
|---|---|---|
| bot | 3 | filter → |
Audit event stream
The raw ledger, newest first (max 300 in view). Click an actor to pivot to their activity, a case id to open its timeline, or Inspect to reveal the complete timestamp, duration, note, event identifier, and both hash-chain links. Nothing here is ever mutated or deleted.
| Time | Run | Station | Step | Action | Actor | Outcome | Case | Evidence |
|---|---|---|---|---|---|---|---|---|
| 05:15:02 | C | DocStore | gate | input_authorization | bot | reject | RUN-0715AE82 |
InspectEvent ID
EV-F496603C88D1411F99107DBE1B172597 Full timestamp
2026-08-13T05:15:02.558+00:00 Recorded duration
0 ms (0 s) Previous hash
f5b5fe84caa2def0a1ae86ea76d98e1f8376a20f5696ccd6a747f506f55369ce Event hash
0f845c5283a1a31fdf0ef25031288d9e8bfc99514ccd6f4b863bca4c72050679 Complete note
Input completeness & authorization: Authorization control failed: exists, signed, authority ok, sod ok, subject ok, date ok. Advice: File a signed termination_authorization for this employee, with an authorized signer who is not the payroll owner. |
| 05:15:02 | C | DocStore | extract | llm_extract | bot | ok | RUN-0715AE82 |
InspectEvent ID
EV-20F6AB535C0B4B76962AA98531E815B5 Full timestamp
2026-08-13T05:15:02.406+00:00 Recorded duration
0 ms (0 s) Previous hash
e6c09c0791e542cbffc9c1b9f51e84af61ef89ec50678e16a013e42f0263b647 Event hash
f5b5fe84caa2def0a1ae86ea76d98e1f8376a20f5696ccd6a747f506f55369ce Complete note
approver=V. Osei (schema-validated) |
| 05:15:02 | C | PeopleCore | resolve | resolved_employee | bot | ok | RUN-0715AE82 |
InspectEvent ID
EV-2158C5678B25465C9D4666A94FF89E3E Full timestamp
2026-08-13T05:15:02.166+00:00 Recorded duration
0 ms (0 s) Previous hash
GENESIS Event hash
e6c09c0791e542cbffc9c1b9f51e84af61ef89ec50678e16a013e42f0263b647 Complete note
Alex Rivera → E-1009 |