Search the audit log
Immutable, append-only, hash-chained. Filter by who, where, what, outcome, case or time to answer "who changed what, when" — then isolate a case id to read its full timeline.
Case audit timeline · RUN-3C1DD699
Every audited action against this one case, oldest first — the "who did what, when" an auditor reconstructs after the fact. Ordered by append sequence, so it mirrors the hash chain.
Resolved Marcus Lindqvist (E-1002) from PeopleCore.
Inspect event evidence
EV-2BCAE0089D6D4A8AB75C0FF45D0B058F
2026-08-13T05:30:58.836+00:00
0 ms (0 s)
5d131e874833dbfc0b719290b817f230220214cf8df43e2483ac68a12af673a7
5af2f7a7c228eeb71a03f65134f5a37e89c808d2aad61af44db09c64090140cf
Resolved Marcus Lindqvist (E-1002) from PeopleCore.
bonus_authorization is signed and attributable.
Inspect event evidence
EV-A70F783DDC244C10BF65E107990EE3B2
2026-08-13T05:30:58.959+00:00
0 ms (0 s)
5af2f7a7c228eeb71a03f65134f5a37e89c808d2aad61af44db09c64090140cf
983d875dae9913324b1fffbb02e28edd46ea288074ae3bb5f1b4aad39afb2f82
bonus_authorization is signed and attributable.
The request has no documented business reason.
Inspect event evidence
EV-BC51D115568E45BDB998E5C94C2EAC5B
2026-08-13T05:30:59.045+00:00
0 ms (0 s)
983d875dae9913324b1fffbb02e28edd46ea288074ae3bb5f1b4aad39afb2f82
13769da3419594c4c43ef64503fea4c1adea014e376f3aefb182865f6ee09ebd
The request has no documented business reason.
Input completeness & authorization: Signed bonus_authorization is complete and independently authorized. Advice: File a signed bonus_authorization for this employee, with an authorized signer who is not the payroll owner.
Inspect event evidence
EV-BDE4A152B1994D38AF574472CFD66FFF
2026-08-13T05:30:59.138+00:00
0 ms (0 s)
13769da3419594c4c43ef64503fea4c1adea014e376f3aefb182865f6ee09ebd
c7192de514793bc11bf09024dbeb58d4e3babca91ac78f4396be91221c2fc67a
Input completeness & authorization: Signed bonus_authorization is complete and independently authorized. Advice: File a signed bonus_authorization for this employee, with an authorized signer who is not the payroll owner.
Activity by operator
Event count per actor in the current view — the accountability pivot. A named, signed-in operator (Identity → session) is stamped on every action they drive; service principals and the concierge are stamped too, so nothing is anonymous.
| Actor | Events | |
|---|---|---|
| bot | 4 | filter → |
Audit event stream
The raw ledger, newest first (max 300 in view). Click an actor to pivot to their activity, a case id to open its timeline, or Inspect to reveal the complete timestamp, duration, note, event identifier, and both hash-chain links. Nothing here is ever mutated or deleted.
| Time | Run | Station | Step | Action | Actor | Outcome | Case | Evidence |
|---|---|---|---|---|---|---|---|---|
| 05:30:59 | C | Concierge | gate | input_authorization | bot | ok | RUN-3C1DD699 |
InspectEvent ID
EV-BDE4A152B1994D38AF574472CFD66FFF Full timestamp
2026-08-13T05:30:59.138+00:00 Recorded duration
0 ms (0 s) Previous hash
13769da3419594c4c43ef64503fea4c1adea014e376f3aefb182865f6ee09ebd Event hash
c7192de514793bc11bf09024dbeb58d4e3babca91ac78f4396be91221c2fc67a Complete note
Input completeness & authorization: Signed bonus_authorization is complete and independently authorized. Advice: File a signed bonus_authorization for this employee, with an authorized signer who is not the payroll owner. |
| 05:30:59 | C | Concierge | completeness | returned_to_sender | bot | reject | RUN-3C1DD699 |
InspectEvent ID
EV-BC51D115568E45BDB998E5C94C2EAC5B Full timestamp
2026-08-13T05:30:59.045+00:00 Recorded duration
0 ms (0 s) Previous hash
983d875dae9913324b1fffbb02e28edd46ea288074ae3bb5f1b4aad39afb2f82 Event hash
13769da3419594c4c43ef64503fea4c1adea014e376f3aefb182865f6ee09ebd Complete note
The request has no documented business reason. |
| 05:30:58 | C | DocStore | authorization | completed | bot | ok | RUN-3C1DD699 |
InspectEvent ID
EV-A70F783DDC244C10BF65E107990EE3B2 Full timestamp
2026-08-13T05:30:58.959+00:00 Recorded duration
0 ms (0 s) Previous hash
5af2f7a7c228eeb71a03f65134f5a37e89c808d2aad61af44db09c64090140cf Event hash
983d875dae9913324b1fffbb02e28edd46ea288074ae3bb5f1b4aad39afb2f82 Complete note
bonus_authorization is signed and attributable. |
| 05:30:58 | C | PeopleCore | resolve | completed | bot | ok | RUN-3C1DD699 |
InspectEvent ID
EV-2BCAE0089D6D4A8AB75C0FF45D0B058F Full timestamp
2026-08-13T05:30:58.836+00:00 Recorded duration
0 ms (0 s) Previous hash
5d131e874833dbfc0b719290b817f230220214cf8df43e2483ac68a12af673a7 Event hash
5af2f7a7c228eeb71a03f65134f5a37e89c808d2aad61af44db09c64090140cf Complete note
Resolved Marcus Lindqvist (E-1002) from PeopleCore. |