Audit - abadge

The Audit log view is the human interface to the audit log. Every access attempt — allowed or denied — and operator actions like permission changes and agent registrations appear here, newest first.

Layout

The audit table shows these columns:

Column	Notes
Agent	The agent that triggered the event, if any
Item	The item touched, if any
Profile	The profile the event belongs to, if any
Event	Event type (`access.reveal`, `permission.create`, `agent.session_issue`, etc.)
Result	`allowed`, `denied`, `expired`, `revoked`, or `cascade`
IP address	Client IP from the API, when present
Time	When the event occurred

Denied and revoked rows are highlighted.

Filters

Filter	Notes
Search	Free text over agent name, item label, or IP address
Event type	One event type at a time
Result	Useful for “show me every denial”
Profile	Scope to one profile
Date range	All time, last 7 days, or last 30 days

Filters compose. Use the refresh button to reload the latest entries. Results paginate with a Load more button (25 per page).

What every event captures

The dashboard renders a subset of the audit record. The full structured record (available via the API) includes:

Field	Always present?	Description
`id`	yes	Auto-incrementing
`organizationId`	yes	Org context
`eventType`	yes	Category
`result`	yes	`allowed`, `denied`, `expired`, `revoked`, `cascade`
`occurredAt`	yes	Timestamp
`userId`	when an operator triggered it
`agentId`	when an agent triggered it
`itemId`	for item / access events
`profileId`	for profile events
`deliveryMode`	for access events	`env`, `file`, `reveal`, `ciphertext`
`meta`	always (often empty)	Structured per event type
`ipAddress`	usually	Client IP from the API

What audit does not record

Secret values
Encryption keys, wrapped keys, or KDF parameters
The plaintext output of subprocesses spawned by use with delivery: env

If you need byte-level visibility into what an agent did with a secret, instrument the consumer.

Programmatic export

The dashboard does not have an export button. To export the audit log, use GET /v1/audit from the API or abadge audit list --json from the CLI.

​Layout

​Filters

​What every event captures

​What audit does not record

​Programmatic export

​Related

Layout

Filters

What every event captures

What audit does not record

Programmatic export

Related