Live Audit Log

Every auth, payment, and AI event is HMAC-SHA256 signed and hash-chained so tampering is detectable. IPs are hashed. User IDs are anonymized. Nothing is hidden.

Live — refreshes every 30s

Total Events Logged

❌ Broken

Hash Chain Status

no events yet

Last Event

Recent Events (last 50) Updated just now

Time	Action	Actor / Target	Severity	Signature (first 16)
No audit events yet.

auth.* Auth & sessions agent.* Agent lifecycle payment.* Financial ops ai.* AI inference data.* Data access system.* Platform events

How this works: Every event is signed with HMAC-SHA256 using the server's JWT_SECRET. Each signature is then hashed (SHA-256) and stored as the prev_hash of the next entry, creating a tamper-evident chain — the same principle used in blockchain. Breaking any entry invalidates everything after it. IPs are one-way hashed before storage. User IDs are anonymized in this public view. Source: Open Agent Specs · Standard: NIST SP 800-53 AU-2/AU-3 · Refreshes every 30 seconds.