Trace retained platform decisions.
Owner and Security operators can inspect retained event metadata and selected safe facts through the admin dashboard and read-only API. Separate admin authentication and current normal passkey verification are required.
01Filter exact references
GET /v1/admin/audit accepts exact action, actorId, workspaceId, targetId, from, until, before and limit. Times use UTC ISO8601 with milliseconds. The default window is seven days, the maximum is 90 days, and pages default to 50 events with a maximum of 100. Unknown parameters, wildcard actions, malformed references and invalid windows are refused.
02Continue the original history boundary
Use the returned nextCursor as before, retaining window.from and window.until. Ordering uses recorded millisecond time and UUID, so events with tied timestamps remain stable. A new event does not alter the traversed boundary. The dashboard clears old results on new filters or failed reads.
03Keep private payloads outside the response
Entries include event/time/action, retained actor ID, current actor email where available, workspace/target references and bounded typed facts. Exact atomic amounts remain strings. Raw JSON, reasons, evidence narratives, credentials and nested payloads are excluded. Current email is not a historical identity snapshot. Review the original business module for its decision and journals.
04Require the verified current factor
A current Owner or Security role, unrevoked admin session, recent verification and the exact still-active verified passkey are rechecked under SQL locks. Another active login key cannot substitute for a revoked verified credential. App sessions, server API keys and other operator roles cannot read platform audit history.
05Preserve the recovery hold
During recovery_required this endpoint returns HTTP503 SERVICE_RECOVERY_REQUIRED like other dynamic API routes. Audit inspection cannot promote a restored primary, resume financial execution, create journals or delete retained events. GET /ready describes access readiness; GET /health remains process/database liveness.
// Current Owner/Security admin session and recent passkey verification.
GET /v1/admin/audit?action=operator.factor_recovery_cleared&limit=25
GET /v1/admin/audit?actorId=system%3Aisolated-restore
// Preserve the returned original window when loading older records.
GET /v1/admin/audit?before={nextCursor}&from={window.from}&until={window.until}
// No write/delete endpoint. Responses: Cache-Control: private, no-store.
// A recorded event alone does not authorize funds or prove an external outcome.Open your workspace