Audit Logger
Overview
For sensitive operations, produce a concise audit record the user can keep.
Record fields
| Field | Content |
|---|---|
| When | ISO timestamp |
| Who | user / channel / session |
| Action | what was attempted |
| Tools | tools + key args (redact secrets) |
| Target | systems / paths / tickets |
| Result | success / failure / partial |
| Error | message if any |
Workflow
- Before the work: note the intent.
- During: prefer tools that leave artifacts (PRs, tickets, log files).
- After: write an Audit summary in the reply (and optionally a file the user chooses, e.g.
audit/YYYY-MM-DD.mdin the workspace). - Never log raw secrets or full credential headers.
Template
## Audit
- time: ...
- action: ...
- tools: ...
- result: ...
- notes: ...