Audit and export

What gets written

• Every evaluation — approved, flagged, blocked — with each rule's outcome and the agent's reasoning.
• Every human approval or rejection, with who and comment.
• Control changes: agent created/suspended, policy edits, API keys issued/revoked, role changes.
• Receipts reported by agents and the verification result (match, amount mismatch, unapproved merchant).

What cannot be edited

Audit rows are append-only at the database level: update and delete are denied for every user role, including Admins. The only deletions are the scheduled retention purge below and a Demo workspace reset.

Retention

Export

Audit → Export pulls the full dataset from the server (not just what's on screen) as CSV or JSON. Transaction columns:

transaction_id, timestamp_utc, agent_id, agent_name, agent_status, amount, currency, merchant, category, rail, initial_decision, final_status, decision_reason, policies_evaluated, policy_evaluation_detail, agent_justification, reviewer, review_decision