HTTP API
AuditEntry
A row in the audit trail that records who changed which entity and when.
Shape: object
| Property | Required | Type | Description | Rules |
|---|---|---|---|---|
id |
yes | string (uuid) |
Gets the record id. A time-ordered UUID (v7). | — |
tenantId |
yes | string |
Gets the tenant the change belongs to. | — |
actor |
no | string |
Gets the actor that made the change. It is null when there is no authentication or the actor cannot be resolved; that state is not hidden. |
— |
action |
yes | string |
Gets the action name, for example agent.update. |
— |
entity |
yes | string |
Gets the affected entity, for example agent:support. |
— |
before |
no | string |
Gets the state before the change, as JSON text. Tracon’s own write path removes secret-named fields first; a caller that writes to IAuditLog directly must not put a secret value here. | — |
after |
no | string |
Gets the state after the change, as JSON text. Tracon’s own write path removes secret-named fields first; a caller that writes to IAuditLog directly must not put a secret value here. | — |
createdAt |
yes | string (date-time) |
Gets the time the record was written (UTC). | — |
previousHash |
no | string |
Gets the hash of the previous entry of the same tenant. null for the first entry of a tenant. |
— |
hash |
no | string |
Gets the hash of this entry: a SHA-256 over a canonical form of its fields that also includes the previous entry’s hash, so changing an earlier entry breaks every later link. The write path computes this value; a caller-supplied value is ignored. | — |