Skip to main content

Audit log

Read-only history of important changes. Answers:

  • Who changed this?
  • What resource changed?
  • When did it happen?
  • Was it done in the UI, over the API (and with which key), or by the platform itself?

For investigation, not live messaging. No notifications, no push. Open the dashboard when you need answers.

What gets recorded​

Every action that meaningfully changes account or resource state:

  • Create, update, delete on Marquees, Props, Templates, Playspecs, Playgrounds, Tricks, Agents.
  • Issue, rotate, revoke API keys.
  • Add or modify webhooks.
  • Add, rotate, revoke Secret Vault entries.
  • Modify Job ENV entries.
  • 2FA changes — enable, disable, register/remove security keys, regenerate recovery codes.
  • Session revocations.

Not recorded:

  • Routine reads (browsing your own resources).
  • Per-message Genie activity (lives in Conversations).
  • Audit-log access itself.

Actors and channels​

Every entry shows the actor plus the channel it acted through:

  • Actor — you, the platform's caretaker automation, the billing provider, or the system.
  • Channel — UI, API, System, or Webhook.

Calls made with an API key — including a Genie using its agent key — appear as you via the API channel, with the key's label attached so you can tell which key acted.

What does notify you​

The audit log doesn't notify. These do, on a separate path:

  • Genie messages — in-app notification, FAB entry, browser push if enabled.
  • Commit notifications for Props you follow.
  • Selected activity you've opted into via Inbox Notifications.

Live status vs audit​

The Playground page shows status per service, build steps, log streams, expiration timers — updating live. Separate from the audit log. Observability vs history.

Export​

The audit log can't be exported today. Data Backup covers your resources (Props, Marquees, Playspecs, Genies, Playgrounds, Templates, Secrets, Webhooks), not history — use the dashboard filters to investigate.

Example investigation​

"Who deleted my Trick yesterday afternoon?"

  1. Open the audit log. Filter by action prefix playground. and set the date range to the last 24 hours — Trick runs are recorded as Playground entries (e.g. "Player deleted playground").
  2. Entry: the actor (you via the API channel, labelled with the CI key), timestamp, Playground ID.
  3. Drill into the key on the API Keys page to see what else it's been doing.
  4. If something's off, rotate the key and review its granular scopes.

FAQ​

Retention?

Audit history is currently kept indefinitely — entries are immutable and there is no plan-based retention window.

Why doesn't audit notify?

Mixing audit and notifications makes audit noisy or notifications miss things. Audit log is searchable history; notifications are interrupting. Each surface has a clear job.

Last updated on