Audit log

Every AI workflow and every meaningful administrative change is written to a tamper-evident audit log. If an entry is changed or removed after the fact, verification shows exactly where the record no longer matches.

What is captured

• Actor — the user, channel, or connected client that requested the action.
• Role — the role held by the actor at the time of the action.
• Action — what happened, such as creating a key, starting a workflow, revoking a token, or installing Slack.
• Resource — the workspace object affected by the action.
• Status — whether the action succeeded, failed validation, or returned an error.
• Verification hashes — cryptographic pointers used to prove the record has not been altered.
• Change summary — a safe snapshot of the changed shape when it is useful for review.

Verify

Open Admin → Audit → Verify chain. SwaYantra recomputes the verification chain and shows either an intact result or the first sequence number that no longer matches.

Export

CSV and JSON exports are available from the audit screen. Security reviewers commonly use exports for access review, AI governance review, and vendor-risk evidence.

Retention

Audit rows are retained for compliance and are among the final records removed during a workspace deletion process.