Audit Logs

Create and query audit events.

POST/auditCreate audit event (alias: POST /audit-events)

GET/audit-logsList full audit logs

GET/eventsList audit events (subset fields)

POST /audit body

json

{
  "agent": "ops-bot",
  "action": "deploy",
  "resource": "production",
  "severity": "high",
  "result": "blocked",
  "user": "admin",
  "policy": "Deploy Policy"
}

result: allowed is rejected (400 policy_evaluation_required). Only blocked or approval_required are accepted.