AI Audit & Events

The immutable AI event stream — the live activity feed and per-subject timelines.

Every meaningful action in the control plane emits an immutable event. The same stream powers the live activity feed, per-agent timelines, and (in future) SIEM export and analytics.

The event model#

Field	Notes
`eventId`, `tenantId`	Identity and tenant.
`eventType`	e.g. `AGENT_REGISTERED`, `MCP_REGISTERED`, `KILL_SWITCH_CHANGED`, `ENTITLEMENT_CHANGED`.
`actor`	Who or what triggered it.
`subjectType`, `subjectId`, `subjectName`	The resource acted on.
`summary`	Human-readable description.
`severity`	`INFO` · `WARNING` · `CRITICAL`.
`createdAt`	Timestamp.

Read the live feed#

curl "https://your-company.authspoke.com/api/v1/ai/activity" -H "Authorization: Bearer $TOKEN"

Returns the 100 most recent events for your tenant, newest first.

Read a subject timeline#

Every event for one subject (such as an agent):

curl "https://your-company.authspoke.com/api/v1/ai/activity/$AGENT_ID" -H "Authorization: Bearer $TOKEN"

Design#

Events are append-only and emitted as a side effect of the primary action — recording an event never blocks or breaks the action that produced it. This keeps the platform loosely coupled: the UI, audit and notifications all consume the same stream. See Event Architecture.

API#

See the AI Audit & Events API.