The Audit Ledger is an append-only record of every event Obiguard processes — prompt, response, tool-call, policy decision, and human review action. Hand it to the auditor. Stream it to your SIEM.
Every prompt, response, and tool-call is logged — including the full content, the model called, the agent ID, and the user or service account that initiated it.
Every policy evaluation is recorded: which Policy Set fired, which Criterion matched, what action was taken, and the timestamp to the millisecond.
Every Review Queue action — assign, annotate, approve, escalate — is written back to the ledger with the reviewer identity and timestamp.
Stream to Splunk, Sumo Logic, Datadog, or any SIEM via webhook or S3. Pull on demand via the API. Export filtered sets for specific audit requests.
vs. manual screenshot collection for SOC 2 CC7 controls.
Records are cryptographically immutable. No edit, no delete.
Every event timestamped to the millisecond at point of inspection.
Webhook, S3, Splunk HEC, Sumo, Datadog, or pull via API.