The Audit Ledger is the record of every event Obiguard processes — prompt, response, tool-call, policy decision, and human review decision. Hand it to the auditor. Export it to CSV or JSON.
Every prompt, response, and tool-call argument is recorded — the full content, the model called, the agent, the environment, and the user or service account behind it. Embedding calls are recorded too, and where a response was redacted the record says so. Streamed responses are recorded as skipped rather than inspected.
Every policy evaluation is recorded for the prompt and for the response: which rule fired, which control matched, the severity and the action taken. Each record names the policy version in force and carries a hash of the exact rules applied, so you can show which rule text was in effect.
Every Review Queue decision — approve or reject — is written to the Audit Log with the reviewer, their note, which side of the call was held, and the timestamp.
Export any time range to CSV or JSON from the portal, with every prompt, response, tool-call argument, and policy verdict. Restricted to admins and owners, and each export is itself written to the Audit Log.
The record shows whether the prompt, the response and any tool calls were each evaluated, evaluated after delivery (streamed replies), skipped, or could not be — so “passed” never hides “not checked”.
Request records, the activity log and review requests, shown together in the Audit Log. Every export is logged.
Each decision names the policy version in force and carries a SHA-256 hash of the exact rules applied.
Either format for any time range, straight from the portal — admins and owners only.
