The Audit Ledger is an append-only record of every event Obiguard processes — prompt, response, tool-call, policy decision, and human review decision. Hand it to the auditor. Export it to CSV or JSON.
Every prompt, response, and tool-call is recorded — the full content, the model called, the agent, the environment, and the user or service account behind it. Embedding calls are recorded too, and where a response was redacted the record says so.
Every policy evaluation is recorded for the prompt and for the response: which rule fired, which control matched, the severity and the action taken, to the millisecond. Each record names the policy version in force and carries a hash of the exact rules applied, so you can show which rule text was in effect.
Every Review Queue decision — approve or reject — is written to the Audit Log with the reviewer, their note, which side of the call was held, and the timestamp.
Export any time range to CSV or JSON from the portal, with every prompt, response, tool-call, and policy verdict. Restricted to admins and owners, and each export is itself written to the Audit Log.
The record shows whether the prompt and the response were each evaluated, skipped, or could not be — so “passed” never hides “not checked”.
Obiguard only ever adds records, never edits or deletes them. Every export is logged.
Every event timestamped to the millisecond at point of inspection.
CSV or JSON for any time range, straight from the portal.
