Audit Log & Agent Activity

Audit Log

/audit has two tabs:

• Registry Events — every install evaluated by the registry proxy (allow/warn/block), filterable by decision and package name, with cursor pagination.
• API Events — management-API activity (token issuance/revocation, policy changes, allowlist/blocklist edits, and more).

Agent Activity

/agent-activity answers “what entered this environment, who asked, who approved” specifically for agent (non-human) actors:

• Recent Agent Pulls — package, version, which agent, decision, and linked approval (if any), with timestamps.
• Agent Approvals — approval requests specifically tied to agent tokens, including the “ask and park” requests described in Registry & Tokens.

Both tables are cursor-paginated the same way the Audit Log is.