Interface: SecurityAuditEvent
Defined in: packages/core/src/observability/TelemetryEvent.ts:181
Emitted on every tool invocation for SOC2/GDPR audit compliance. See AuditTrail middleware for emission.
Properties
action
readonly action: string;Defined in: packages/core/src/observability/TelemetryEvent.ts:184
argsHash
readonly argsHash: string;Defined in: packages/core/src/observability/TelemetryEvent.ts:188
SHA-256 hash of arguments (no PII in log)
durationMs
readonly durationMs: number;Defined in: packages/core/src/observability/TelemetryEvent.ts:192
Execution duration in milliseconds
identity
readonly identity: Record<string, string | undefined>;Defined in: packages/core/src/observability/TelemetryEvent.ts:186
Extracted identity (userId, role, ip)
status
readonly status: "error" | "success" | "firewall_blocked" | "rate_limited";Defined in: packages/core/src/observability/TelemetryEvent.ts:190
Execution result status
timestamp
readonly timestamp: number;Defined in: packages/core/src/observability/TelemetryEvent.ts:193
tool
readonly tool: string;Defined in: packages/core/src/observability/TelemetryEvent.ts:183
type
readonly type: "security.audit";Defined in: packages/core/src/observability/TelemetryEvent.ts:182