← All explainers
Learn
A tamper-evident audit
Every allow and every deny, from every pillar, lands in one hash-chained record that can be verified, exported and kept under legal hold.
Allows and denies, in one schema
Audit events from every service share one schema and reach the platform chain durably, including the decisions that refused something.
Chained, and checkable
Each event is hash-chained to the one before, with a verification endpoint, and the chain can optionally be anchored externally.
Kept, queried and handed over
Retention respects legal minimums and legal hold; events are queryable by principal, resource, action, time and decision, and export to CSV, Parquet, OCSF and CEF.