openclaw
9dad8b57a7
CMD-20260708-fix-git-actions-write-and-enable-audit-plane - Fix: gitops.tokens gitops-write-bot SHA256 hash sync - Add: agents/ command registry + directory structure - Add: audit/ full execution audit plane - Add: evidence/ CMD report files - Add: docs/architecture/AIOS_AGENT_AUDIT_PLANE.md Closes CMD-20260708. Next: CMD-20260709-autonomous-controller-enable
1.1 KiB
1.1 KiB
AIOS Agent Execution Audit Plane
Purpose
Record every agent-initiated action on the AIOS GitOps runtime: what, who, when, why, result.
Audit Lifecycle
- Pre-flight: Record intent before execution
- In-flight: Capture command, input, git state, branch
- Post-flight: Record result, outputs, errors, duration
- Archive: Immutable commit to git as structured JSON logs
Audit Schema (v1)
{
"audit_id": "<uuid or hash>",
"event_type": "command_execution | command_completed | command_failed | baseline_promotion | tag_creation | state_change",
"command_ref": "CMD-<date>-<description>",
"agent": "openclaw | hermes | codex",
"user": "gitops-write-bot",
"timestamp": "<ISO-8601>",
"git": {
"branch": "main",
"sha_head": "<sha>",
"baseline": "V1R3C1",
"dirty": false
},
"input": {},
"output": {},
"duration_ms": 0,
"result": "success | failure | pending",
"error": null
}
Storage
audit/agent-runs/— per-agent JSONLaudit/command-history/— per-command aggregatedaudit/version-history/— per-baseline audit trail- All audit files committed to git (immutable)