openclaw
9dad8b57a7
CMD-20260708-fix-git-actions-write-and-enable-audit-plane - Fix: gitops.tokens gitops-write-bot SHA256 hash sync - Add: agents/ command registry + directory structure - Add: audit/ full execution audit plane - Add: evidence/ CMD report files - Add: docs/architecture/AIOS_AGENT_AUDIT_PLANE.md Closes CMD-20260708. Next: CMD-20260709-autonomous-controller-enable
42 lines
1.1 KiB
Markdown
42 lines
1.1 KiB
Markdown
# AIOS Agent Execution Audit Plane
|
|
|
|
## Purpose
|
|
Record every agent-initiated action on the AIOS GitOps runtime: what, who, when, why, result.
|
|
|
|
## Audit Lifecycle
|
|
|
|
1. **Pre-flight**: Record intent before execution
|
|
2. **In-flight**: Capture command, input, git state, branch
|
|
3. **Post-flight**: Record result, outputs, errors, duration
|
|
4. **Archive**: Immutable commit to git as structured JSON logs
|
|
|
|
## Audit Schema (v1)
|
|
|
|
```json
|
|
{
|
|
"audit_id": "<uuid or hash>",
|
|
"event_type": "command_execution | command_completed | command_failed | baseline_promotion | tag_creation | state_change",
|
|
"command_ref": "CMD-<date>-<description>",
|
|
"agent": "openclaw | hermes | codex",
|
|
"user": "gitops-write-bot",
|
|
"timestamp": "<ISO-8601>",
|
|
"git": {
|
|
"branch": "main",
|
|
"sha_head": "<sha>",
|
|
"baseline": "V1R3C1",
|
|
"dirty": false
|
|
},
|
|
"input": {},
|
|
"output": {},
|
|
"duration_ms": 0,
|
|
"result": "success | failure | pending",
|
|
"error": null
|
|
}
|
|
```
|
|
|
|
## Storage
|
|
- `audit/agent-runs/` — per-agent JSONL
|
|
- `audit/command-history/` — per-command aggregated
|
|
- `audit/version-history/` — per-baseline audit trail
|
|
- All audit files committed to git (immutable)
|