web/machine-activity-audit-view #19

New issue

Closed

opened 2026-05-09 23:26:00 +02:00 by codex · 1 comment

codex commented

2026-05-09 23:26:00 +02:00

Collaborator

Parent: #2
Wave: 3 - Operations Hardening
Depends on: #4

Summary

Add a human-readable audit view focused on machine identities and agent actions.

Scope

Show audit events grouped/filterable by machine identity.
Include idempotency key, source/sourceRef, linked card, result, mode, and createdAt.
Make actor attribution clear: e.g. OpenClaw Iskra MCP, not just the owning human account.
Keep audit canonical and immutable from the UI.

Non-goals

No SIEM/logging platform.
No ability to edit audit events.
No broad admin redesign.

Acceptance Criteria

Piotr can answer “what did Iskra do?” from the UI.
Audit rows link to cards when applicable.
Filters support identity/source/action where available.
No internal DB IDs are exposed.

Tests / Smoke

API tests for audit read filters.
Browser check for audit list and empty/error states.
Permission tests for workspace-scoped visibility.

Rollback

Hide audit view route; audit write path remains intact.

Owner Gates

Owner review before exposing audit UI broadly.

Parent: #2 Wave: 3 - Operations Hardening Depends on: #4 ## Summary Add a human-readable audit view focused on machine identities and agent actions. ## Scope - Show audit events grouped/filterable by machine identity. - Include idempotency key, source/sourceRef, linked card, result, mode, and createdAt. - Make actor attribution clear: e.g. `OpenClaw Iskra MCP`, not just the owning human account. - Keep audit canonical and immutable from the UI. ## Non-goals - No SIEM/logging platform. - No ability to edit audit events. - No broad admin redesign. ## Acceptance Criteria - Piotr can answer “what did Iskra do?” from the UI. - Audit rows link to cards when applicable. - Filters support identity/source/action where available. - No internal DB IDs are exposed. ## Tests / Smoke - API tests for audit read filters. - Browser check for audit list and empty/error states. - Permission tests for workspace-scoped visibility. ## Rollback Hide audit view route; audit write path remains intact. ## Owner Gates Owner review before exposing audit UI broadly.

codex referenced this issue

2026-05-09 23:27:13 +02:00

[meta] Kan-ductor maturity waves #2

codex referenced this issue

2026-05-09 23:47:40 +02:00

feat(agent): add machine identities #28

codex referenced this issue

2026-05-10 01:36:32 +02:00

feat(web): add machine activity audit view #43

pdurlej commented

2026-05-10 14:18:37 +02:00

Owner

Resolved by PR #43 (feat(web): add machine activity audit view), landed on main via chain drain PR #52 (2026-05-10).

⚠️ Follow-up p0: 3+3 review flagged audit view as exposing raw input/result JSON without incident-grade summaries/copy/export/pagination. Tracked separately as p0 follow-up issue (audit view raw-JSON exposure hardening).

Closing this acceptance issue. Hardening tracked elsewhere.

— Prof Opus 🦍🎓 (war-room cleanup)

Resolved by **PR #43** (`feat(web): add machine activity audit view`), landed on main via chain drain PR #52 (2026-05-10). ⚠️ **Follow-up p0**: 3+3 review flagged audit view as exposing raw input/result JSON without incident-grade summaries/copy/export/pagination. Tracked separately as p0 follow-up issue (audit view raw-JSON exposure hardening). Closing this acceptance issue. Hardening tracked elsewhere. — Prof Opus 🦍🎓 (war-room cleanup)

pdurlej closed this issue

2026-05-10 14:18:38 +02:00