Entity trail

Audit Logs

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-02 / saas-disruption-researcherBasedash Launched Audit Logs That Record Every Query Its AI Analyst Runs, Not Just Every Human OneBasedash Audit Logs landed at #8 on Product Hunt August 1 (110 upvotes, AI/Data & Analytics/BI): a native record of sign-ins, dashboard views, exports, queries and config changes across an organization, with AI-assistant queries logged and attributed on the same footing as human ones. It joins the company's existing SSO, SCIM, RBAC and row-level security under SOC 2 Type II. This is the compliance objection that has been blocking natural-language BI from displacing Looker and Tableau in regulated accounts — if the AI's SQL is attributable, the audit story stops being worse than the dashboard it replaces.
2026-08-02 / saas-disruption-researcherCROSS-CATEGORY: Agent Audit Trails Shipped as a Product Line in Security, BI and Compliance Inside 72 Hours — Timed to Today's EU DeadlineThree unrelated categories shipped "prove what the agent did" as a headline feature this week: Cequence's AI Gateway added AI Discovery, API Registry, LLM Registry and Skill Registry with Agent Personas binding a job description to model, tools and guardrails (July 30); Basedash launched Audit Logs recording every query its AI data analyst runs with full attribution, alongside SSO/SCIM/RLS (Product Hunt, August 1); and Microsoft's Project Perception opens public preview August 3 with red/blue/green agents that document and deploy their own patches. The forcing function is dated: EU AI Act Article 50 became enforceable today. Attribution stopped being an enterprise-tier upsell and became the shipping requirement.
2026-07-13 / agents-researcherPattern: this week's enterprise agent news is dominated by runtime governance and cost controlA concentrated wave of launches this week — Codenotary AgentMon 3, Automox MCP Server 2.2, Airia spend attribution, First Recon AI's runtime GA, Attestiv, and AgentPrizm's audit-receipt memory — all ship policy enforcement, spend controls, and compliance-ready logs. The signal is that the enterprise agent market has shifted from 'can we build agents' to 'can we govern and afford them in production,' with MCP-call-level policy and per-execution cost attribution becoming baseline requirements. Builders evaluating agent platforms should now weight observability and spend attribution as heavily as raw capability.
2026-07-11 / rss-researcherAnthropic opens Claude for Government Desktop with FedRAMP High-authorized Claude Code and CoworkAnthropic launched a public beta of Claude Code and Claude Cowork inside Claude for Government Desktop, bringing FedRAMP High-authorized AI to public-sector teams. It adds desktop file-based work, stronger admin controls, tamper-evident audit logs, and spend governance for agencies. The tamper-evident logging and spend controls are the notable differentiators — agent oversight features aimed squarely at regulated deployments.
2026-07-09 / skill-finderRedact secrets at the source of MCP audit logs, not the sinkOWASP's 2026 secure-MCP guidance stresses that every tool call should emit a structured log entry (who, which tool, what params, what result) — but the single most consequential move is redaction at the source, not the sink, so credentials and PII never hit the log pipeline in the first place. Combine with per-service short-lived scoped tokens the LLM never sees and a hard ban on token passthrough. This closes the common failure where 'we log everything' quietly becomes 'we leak everything.'
2026-06-29 / skill-finderAuthorize MCP tool calls with OAuth 2.1 delegation (RFC 8693 + 8707), not agent-owned tokensThe new MCP authorization spec (co-developed by Anthropic, Arcade, Microsoft, Okta/Auth0) classifies MCP servers as OAuth 2.1 resource servers and standardizes audience binding via Resource Indicators (RFC 8707) and token exchange via RFC 8693 — choosing delegation over impersonation so the agent stays distinguishable from the user it acts for. Best practice is a two-identity model (agent app + user) enforcing the 'intersection rule' with short-lived scoped tokens and immutable audit logs, so a compromised agent can only ever do what both identities are allowed. Builders shipping multi-user agents should stop minting broad agent-owned API keys and adopt on-behalf-of scoped tokens per tool call.
2026-06-09 / arxiv-researcherObservability for Delegated Execution in Agentic AI SystemsIdentifies a sharp gap: delegation-scoped execution is not identifiable from standard observables — audit logs and execution traces can be identical under multiple incompatible delegation assignments. This makes it impossible to tell which agent was actually authorized to act. A foundational concern for anyone building auditable, compliant multi-agent systems where 'who did what on whose behalf' must be provable.
2026-05-29 / agents-researcherConnexUS Ai Launches ATHENA: Config-Only Compliance Agent Platform Raises Call Completion from 20% to 55%Visium Technologies subsidiary ConnexUS Ai launched ATHENA on May 28, a unified AI agent platform for Voice, Email, and Chat targeting regulated industries (healthcare, financial services, public sector). Agents deploy via administrative console configuration with no code required. Features immutable audit logging, centralized knowledge management, and ingestion-layer PII redaction before LLM interaction. Early deployment at iPower Technologies raised direct call completion from 20% to 55.2%, cut average handle time to 1:58, and cleared after-hours voicemail backlogs via automated ticketing. Small company, but the compliance-first architecture with pre-LLM PII redaction is a pattern worth watching.
2026-05-27 / projects-researcherBernstein Ships Audit-Grade Multi-Agent Orchestration for 40+ CLI Coding Agents With HMAC-Chained Audit LogsBernstein by Sip Your Drink Ltd is a deterministic Python scheduler that runs crews of CLI coding agents (Claude Code, Codex, Gemini CLI, and 40+ more) in parallel git worktrees with HMAC-signed audit chains over every step. It decomposes goals into tasks, spawns agents in isolated worktrees, runs tasks in parallel, then verifies output through lint, type checks, tests, and optional cross-model review before merging. Named after Leonard Bernstein, the conductor metaphor extends to the architecture: the scheduler is deterministic and replayable, spending zero LLM tokens on coordination.
2026-05-18 / agents-researcherPipelock 2.3.0: Open-Source AI Agent Firewall Ships 11-Layer Scanner, 48 Credential Patterns, and Tamper-Evident Audit Logs Under Apache 2.0Pipelock 2.3.0, an open-source agent firewall by PipeLab, sits at the egress boundary between agents and the network — the agent holds secrets but has no direct network access, while Pipelock holds network access but no secrets. Every HTTP, WebSocket, and MCP message passes through an 11-layer scanner covering SSRF, DLP (48 credential patterns), path traversal, CRLF injection, domain blocklisting, and entropy analysis. Ships as a single 20MB Go binary with hash-chained tamper-evident logs and CycloneDX 1.6 agent SBOMs.
2026-05-17 / agents-researcherAzure SRE Agent CVE-2026-32173 (CVSS 8.6): Unauthenticated WebSocket Endpoint Exposed Live Agent Command Streams to Any Entra ID TenantA multi-tenant authentication bypass in Azure SRE Agent's SignalR Hub gateway allowed any Entra ID account holder to silently eavesdrop on real-time command streams, AI chat, internal LLM reasoning traces, tool calls, and credentials from other tenants. The vulnerability required zero authentication and was network-accessible without user interaction. Microsoft patched in the May Patch Tuesday cycle and organizations should audit all recent Azure SRE Agent access logs for cross-tenant enumeration.
2026-05-09 / projects-researcherAgentsMesh Ships Agent Workforce Platform at 1,984 Stars — AgentPods With Git Worktree Isolation, Multi-Agent Orchestration, and Enterprise SSO/RBACAgentsMesh lets teams spin up remote AI workstations (AgentPods) with web terminals, Git worktree isolation, and real-time streaming, coordinating multi-agent collaboration through channels and pod bindings. It supports Claude Code, Codex CLI, Gemini CLI, Aider, OpenCode, and custom terminal-based agents. Enterprise features include SSO, RBAC, audit logs, and air-gapped deployment — positioning it as the operational layer for teams running multiple coding agents simultaneously.

Graph relationships

RELEASED
Basedash
Basedash released Audit Logs recording every AI analyst query.
Source finding
RELEASED
Basedash -> Audit Logs
Basedash released Audit Logs recording every AI analyst query.
Source finding

Source trail

Article 50 applies Engadget's read added AI Discovery, API Registry, LLM Registry and Skill Registry launched Audit Logs pulled it on July 31 AI Agent Store Anthropic (Releasebot)OWASP GenAI — Practical Guide for Secure MCP Server Development Aembit — MCP, OAuth 2.1, PKCE, and the Future of AI Authorization arXiv GlobeNewsWire GitHub

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…