Org audit

Org audit is the Audit tab on the organization surface: the org-scoped record of what changed, who changed it, and when. It answers governance questions (“who approved this, who changed that role”). Platform-wide run records live under Observability (/ai/runs); system and job entries live under Logs.

• The Audit Logs tab lists security and configuration events for the organization with When, Action, Actor, and Target columns. Rows shown include an identity relink by a named member and agent-runner lease claims and releases by the native runner.
• Read the audit like a ledger: filter to the actor and window first, then read entries. Unfiltered scrolling finds anecdotes, not answers.
• Membership and role changes are the entries that matter most. A privilege change with no matching ticket or review note is the first thing to chase.
• The audit records what happened; it never explains why. Pair an entry with the session or approval behind it before concluding anything.

What next

• Logs: system and jobs entries with level, type, user, and date filters.
• Observability: session and approval records platform-wide.
• Approving agent actions: the decisions this record keeps.