All documentation

Documentation Everywhere else

Audit events: the Mac's work

The sixth page of the audit catalogue: commits, what the room wrote, code health, classified data, hand-overs, CLI sign-ins, tickets and alerts.

Page six of seven: what the room's work on the Mac came to — commits refused or warned, what the room wrote and what became of it, what git says of the code's health, data kept from models, a seat handing over, extra CLI sign-ins, tickets filed, alerts that acted.

The Mac's work

TypeReported byWhenDetail carries
commit.unreviewed_refusedMacA commit was refused: the work changed after the room reviewed it.chatId, changed
code.healthMacA room commit measured by git: young-code churn, agent files rewritten, year-old files touched (row 348).repo, files, lines, young, rework, legacy
room.acceptedMacA commit of room-written files: kept unchanged, edited by hand, or left out, by seat (row 347).repo, accepted, edited, discarded, roomLines, editedLines, bySeat
classified.keptMacA run read classified data: results held from every model, and passed on into files (row 354).held, passed, tools
commit.unreviewedMacA commit went ahead with work changed after review, warned.chatId, changed
run.handed_overMacA seat handed over: fix attempts ran out (row 355).seat, attempts, command, exit
mcp.offeredMacA local MCP server announced itself; offered, not attached (row 355).url
seat.account_switchedMacA CLI seat moved to its next sign-in at its limit.seat, cli, from, to
cli.account_addedMacAnother sign-in was added for a CLI seat.cli
cli.account_removedMacA CLI seat's extra sign-in was removed.cli
auth.step_upServerAn admin action was refused: its sign-in predated the step-up window.signedInMinutesAgo, windowMinutes
team.exportedServerThe team's export was built: downloaded by an admin, or written monthly to its bucket.counts, to, month
risk.filedServerA violation or blocked action filed a ticket (policies.fileViolations, row 358).cause, from
alert.actedServerAn alert acted (policies.alertsAct): a schedule paused, a spike day cheaper (row 337).kind, action, scheduleId or day
project.priorityServerAn owner or admin set a project's priority (row 359).folder, priority
selftest.ranServerThe break-in self-test ran: probes held, probes through (row 339).held, elicited, probes

What these do not carry

Counts and names, never a path, a diff or a line of code: a commit by its repository, a file by its count, a seat by its id.

See also

Not what you were looking for? The help centre answers one question at a time, and the support page says how to reach a person.