Agent Audit Trail

Create append-only audit trails with hash-chained NDJSON entries.

Updated Apr 8, 2026
One-click install
npx skills add https://github.com/LudwigAJ/swell --skill agent-audit-trail
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Agent Audit Trail
Source: https://github.com/LudwigAJ/swell/tree/main/.factory/skills/agent-audit-trail
Command: npx skills add https://github.com/LudwigAJ/swell --skill agent-audit-trail

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill creates a trustworthy, append-only record of agent activity so teams can prove what happened, when it happened, and why it happened without relying on memory or mutable logs.

Core Features & Use Cases

  • Hash-chained audit logging: Records tool calls, decisions, sessions, and external writes with tamper-evident integrity checks.
  • Compliance-ready structure: Captures timestamps, actors, provenance, targets, and summaries in a consistent schema for governance reviews.
  • Operational oversight: Supports long-running autonomous workflows where debugging, accountability, and post-incident analysis matter.
  • Use Case: Use it to document every write, approval, and model-driven decision during an autonomous coding session so you can verify the full execution history later.

Quick Start

Ask the agent to set up an append-only audit trail for your workspace and begin logging all significant actions with hash-chained entries.

Frequently Asked Questions about Agent Audit Trail

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a tamper-proof audit trail for autonomous agent actions?

To create a tamper-proof audit trail for autonomous agent actions, use an append-only logging system that records monotonically ordered NDJSON entries with sha256 hash chaining. This structure captures tool calls, decisions, and sessions with verifiable integrity for governance reviews.

Why do I need hash chaining for agent governance and compliance logging?

You need hash chaining for agent governance because it provides tamper-evident integrity checks, ensuring that historical records of tool calls and external writes cannot be mutated without detection during compliance reviews and post-incident analysis.

What is the best way to log provenance for long-running autonomous workflows?

The best way to log provenance for long-running autonomous workflows is to maintain an append-only record using structured NDJSON fields for timestamps, actors, targets, and summaries, ensuring full traceability of model-driven decisions across extended operations.

Does compliance logging for agent sessions require a specific data format?

Compliance logging for agent sessions requires monotonically ordered NDJSON entries. This append-only format securely captures event recording data for accountability, debugging, and provenance verification during governance reviews.

Can I use this audit trail approach to trace external writes during an autonomous coding session?

Yes, you can use this audit trail approach to trace external writes during an autonomous coding session. It documents every write, approval, and model-driven decision with structured fields, allowing you to verify the complete execution history later.

What should I not use an append-only agent audit trail for?

You should not use an append-only agent audit trail for mutable state tracking or active data modification, as its core constraint is immutability. It is strictly designed for event recording, provenance tracking, and post-incident analysis rather than operational state management.