Section 3 · Step 1
Audit log, one scope at a time
Compliance asks: who's been exporting customer data? Filter the log to loans:export. The names that surface tell the story.
Token activity
Token issuance and policy decisions across this tenant.
| When | Actor | Client | Scope | Decision |
|---|---|---|---|---|
| 151d ago | claims-bot-v2repeats agent | claims-bot-v2 | loans:export | ALLOW |
| 151d ago | compliance@northwind.com user | compliance-export-bot | loans:export | ALLOW |
| 151d ago | kevin@northwind.com user | claude-desktop | loans:read | ALLOW |
| 151d ago | kevin@northwind.com user | claude-desktop | loans:approve | ALLOW |
| 151d ago | n8n-nightly-sweep agent | n8n-nightly-sweep | loans:read | ALLOW |
| 152d ago | maya@northwind.com user | claude-desktop | loans:approve | DENY |
| 152d ago | claims-bot-v2repeats agent | claims-bot-v2 | loans:export | ALLOW |
| 155d ago | claims-bot-v2repeats agent | claims-bot-v2 | loans:export | ALLOW |
| 159d ago | claims-bot-v2repeats agent | claims-bot-v2 | loans:export | ALLOW |
| 153d ago | n8n-nightly-sweep agent | n8n-nightly-sweep | loans:export | ALLOW |
| 154d ago | kevin@northwind.com user | claude-desktop | loans:export | ALLOW |
| 156d ago | maya@northwind.com user | agentcore-account-copilot | loans:export | ALLOW |
| 157d ago | kevin@northwind.com user | claude-desktop | loans:export | ALLOW |