Section 3 · Step 1
Audit log, one scope at a time
Compliance asks: who's been exporting customer data? Filter the log to loans:export. The names that surface tell the story.
Token activity
Token issuance and policy decisions across this tenant.
| When | Actor | Client | Scope | Decision |
|---|---|---|---|---|
| 22d ago | claims-bot-v2repeats agent | claims-bot-v2 | loans:export | ALLOW |
| 22d ago | compliance@northwind.com user | compliance-export-bot | loans:export | ALLOW |
| 22d ago | kevin@northwind.com user | claude-desktop | loans:read | ALLOW |
| 22d ago | kevin@northwind.com user | claude-desktop | loans:approve | ALLOW |
| 22d ago | n8n-nightly-sweep agent | n8n-nightly-sweep | loans:read | ALLOW |
| 23d ago | maya@northwind.com user | claude-desktop | loans:approve | DENY |
| 23d ago | claims-bot-v2repeats agent | claims-bot-v2 | loans:export | ALLOW |
| 26d ago | claims-bot-v2repeats agent | claims-bot-v2 | loans:export | ALLOW |
| 30d ago | claims-bot-v2repeats agent | claims-bot-v2 | loans:export | ALLOW |
| 24d ago | n8n-nightly-sweep agent | n8n-nightly-sweep | loans:export | ALLOW |
| 25d ago | kevin@northwind.com user | claude-desktop | loans:export | ALLOW |
| 27d ago | maya@northwind.com user | agentcore-account-copilot | loans:export | ALLOW |
| 28d ago | kevin@northwind.com user | claude-desktop | loans:export | ALLOW |