Agent Audit Trail

Create append-only audit trails with hash-chained NDJSON entries.

Updated Apr 8, 2026
One-click install
npx skills add https://github.com/LudwigAJ/swell --skill agent-audit-trail
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Agent Audit Trail
Source: https://github.com/LudwigAJ/swell/tree/main/.factory/skills/agent-audit-trail
Command: npx skills add https://github.com/LudwigAJ/swell --skill agent-audit-trail

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill creates a trustworthy, append-only record of agent activity so teams can prove what happened, when it happened, and why it happened without relying on memory or mutable logs.

Core Features & Use Cases

  • Hash-chained audit logging: Records tool calls, decisions, sessions, and external writes with tamper-evident integrity checks.
  • Compliance-ready structure: Captures timestamps, actors, provenance, targets, and summaries in a consistent schema for governance reviews.
  • Operational oversight: Supports long-running autonomous workflows where debugging, accountability, and post-incident analysis matter.
  • Use Case: Use it to document every write, approval, and model-driven decision during an autonomous coding session so you can verify the full execution history later.

Quick Start

Ask the agent to set up an append-only audit trail for your workspace and begin logging all significant actions with hash-chained entries.

Frequently Asked Questions about Agent Audit Trail

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a tamper-proof audit trail for autonomous agent actions?▼

To create a tamper-proof audit trail for autonomous agent actions, use an append-only logging system that records monotonically ordered NDJSON entries with sha256 hash chaining. This structure captures tool calls, decisions, and sessions with verifiable integrity for governance reviews.

Why do I need hash chaining for agent governance and compliance logging?▼

You need hash chaining for agent governance because it provides tamper-evident integrity checks, ensuring that historical records of tool calls and external writes cannot be mutated without detection during compliance reviews and post-incident analysis.

What is the best way to log provenance for long-running autonomous workflows?▼

The best way to log provenance for long-running autonomous workflows is to maintain an append-only record using structured NDJSON fields for timestamps, actors, targets, and summaries, ensuring full traceability of model-driven decisions across extended operations.

Does compliance logging for agent sessions require a specific data format?▼

Compliance logging for agent sessions requires monotonically ordered NDJSON entries. This append-only format securely captures event recording data for accountability, debugging, and provenance verification during governance reviews.

Can I use this audit trail approach to trace external writes during an autonomous coding session?▼

Yes, you can use this audit trail approach to trace external writes during an autonomous coding session. It documents every write, approval, and model-driven decision with structured fields, allowing you to verify the complete execution history later.

What should I not use an append-only agent audit trail for?▼

You should not use an append-only agent audit trail for mutable state tracking or active data modification, as its core constraint is immutability. It is strictly designed for event recording, provenance tracking, and post-incident analysis rather than operational state management.