Skip to content
Ask Otto AI
Help

What is this page?

Audit log viewer

Role aware

This page proves the staff audit log viewer: immutable audit entries, role and category filters, sanitized metadata, correction entries, hashed identifiers, and CSV or JSON export previews.

Audience
Staff
Current limits
It uses local invented audit events only. It does not read production audit rows, write audit rows, generate export files, create storage objects, send notifications, or grant auditor access.

Support request boundary

Use Sev2 if raw secrets, card data, bank data, IP addresses, or before and after payloads appear in the viewer or export previews, Sev3 if filters, correction entries, or export row counts are unclear, and Sev4 for labels or proof-copy feedback. This panel does not submit a support case.

Sev1: Critical outage or data-risk emergency

Target: 1-hour response, 24/7 paging during pilot

Sev2: Major workflow blocked

Target: 4 business hours

Sev3: Standard product question or non-urgent issue

Target: 1 business day

Sev4: How-to, cosmetic, or future enhancement

Target: 2 business days

These preview controls are placeholders. Real AI answers, search, walkthroughs, and support submission come in later tickets.

Notifications5

Static proof preview

Real notification feeds, delivery, and preferences arrive in a later ticket.

Sam Director

Sam Director

sam.director@otto-fixture.test

Switch local proof role

This changes only the local shell proof. Production role changes remain server-validated future work.

Search is a keyboard-focusable skeleton. No real index or permissioned search results are implemented in this ticket.

Compliance - Audit Log

Audit log viewer

Review local immutable audit entries, filters, sanitized metadata, correction entries, and CSV or JSON export previews.

Otto Fixture BPPE Career School - Audit log viewer proof

School Administrator ยท Sam Director

Audit log viewer

Audit history stays append-only

This proof turns sensitive compliance, form, payment, and security events into a reviewable audit viewer with filters, immutable correction entries, hashed IPs, redacted metadata, and export previews. It uses the control-plane audit planner without reading or writing production audit rows.

Compliance filtered events

3/6

The default view filters to compliance events and exports only the rows marked exportable. Non-exportable previews remain visible in the timeline but are excluded from CSV and JSON previews.

As of 2026-10-13Preview only

Metrics

Filters, corrections, and redaction coverage

Local proof data

Total events

Info

6

3 events match the default compliance filter.

Exportable rows

Success

2

Default filtered rows that can appear in export previews.

Warnings

Warning

3

Events with warning severity across the local timeline.

Redacted fields

Danger

6

Metadata fields hidden before rendering or exporting.

Compliance events

3

Correction entries

1

Unique actors

5

Filters

Filters and export preview

Default: compliance

Actor roles

business_officecompliance_directorregistrarschool_directorsystem

Categories

complianceformspaymentssecurity

Event names

audit.correction.appendedcomplaint.case.viewedcomplaint.resolution.approvedrefund.handoff.previewedreport.snapshot.previewedstudent_file.evidence.opened

Resource types

audit_log_entrycomplaint_caserefund_handoffreport_snapshotstudent_file

The local filter model supports actor role, category, event name, resource type, and free-text query checks. Export previews reuse the active filtered set and then remove rows that are not exportable.

Events

Immutable event timeline

6 entries

audit-1001 - complaint.case.viewed

Complaint case viewed

Compliance reviewed the BPPE referral complaint and missing SPFS/catalog evidence.

compliancewarningexportable

Actor

Jordan Compliance (Compliance Director)

Occurred at

2026-10-13T16:42:00.000Z

Resource

complaint_case: Priya BPPE referral

Request id

req-audit-1001

Correlation id

corr-complaint-priya

Device

Safari on macOS

Safe metadata

caseNumber

CMP-2026-0043

filter

bppe referral

rawPayload

[redacted]

Integrity

Immutable

yes

Correction for

not a correction

IP hash

120913a1922b61f9...

audit-1002 - complaint.resolution.approved

Complaint resolution approved

Director approved the resolved attendance grievance response.

complianceinfoexportable

Actor

Sam Director (School Director)

Occurred at

2026-10-12T22:18:00.000Z

Resource

complaint_case: Daniel attendance grievance

Request id

req-audit-1002

Correlation id

corr-complaint-daniel

Device

Chrome on macOS

Safe metadata

caseNumber

CMP-2026-0038

resolutionStatus

approved

before

[redacted]

after

[redacted]

Integrity

Immutable

yes

Correction for

not a correction

IP hash

57dee4baf25fab29...

audit-1003 - refund.handoff.previewed

Refund handoff previewed

Business office previewed the refund handoff without moving money.

paymentswarningexportable

Actor

Morgan Bursar (Business Office)

Occurred at

2026-10-12T19:02:00.000Z

Resource

refund_handoff: Maya refund handoff

Request id

req-audit-1003

Correlation id

corr-refund-maya

Device

Edge on Windows

Safe metadata

totalRefundCents

520000

cardNumber

[redacted]

bankAccount

[redacted]

Integrity

Immutable

yes

Correction for

not a correction

IP hash

f0e0f554785e350e...

audit-1004 - student_file.evidence.opened

Student file evidence opened

Registrar opened the student file evidence drill-down.

formsinfoexportable

Actor

Ari Registrar (Registrar)

Occurred at

2026-10-11T17:35:00.000Z

Resource

student_file: Maya student file

Request id

req-audit-1004

Correlation id

corr-file-maya

Device

Chrome on ChromeOS

Safe metadata

checklistItem

Catalog version and receipt

documentHash

sha256:file-maya-catalog-001

Integrity

Immutable

yes

Correction for

not a correction

IP hash

5406d0f0b4fb73c9...

audit-1005 - audit.correction.appended

Audit correction appended

Compliance appended a correction entry instead of editing the original audit event.

securitycriticalexportable

Actor

Jordan Compliance (Compliance Director)

Occurred at

2026-10-11T18:12:00.000Z

Resource

audit_log_entry: Correction for audit-1004

Request id

req-audit-1005

Correlation id

corr-audit-correction

Device

Safari on macOS

Safe metadata

correctedField

resourceLabel

reason

Clarified catalog evidence label

password

[redacted]

Integrity

Immutable

yes

Correction for

audit-1004

IP hash

120913a1922b61f9...

audit-1006 - report.snapshot.previewed

Report snapshot previewed

System previewed a report snapshot, but export stays blocked while BPPE gaps remain.

compliancewarningviewer only

Actor

System (System)

Occurred at

2026-10-10T20:00:00.000Z

Resource

report_snapshot: BPPE annual report preview

Request id

req-audit-1006

Correlation id

corr-report-preview

Device

Server worker

Safe metadata

rulePackVersion

2026.10.0-skeleton

snapshotReady

false

Integrity

Immutable

yes

Correction for

not a correction

IP hash

none

Export

CSV and JSON export previews

No file generated

CSV export preview

otto-audit-log-csv-preview.csv - 2 rows - 2026-10-13T18:00:00.000Z

csv
"id","occurred_at","event_name","actor","resource_type","resource_id","request_id","correlation_id"
"audit-1001","2026-10-13T16:42:00.000Z","complaint.case.viewed","Jordan Compliance","complaint_case","CMP-2026-0043","req-audit-1001","corr-complaint-priya"
"audit-1002","2026-10-12T22:18:00.000Z","complaint.resolution.approved","Sam Director","complaint_case","CMP-2026-0038","req-audit-1002","corr-complaint-daniel"
audit-1001.rawPayloadaudit-1002.beforeaudit-1002.after

JSON export preview

otto-audit-log-json-preview.json - 2 rows - 2026-10-13T18:00:00.000Z

json
[
  {
    "actorName": "Jordan Compliance",
    "actorRoleSlug": "compliance_director",
    "category": "compliance",
    "correctionForId": null,
    "eventName": "complaint.case.viewed",
    "id": "audit-1001",
    "metadata": {
      "caseNumber": "CMP-2026-0043",
      "filter": "bppe referral",
      "rawPayload": "[redacted]"
    },
    "occurredAt": "2026-10-13T16:42:00.000Z",
    "resourceId": "CMP-2026-0043",
    "resourceType": "complaint_case"
  },
  {
    "actorName": "Sam Director",
    "actorRoleSlug": "school_director",
    "category": "compliance",
    "correctionForId": null,
    "eventName": "complaint.resolution.approved",
    "id": "audit-1002",
    "metadata": {
      "caseNumber": "CMP-2026-0038",
      "resolutionStatus": "approved",
      "before": "[redacted]",
      "after": "[redacted]"
    },
    "occurredAt": "2026-10-12T22:18:00.000Z",
    "resourceId": "CMP-2026-0038",
    "resourceType": "complaint_case"
  }
]
audit-1001.rawPayloadaudit-1002.beforeaudit-1002.after