Agent Audit Trail
Append-only, hash-chained audit log for AI agents. Records agent actions, tool calls, decisions, and external writes with provenance, timestamps, and sha256... Skill: Agent Audit Trail Owner: roosch269 Summary: Append-only, hash-chained audit log for AI agents. Records agent actions, tool calls, decisions, and external writes with provenance, timestamps, and sha256... Tags: accountability:2.1.0, article-12:2.1.0, audit:2.1.0, compliance:2.1.0, eu-ai-act:2.1.0, hash-chain:1.0.0, latest:2.1.0, security:2.1.0, trust:1.0.0 Version history: v2.1.0 | 2026-04-02T17:55:47.302Z | us
Rank
62
Safety
84
Downloads
2.8k
Updated
Oct 9, 2026
Version
2.1.0
Source
CLAWHUB
About
What it does, and when to use it.
Capability contract not published. No trust telemetry is available yet. 2.8K downloads reported by the source. Last updated 10/9/2026.
Avoid when
- Contract metadata is missing or unavailable for deterministic execution.
Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing
Public facts
Every fact links back to the source it came from.
- Vendor
- Clawhubvendor · observed Oct 9, 2026
- Protocol compatibility
- OpenClawcompatibility · observed Oct 9, 2026
- Adoption signal
- 2.8K downloadsadoption · observed Oct 9, 2026
- Latest release
- 2.1.0release · observed Apr 2, 2026
- Handshake status
- UNKNOWNsecurity
Install and run
Setup complexity: low.
clawhub skill install s177h8y1kddnjj28j50dph6c3983gbsv:agent-audit-trail- Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
- Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.
Contract: missing
curl -s "https://www.xpersona.co/api/v1/agents/clawhub-roosch269-agent-audit-trail/snapshot"
Documentation
CLAWHUB
38,573 characters of source documentation, loaded on request.
Extracted files
3 files captured from the source.
SKILL.md
---
name: Agent Audit Trail
version: 2.1.0
description: >
Append-only, hash-chained audit log for AI agents. Records agent actions,
tool calls, decisions, and external writes with provenance, timestamps, and
sha256 chain integrity. Designed for compliance with EU AI Act Article 12
automatic event recording requirements for high-risk AI systems.
author:
name: Justin Roosch
url: https://github.com/roosch269
license: MIT-0
tags:
- audit
- compliance
- logging
- eu-ai-act
- article-12
- governance
- provenance
- security
keywords:
- audit trail
- agent logging
- hash chain
- event log
- compliance logging
---
# Agent Audit Trail
An append-only, hash-chained audit log for AI agents. Every significant action, decision, tool call, and external write is recorded with a sha256 chain linking entries together — making tampering detectable and providing an authoritative compliance record.
## Overview
This skill provides:
- **Append-only NDJSON log** at `audit/atlas-actions.ndjson`
- **Hash-chained entries** — each entry includes the sha256 of the previous entry
- **Monotonic ordering** — `ord` field ensures strict sequence
- **Structured fields** — consistent schema across all event types
- **EU AI Act Article 12** compliance implementation
## Log Location
```
audit/atlas-actions.ndjson
```
The file is append-only. Never truncate, overwrite, or reorder entries.
## Log Entry Schema
Each line is a valid JSON object:
```json
{
"ts": "2026-04-02T18:00:00.000+01:00",
"kind": "tool-call",
"actor": "atlas",
"domain": "agirails",
"plane": "action",
"gate": "external-write",
"ord": 42,
"provenance": "session:agent:main:discord:channel:1472016988741177520",
"target": "audit/atlas-actions.ndjson",
"summary": "Appended audit log entry",
"prev_hash": "sha256:abc123...",
"hash": "sha256:def456..."
}
```
### Field Reference
| Field | Type | Description |
|-------|------|-------------|
| `ts` | ISO-8601 | Timestamp with timezone offset (Europe/London) |
| `kind` | string | Event type (see below) |
| `actor` | string | Agent or component that triggered the event |
| `domain` | string | Domain partition (`agirails`, `client-lab`, `personal`) |
| `plane` | string | Four-plane label (`ingress`, `interpretation`, `decision`, `action`) |
| `gate` | string | Truth gate applied (see SOUL.md) |
| `ord` | integer | Monotonically increasing sequence number |
| `provenance` | string | Source session or external identity |
| `target` | string | File, URL, or resource affected |
| `summary` | string | Human-readable description of the event |
| `prev_hash` | string | sha256 of the previous log entry (hex, prefixed `sha256:`) |
| `hash` | string | sha256 of this entry excluding the `hash` field itself |
### Event Kinds
| Kind | Plane | Description |
|------|-------|-------------|
| `tool-call` | action | Any tool invocation |
| `external-write` | action | Writ_meta.json
{
"ownerId": "kn71asv5ce1x1ytv32k5av44gx817hff",
"slug": "agent-audit-trail",
"version": "2.1.0",
"publishedAt": 1775152547302
}skill-card.md
## Description: Append-only, hash-chained audit log for AI agents that records agent actions, tool calls, decisions, and external writes with provenance, timestamps, and sha256 chain integrity for EU AI Act Article 12 logging support. This skill is ready for commercial/non-commercial use. ## Publisher: [roosch269](https://clawhub.ai/user/roosch269) ### License/Terms of Use: MIT-0 ## Use Case: Developers and operators of AI agents use this skill to add an append-only NDJSON audit log that records actions, tool calls, decisions, external writes, and provenance for compliance review and tamper-evidence. ### Deployment Geography for Use: Global ## Known Risks and Mitigations: Risk: The skill creates durable local records of agent activity that may include sensitive session, credential, wallet, transaction, or other operational metadata. Mitigation: Restrict audit-log file permissions, define a retention policy, and redact sensitive identifiers and metadata before using the log for compliance or incident evidence. Risk: The security evidence notes reliability flaws in the sample integrity logic, including the need to fix hash-chain genesis behavior and writer coordination. Mitigation: Fix the hash-chain genesis mismatch and use locking or a single-writer design before relying on the log for compliance or incident evidence. Risk: Companion skills may extend agent behavior or integrations beyond this audit trail. Mitigation: Verify companion skills before installing or wiring them into an agent workflow. ## Reference(s): ## Skill Output: **Output Type(s):** [text, markdown, code, shell commands, configuration, guidance] **Output Format:** [Markdown with JSON, Python, and shell command examples] **Output Parameters:** [1D] **Other Properties Related to Output:** [Produces local NDJSON audit-log setup and verification guidance; persistent logs may contain sensitive activity metadata.] ## Skill Version(s): 2.1.0 (source: frontmatter, _meta.json, release evidence) ## Ethical Considerations: Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.
activepieces
AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents
cherry-studio
AI productivity studio with smart chat, autonomous agents, and 300+ assistants.
AionUi
Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!
CopilotKit
The Frontend for Agents & Generative UI. React + Angular
Machine-readable data
The same record, as JSON, for agents and crawlers.
{
"facts": [
{
"factKey": "vendor",
"category": "vendor",
"label": "Vendor",
"value": "Clawhub",
"href": "https://clawhub.ai/roosch269/skills/agent-audit-trail",
"sourceUrl": "https://clawhub.ai/roosch269/skills/agent-audit-trail",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-10-09T11:26:48.273Z",
"isPublic": true
},
{
"factKey": "protocols",
"category": "compatibility",
"label": "Protocol compatibility",
"value": "OpenClaw",
"href": "https://www.xpersona.co/api/v1/agents/clawhub-roosch269-agent-audit-trail/contract",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-roosch269-agent-audit-trail/contract",
"sourceType": "contract",
"confidence": "medium",
"observedAt": "2026-10-09T11:26:48.273Z",
"isPublic": true
},
{
"factKey": "traction",
"category": "adoption",
"label": "Adoption signal",
"value": "2.8K downloads",
"href": "https://clawhub.ai/roosch269/agent-audit-trail",
"sourceUrl": "https://clawhub.ai/roosch269/agent-audit-trail",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-10-09T11:26:48.273Z",
"isPublic": true
},
{
"factKey": "latest_release",
"category": "release",
"label": "Latest release",
"value": "2.1.0",
"href": "https://clawhub.ai/roosch269/agent-audit-trail",
"sourceUrl": "https://clawhub.ai/roosch269/agent-audit-trail",
"sourceType": "release",
"confidence": "medium",
"observedAt": "2026-04-02T17:55:47.302Z",
"isPublic": true
},
{
"factKey": "handshake_status",
"category": "security",
"label": "Handshake status",
"value": "UNKNOWN",
"href": "https://www.xpersona.co/api/v1/agents/clawhub-roosch269-agent-audit-trail/trust",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-roosch269-agent-audit-trail/trust",
"sourceType": "trust",
"confidence": "medium",
"observedAt": null,
"isPublic": true
}
],
"events": [
{
"eventType": "release",
"title": "Release 2.1.0",
"description": "v2.1: EU AI Act Article 12 compliance mapping, companion skills (Self-Assessment v2.2.1 + AGIRAILS), roadmap for export/stats/remote shipping.",
"href": "https://clawhub.ai/roosch269/agent-audit-trail",
"sourceUrl": "https://clawhub.ai/roosch269/agent-audit-trail",
"sourceType": "release",
"confidence": "medium",
"observedAt": "2026-04-02T17:55:47.302Z",
"isPublic": true
}
]
}Record generated Oct 9, 2026.
