Struct AuditEntry 

pub struct AuditEntry {

    pub timestamp: DateTime<Utc>,
    pub request_id: Uuid,
    pub agent_id: String,
    pub delegation_chain: String,
    pub task_session_id: String,
    pub tool_called: String,
    pub arguments: Value,
    pub authorization_decision: String,
    pub policy_matched: Option<String>,
    pub anomaly_flags: Vec<String>,
    pub failure_category: Option<String>,
    pub latency_ms: u64,
    pub upstream_status: Option<u16>,
    pub inspection_findings: Vec<String>,
    pub chain_sequence: Option<u64>,
    pub chain_prev_hash: Option<String>,
    pub chain_record_hash: Option<String>,
}

A structured audit log entry capturing a complete request lifecycle.

Fields

timestamp: DateTime<Utc>

When this event occurred.

request_id: Uuid

Unique identifier for this request.

agent_id: String

The agent that made the request.

delegation_chain: String

Serialized delegation chain (human → agent → sub-agent …).

task_session_id: String

The task session this request belongs to.

tool_called: String

The MCP tool (or HTTP path) that was called.

arguments: Value

Tool arguments, with sensitive fields redacted.

authorization_decision: String

The authorization decision: “allow”, “deny”, or “escalate”.

policy_matched: Option<String>

Which policy rule matched (if any).

anomaly_flags: Vec<String>

Anomaly flags raised by the behavior engine.

failure_category: Option<String>

Failure category: “governance”, “infrastructure”, or “protocol”. Distinguishes policy denials from upstream errors in audit analysis.

latency_ms: u64

End-to-end latency in milliseconds.

upstream_status: Option<u16>

HTTP status code from the upstream response.

inspection_findings: Vec<String>

Inspection findings from content inspection.

chain_sequence: Option<u64>

Monotonic sequence number for tamper detection. A gap in sequence numbers indicates a lost or deleted entry.

chain_prev_hash: Option<String>

Blake3 hash of the previous entry (hex-encoded). Forms a hash chain for integrity verification.

chain_record_hash: Option<String>

Blake3 hash of this entry (hex-encoded), computed over all fields except this one.

Implementations

impl AuditEntry

pub fn new(request_id: Uuid) -> Self

Create a new audit entry with the given request ID and current timestamp.

Trait Implementations

impl Clone for AuditEntry

fn clone(&self) -> AuditEntry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditEntry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuditEntry

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuditEntry

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.