pub enum AuditKind {
SessionOpen,
SessionClose,
Request,
BlobFetch,
Trust,
}Expand description
The event class of an AuditRecord (the four audit event classes). An additive discriminant on
top of the base record schema: it removes no field and makes the JSONL self-describing so
a consumer can filter by class without guessing from which optional fields are present.
Variants§
SessionOpen
A mesh session opened (a backend was selected for an authenticated peer).
(A session_open with status:"error" is a synthesized FAILED-dial marker — no backend
was reached; it records an attempted-and-failed reach for the telemetry stream.)
SessionClose
A mesh session closed (the backend returned / the session tore down).
Request
One proxied MCP request line (method + tool NAME + args_hash). NEVER carries raw arguments.
BlobFetch
A peer fetched a blob from this node’s gated provider (peer + hash + allow/deny).
Trust
A trust mutation (pair, unpair, roster install/swap, revoke).