[{"data":1,"prerenderedAt":3463},["ShallowReactive",2],{"navigation_docs":3,"docs-page:\u002Fgovern\u002Faudit-trail":1849,"docs-surround:\u002Fgovern\u002Faudit-trail":3458},[4,72,214,304,947,1040,1230,1504,1590,1701,1830],{"title":5,"path":6,"stem":7,"children":8,"icon":71},"Get started","\u002Fgetting-started","01.getting-started\u002F00.index",[9,10,15,20,25,36],{"title":5,"path":6,"stem":7},{"title":11,"path":12,"stem":13,"icon":14},"Introduction","\u002Fgetting-started\u002Fintroduction","01.getting-started\u002F01.introduction","i-ph-house",{"title":16,"path":17,"stem":18,"icon":19},"Quickstart","\u002Fgetting-started\u002Fquickstart","01.getting-started\u002F02.quickstart","i-ph-rocket-launch",{"title":21,"path":22,"stem":23,"icon":24},"Concepts","\u002Fgetting-started\u002Fconcepts","01.getting-started\u002F03.concepts","i-ph-book-open",{"title":26,"path":27,"stem":28,"children":29,"icon":31},"Install","\u002Fgetting-started\u002Finstall","01.getting-started\u002F04.install\u002F00.index",[30,32],{"title":26,"path":27,"stem":28,"icon":31},"i-ph-download-simple",{"title":33,"path":34,"stem":35},"Prepare the Linux sandbox","\u002Fgetting-started\u002Finstall\u002Flinux-sandbox","01.getting-started\u002F04.install\u002F01.linux-sandbox",{"title":37,"path":38,"stem":39,"children":40,"icon":42},"Web UI","\u002Fgetting-started\u002Fweb-ui","01.getting-started\u002F05.web-ui\u002F00.index",[41,43,47,51,55,59,63,67],{"title":37,"path":38,"stem":39,"icon":42},"i-ph-monitor",{"title":44,"path":45,"stem":46},"Choose a tenant","\u002Fgetting-started\u002Fweb-ui\u002Ftenants","01.getting-started\u002F05.web-ui\u002F01.tenants",{"title":48,"path":49,"stem":50},"Find a page","\u002Fgetting-started\u002Fweb-ui\u002Fnavigation","01.getting-started\u002F05.web-ui\u002F02.navigation",{"title":52,"path":53,"stem":54},"Use the chat drawer","\u002Fgetting-started\u002Fweb-ui\u002Fchats","01.getting-started\u002F05.web-ui\u002F03.chats",{"title":56,"path":57,"stem":58},"Create and edit records","\u002Fgetting-started\u002Fweb-ui\u002Fforms","01.getting-started\u002F05.web-ui\u002F04.forms",{"title":60,"path":61,"stem":62},"Keyboard and accessibility","\u002Fgetting-started\u002Fweb-ui\u002Faccessibility","01.getting-started\u002F05.web-ui\u002F05.accessibility",{"title":64,"path":65,"stem":66},"Accounts and permissions","\u002Fgetting-started\u002Fweb-ui\u002Faccounts","01.getting-started\u002F05.web-ui\u002F06.accounts",{"title":68,"path":69,"stem":70},"Console page directory","\u002Fgetting-started\u002Fweb-ui\u002Fpage-directory","01.getting-started\u002F05.web-ui\u002F07.page-directory",false,{"title":21,"path":73,"stem":74,"children":75,"icon":71},"\u002Fconcepts","02.concepts\u002F00.index",[76,77,82,87,92,123,128,143,166,185,204,209],{"title":21,"path":73,"stem":74},{"title":78,"path":79,"stem":80,"icon":81},"Architecture","\u002Fconcepts\u002Farchitecture","02.concepts\u002F01.architecture","i-ph-planet",{"title":83,"path":84,"stem":85,"icon":86},"Jobs and durability","\u002Fconcepts\u002Fjobs","02.concepts\u002F02.jobs","i-ph-infinity",{"title":88,"path":89,"stem":90,"icon":91},"Routing","\u002Fconcepts\u002Frouting","02.concepts\u002F03.routing","i-ph-path",{"title":93,"path":94,"stem":95,"children":96,"icon":98},"Security model","\u002Fconcepts\u002Fsecurity","02.concepts\u002F04.security\u002F00.index",[97,99,103,107,111,115,119],{"title":93,"path":94,"stem":95,"icon":98},"i-ph-shield-check",{"title":100,"path":101,"stem":102},"Node identity and tenant secrets","\u002Fconcepts\u002Fsecurity\u002Fidentity-and-secrets","02.concepts\u002F04.security\u002F01.identity-and-secrets",{"title":104,"path":105,"stem":106},"Plugin processes and operator exemptions","\u002Fconcepts\u002Fsecurity\u002Fplugins","02.concepts\u002F04.security\u002F02.plugins",{"title":108,"path":109,"stem":110},"Sandbox tiers and routing","\u002Fconcepts\u002Fsecurity\u002Fsandbox-tiers","02.concepts\u002F04.security\u002F03.sandbox-tiers",{"title":112,"path":113,"stem":114},"Sandbox egress rules","\u002Fconcepts\u002Fsecurity\u002Fegress","02.concepts\u002F04.security\u002F04.egress",{"title":116,"path":117,"stem":118},"Protected files and sandbox limits","\u002Fconcepts\u002Fsecurity\u002Fprotected-files","02.concepts\u002F04.security\u002F05.protected-files",{"title":120,"path":121,"stem":122},"Security assurance","\u002Fconcepts\u002Fsecurity\u002Fassurance","02.concepts\u002F04.security\u002F06.assurance",{"title":124,"path":125,"stem":126,"icon":127},"Temporal","\u002Fconcepts\u002Ftemporal","02.concepts\u002F05.temporal","i-ph-clock",{"title":129,"path":130,"stem":131,"children":132,"icon":134},"Limits and scaling","\u002Fconcepts\u002Flimits-and-scaling","02.concepts\u002F06.limits-and-scaling\u002F00.index",[133,135,139],{"title":129,"path":130,"stem":131,"icon":134},"i-ph-gauge",{"title":136,"path":137,"stem":138},"Tenant and queue limits","\u002Fconcepts\u002Flimits-and-scaling\u002Flimits","02.concepts\u002F06.limits-and-scaling\u002F01.limits",{"title":140,"path":141,"stem":142},"Capacity measurements","\u002Fconcepts\u002Flimits-and-scaling\u002Fmeasurements","02.concepts\u002F06.limits-and-scaling\u002F02.measurements",{"title":144,"path":145,"stem":146,"children":147,"icon":149},"Threat model","\u002Fconcepts\u002Fthreat-model","02.concepts\u002F07.threat-model\u002F00.index",[148,150,154,158,162],{"title":144,"path":145,"stem":146,"icon":149},"i-ph-crosshair",{"title":151,"path":152,"stem":153},"Trust boundaries and compromise","\u002Fconcepts\u002Fthreat-model\u002Ftrust-boundaries","02.concepts\u002F07.threat-model\u002F01.trust-boundaries",{"title":155,"path":156,"stem":157},"Harness and tool boundaries","\u002Fconcepts\u002Fthreat-model\u002Fharness-tools","02.concepts\u002F07.threat-model\u002F02.harness-tools",{"title":159,"path":160,"stem":161},"Known security gaps","\u002Fconcepts\u002Fthreat-model\u002Fknown-gaps","02.concepts\u002F07.threat-model\u002F03.known-gaps",{"title":163,"path":164,"stem":165},"Origins, sequences and tool results","\u002Fconcepts\u002Fthreat-model\u002Forigins-and-results","02.concepts\u002F07.threat-model\u002F04.origins-and-results",{"title":167,"path":168,"stem":169,"children":170,"icon":172},"Outbound connections","\u002Fconcepts\u002Foutbound-connections","02.concepts\u002F08.outbound-connections\u002F00.index",[171,173,177,181],{"title":167,"path":168,"stem":169,"icon":172},"i-ph-arrow-square-out",{"title":174,"path":175,"stem":176},"Server outbound connections","\u002Fconcepts\u002Foutbound-connections\u002Fserver","02.concepts\u002F08.outbound-connections\u002F01.server",{"title":178,"path":179,"stem":180},"Node and plugin outbound connections","\u002Fconcepts\u002Foutbound-connections\u002Fnodes-and-plugins","02.concepts\u002F08.outbound-connections\u002F02.nodes-and-plugins",{"title":182,"path":183,"stem":184},"Addresses a model provider fetches","\u002Fconcepts\u002Foutbound-connections\u002Fprovider-fetches","02.concepts\u002F08.outbound-connections\u002F03.provider-fetches",{"title":186,"path":187,"stem":188,"children":189,"icon":191},"Run receipts","\u002Fconcepts\u002Frun-receipts","02.concepts\u002F09.run-receipts\u002F00.index",[190,192,196,200],{"title":186,"path":187,"stem":188,"icon":191},"i-ph-receipt",{"title":193,"path":194,"stem":195},"Authority envelopes and delegation","\u002Fconcepts\u002Frun-receipts\u002Fauthority","02.concepts\u002F09.run-receipts\u002F01.authority",{"title":197,"path":198,"stem":199},"Call bindings and budget charges","\u002Fconcepts\u002Frun-receipts\u002Fcalls-and-charges","02.concepts\u002F09.run-receipts\u002F02.calls-and-charges",{"title":201,"path":202,"stem":203},"Verify run receipts offline","\u002Fconcepts\u002Frun-receipts\u002Fverify","02.concepts\u002F09.run-receipts\u002F03.verify",{"title":205,"path":206,"stem":207,"icon":208},"Delegation and identity","\u002Fconcepts\u002Fdelegation-and-identity","02.concepts\u002F10.delegation-and-identity","i-ph-identification-badge",{"title":210,"path":211,"stem":212,"icon":213},"How a tool call is decided","\u002Fconcepts\u002Fhow-a-tool-call-is-decided","02.concepts\u002F11.how-a-tool-call-is-decided","i-ph-list-checks",{"title":215,"path":216,"stem":217,"children":218,"icon":71},"Run","\u002Fagents","03.agents\u002F00.index",[219,221,226,231,236,240,245,250,268,299],{"title":220,"path":216,"stem":217},"Run agents",{"title":222,"path":223,"stem":224,"icon":225},"Run jobs","\u002Fagents\u002Frun-jobs","03.agents\u002F01.run-jobs","i-ph-play",{"title":227,"path":228,"stem":229,"icon":230},"Job history","\u002Fagents\u002Fhistory","03.agents\u002F02.history","i-ph-clock-counter-clockwise",{"title":232,"path":233,"stem":234,"icon":235},"Long jobs","\u002Fagents\u002Flong-jobs","03.agents\u002F03.long-jobs","i-ph-hourglass-medium",{"title":237,"path":238,"stem":239,"icon":235},"Waiting for events","\u002Fagents\u002Fwaiting-for-events","03.agents\u002F04.waiting-for-events",{"title":241,"path":242,"stem":243,"icon":244},"Delegation","\u002Fagents\u002Fdelegation","03.agents\u002F05.delegation","i-ph-git-fork",{"title":246,"path":247,"stem":248,"icon":249},"Colleagues and the board","\u002Fagents\u002Fcolleagues","03.agents\u002F06.colleagues","i-ph-chats-circle",{"title":251,"path":252,"stem":253,"children":254,"icon":249},"Conversations","\u002Fagents\u002Fconversations","03.agents\u002F07.conversations\u002F00.index",[255,256,260,264],{"title":251,"path":252,"stem":253,"icon":249},{"title":257,"path":258,"stem":259},"Conversation access and history","\u002Fagents\u002Fconversations\u002Faccess-and-history","03.agents\u002F07.conversations\u002F02.access-and-history",{"title":261,"path":262,"stem":263},"Use conversations from an app","\u002Fagents\u002Fconversations\u002Fapps","03.agents\u002F07.conversations\u002F03.apps",{"title":265,"path":266,"stem":267},"Hand off a conversation and use Ask","\u002Fagents\u002Fconversations\u002Fhandoffs-and-ask","03.agents\u002F07.conversations\u002F04.handoffs-and-ask",{"title":269,"path":270,"stem":271,"children":272,"icon":274},"Decide an approval","\u002Fagents\u002Fapprovals","03.agents\u002F08.approvals\u002F00.index",[273,275,279,283,287,291,295],{"title":269,"path":270,"stem":271,"icon":274},"i-ph-hand-palm",{"title":276,"path":277,"stem":278},"Configure approval ownership and deadlines","\u002Fagents\u002Fapprovals\u002Fconfigure","03.agents\u002F08.approvals\u002F02.configure",{"title":280,"path":281,"stem":282},"How approval decisions bind a call","\u002Fagents\u002Fapprovals\u002Fsecurity","03.agents\u002F08.approvals\u002F03.security",{"title":284,"path":285,"stem":286},"Edit an approval or allow repeated calls","\u002Fagents\u002Fapprovals\u002Fedits-and-repeat-calls","03.agents\u002F08.approvals\u002F04.edits-and-repeat-calls",{"title":288,"path":289,"stem":290},"Resolve loop, budget and recovery waits","\u002Fagents\u002Fapprovals\u002Frecovery","03.agents\u002F08.approvals\u002F05.recovery",{"title":292,"path":293,"stem":294},"Review approval statistics and test cards","\u002Fagents\u002Fapprovals\u002Fstatistics","03.agents\u002F08.approvals\u002F06.statistics",{"title":296,"path":297,"stem":298},"Decide approvals from an app","\u002Fagents\u002Fapprovals\u002Fapps","03.agents\u002F08.approvals\u002F07.apps",{"title":300,"path":301,"stem":302,"icon":303},"Asking people","\u002Fagents\u002Fasking-people","03.agents\u002F09.asking-people","i-ph-chat-circle-dots",{"title":305,"path":306,"stem":307,"children":308,"icon":71},"Build","\u002Fbuild","04.build\u002F00.index",[309,310,655,844],{"title":305,"path":306,"stem":307},{"title":311,"path":312,"stem":313,"children":314,"icon":71},"Plugins","\u002Fbuild\u002Fplugins","04.build\u002F01.plugins\u002F00.index",[315,316,321,352,357,362,367,378,397,412,417,422,427,442,447,452,457,472,476,481,492,497,502,640],{"title":311,"path":312,"stem":313},{"title":317,"path":318,"stem":319,"icon":320},"What a plugin is","\u002Fbuild\u002Fplugins\u002Foverview","04.build\u002F01.plugins\u002F01.overview","i-ph-puzzle-piece",{"title":322,"path":323,"stem":324,"children":325,"icon":327},"Install a plugin","\u002Fbuild\u002Fplugins\u002Finstall","04.build\u002F01.plugins\u002F02.install\u002F00.index",[326,328,332,336,340,344,348],{"title":322,"path":323,"stem":324,"icon":327},"i-ph-package",{"title":329,"path":330,"stem":331,"icon":327},"Review an install","\u002Fbuild\u002Fplugins\u002Finstall\u002Freview","04.build\u002F01.plugins\u002F02.install\u002F01.review",{"title":333,"path":334,"stem":335,"icon":327},"Install from a source","\u002Fbuild\u002Fplugins\u002Finstall\u002Fsources","04.build\u002F01.plugins\u002F02.install\u002F02.sources",{"title":337,"path":338,"stem":339,"icon":327},"Update a plugin","\u002Fbuild\u002Fplugins\u002Finstall\u002Fupdate","04.build\u002F01.plugins\u002F02.install\u002F03.update",{"title":341,"path":342,"stem":343,"icon":327},"Roll out a plugin","\u002Fbuild\u002Fplugins\u002Finstall\u002Frollouts","04.build\u002F01.plugins\u002F02.install\u002F04.rollouts",{"title":345,"path":346,"stem":347,"icon":327},"Grant access between plugins","\u002Fbuild\u002Fplugins\u002Finstall\u002Fgrants","04.build\u002F01.plugins\u002F02.install\u002F05.grants",{"title":349,"path":350,"stem":351,"icon":327},"Retire or remove a plugin","\u002Fbuild\u002Fplugins\u002Finstall\u002Fretire-and-remove","04.build\u002F01.plugins\u002F02.install\u002F06.retire-and-remove",{"title":353,"path":354,"stem":355,"icon":356},"Configure an installed plugin","\u002Fbuild\u002Fplugins\u002Fconfigure","04.build\u002F01.plugins\u002F03.configure","i-ph-sliders-horizontal",{"title":358,"path":359,"stem":360,"icon":361},"Sets","\u002Fbuild\u002Fplugins\u002Fsets","04.build\u002F01.plugins\u002F04.sets","i-ph-stack",{"title":363,"path":364,"stem":365,"icon":366},"Your first plugin","\u002Fbuild\u002Fplugins\u002Ffirst-plugin","04.build\u002F01.plugins\u002F05.first-plugin","i-ph-hammer",{"title":368,"path":369,"stem":370,"children":371,"icon":373},"Structure a plugin","\u002Fbuild\u002Fplugins\u002Fstructure","04.build\u002F01.plugins\u002F06.structure\u002F00.index",[372,374],{"title":368,"path":369,"stem":370,"icon":373},"i-ph-tree-structure",{"title":375,"path":376,"stem":377,"icon":373},"Plugin structure rules","\u002Fbuild\u002Fplugins\u002Fstructure\u002Flint-rules","04.build\u002F01.plugins\u002F06.structure\u002F01.lint-rules",{"title":379,"path":380,"stem":381,"children":382,"icon":384},"Develop a plugin","\u002Fbuild\u002Fplugins\u002Fdevelop-and-test","04.build\u002F01.plugins\u002F07.develop-and-test\u002F00.index",[383,385,389,393],{"title":379,"path":380,"stem":381,"icon":384},"i-ph-flask",{"title":386,"path":387,"stem":388,"icon":384},"Check a plugin candidate","\u002Fbuild\u002Fplugins\u002Fdevelop-and-test\u002Fcandidate-checks","04.build\u002F01.plugins\u002F07.develop-and-test\u002F01.candidate-checks",{"title":390,"path":391,"stem":392,"icon":384},"Lint and test a plugin","\u002Fbuild\u002Fplugins\u002Fdevelop-and-test\u002Flint-and-tests","04.build\u002F01.plugins\u002F07.develop-and-test\u002F02.lint-and-tests",{"title":394,"path":395,"stem":396,"icon":384},"Run failure drills","\u002Fbuild\u002Fplugins\u002Fdevelop-and-test\u002Ftests-and-drills","04.build\u002F01.plugins\u002F07.develop-and-test\u002F03.tests-and-drills",{"title":398,"path":399,"stem":400,"children":401,"icon":403},"Build in Studio","\u002Fbuild\u002Fplugins\u002Fstudio","04.build\u002F01.plugins\u002F08.studio\u002F00.index",[402,404,408],{"title":398,"path":399,"stem":400,"icon":403},"i-ph-code",{"title":405,"path":406,"stem":407,"icon":403},"Test and explain a draft","\u002Fbuild\u002Fplugins\u002Fstudio\u002Ftest-and-explain","04.build\u002F01.plugins\u002F08.studio\u002F01.test-and-explain",{"title":409,"path":410,"stem":411,"icon":403},"Release a workspace plugin","\u002Fbuild\u002Fplugins\u002Fstudio\u002Frelease","04.build\u002F01.plugins\u002F08.studio\u002F02.release",{"title":413,"path":414,"stem":415,"icon":416},"The build kit","\u002Fbuild\u002Fplugins\u002Fclaude-code","04.build\u002F01.plugins\u002F09.claude-code","i-ph-sparkle",{"title":418,"path":419,"stem":420,"icon":421},"Example: support triage","\u002Fbuild\u002Fplugins\u002Fexample-support-triage","04.build\u002F01.plugins\u002F10.example-support-triage","i-ph-lifebuoy",{"title":423,"path":424,"stem":425,"icon":426},"Publish and version","\u002Fbuild\u002Fplugins\u002Fpublish","04.build\u002F01.plugins\u002F11.publish","i-ph-tag",{"title":428,"path":429,"stem":430,"children":431,"icon":433},"List a plugin","\u002Fbuild\u002Fplugins\u002Flist-a-plugin","04.build\u002F01.plugins\u002F12.list-a-plugin\u002F00.index",[432,434,438],{"title":428,"path":429,"stem":430,"icon":433},"i-ph-storefront",{"title":435,"path":436,"stem":437,"icon":433},"Hub review checks","\u002Fbuild\u002Fplugins\u002Flist-a-plugin\u002Freview","04.build\u002F01.plugins\u002F12.list-a-plugin\u002F01.review",{"title":439,"path":440,"stem":441,"icon":433},"Maintain a listing","\u002Fbuild\u002Fplugins\u002Flist-a-plugin\u002Fmaintain","04.build\u002F01.plugins\u002F12.list-a-plugin\u002F02.maintain",{"title":443,"path":444,"stem":445,"icon":446},"The catalog","\u002Fbuild\u002Fplugins\u002Fcatalog","04.build\u002F01.plugins\u002F13.catalog","i-ph-books",{"title":448,"path":449,"stem":450,"icon":451},"Folders, bundles and OCI","\u002Fbuild\u002Fplugins\u002Fsources","04.build\u002F01.plugins\u002F14.sources","i-ph-archive",{"title":453,"path":454,"stem":455,"icon":456},"The workspace","\u002Fbuild\u002Fplugins\u002Fworkspace","04.build\u002F01.plugins\u002F15.workspace","i-ph-folder-notch-open",{"title":458,"path":459,"stem":460,"children":461,"icon":463},"Use a plugin index","\u002Fbuild\u002Fplugins\u002Findexes","04.build\u002F01.plugins\u002F16.indexes\u002F00.index",[462,464,468],{"title":458,"path":459,"stem":460,"icon":463},"i-ph-seal-check",{"title":465,"path":466,"stem":467,"icon":463},"Read index version records","\u002Fbuild\u002Fplugins\u002Findexes\u002Fversion-records","04.build\u002F01.plugins\u002F16.indexes\u002F01.version-records",{"title":469,"path":470,"stem":471,"icon":463},"Manage plugin indexes","\u002Fbuild\u002Fplugins\u002Findexes\u002Fmanage","04.build\u002F01.plugins\u002F16.indexes\u002F02.manage",{"title":473,"path":474,"stem":475,"icon":327},"Existing MCP packages","\u002Fbuild\u002Fplugins\u002Fpackages","04.build\u002F01.plugins\u002F17.packages",{"title":477,"path":478,"stem":479,"icon":480},"MCP servers from container images","\u002Fbuild\u002Fplugins\u002Fcontainer-images","04.build\u002F01.plugins\u002F18.container-images","i-ph-cube",{"title":482,"path":483,"stem":484,"children":485,"icon":487},"Import agent plugins","\u002Fbuild\u002Fplugins\u002Fclaude-code-and-agent-plugins","04.build\u002F01.plugins\u002F19.claude-code-and-agent-plugins\u002F00.index",[486,488],{"title":482,"path":483,"stem":484,"icon":487},"i-ph-arrow-square-in",{"title":489,"path":490,"stem":491,"icon":487},"Import from registries","\u002Fbuild\u002Fplugins\u002Fclaude-code-and-agent-plugins\u002Fmarketplaces","04.build\u002F01.plugins\u002F19.claude-code-and-agent-plugins\u002F01.marketplaces",{"title":493,"path":494,"stem":495,"icon":496},"GitHub","\u002Fbuild\u002Fplugins\u002Fgithub","04.build\u002F01.plugins\u002F20.github","i-ph-github-logo",{"title":498,"path":499,"stem":500,"icon":501},"Known vulnerabilities","\u002Fbuild\u002Fplugins\u002Fvulnerabilities","04.build\u002F01.plugins\u002F21.vulnerabilities","i-ph-shield-warning",{"title":503,"path":504,"stem":505,"children":506,"icon":71},"Verified plugins","\u002Fbuild\u002Fplugins\u002Fverified","04.build\u002F01.plugins\u002F22.verified\u002F01.index",[507,508,513,518,523,528,533,538,543,548,553,558,580,585,589,594,599,604,608,612,617,622,626],{"title":503,"path":504,"stem":505,"icon":463},{"title":509,"path":510,"stem":511,"icon":512},"ai.oz0\u002Fweb","\u002Fbuild\u002Fplugins\u002Fverified\u002Fweb","04.build\u002F01.plugins\u002F22.verified\u002F02.web","i-ph-globe",{"title":514,"path":515,"stem":516,"icon":517},"ai.oz0\u002Fnet-diag","\u002Fbuild\u002Fplugins\u002Fverified\u002Fnet-diag","04.build\u002F01.plugins\u002F22.verified\u002F03.net-diag","i-ph-network",{"title":519,"path":520,"stem":521,"icon":522},"ai.oz0\u002Fcve-triage","\u002Fbuild\u002Fplugins\u002Fverified\u002Fcve-triage","04.build\u002F01.plugins\u002F22.verified\u002F04.cve-triage","i-ph-bug",{"title":524,"path":525,"stem":526,"icon":527},"ai.oz0\u002Fhost-health","\u002Fbuild\u002Fplugins\u002Fverified\u002Fhost-health","04.build\u002F01.plugins\u002F22.verified\u002F05.host-health","i-ph-heartbeat",{"title":529,"path":530,"stem":531,"icon":532},"ai.oz0\u002Fpr-reviewer","\u002Fbuild\u002Fplugins\u002Fverified\u002Fpr-reviewer","04.build\u002F01.plugins\u002F22.verified\u002F06.pr-reviewer","i-ph-git-pull-request",{"title":534,"path":535,"stem":536,"icon":537},"Slack","\u002Fbuild\u002Fplugins\u002Fverified\u002Fslack","04.build\u002F01.plugins\u002F22.verified\u002F07.slack","i-ph-slack-logo",{"title":539,"path":540,"stem":541,"icon":542},"Discord","\u002Fbuild\u002Fplugins\u002Fverified\u002Fdiscord","04.build\u002F01.plugins\u002F22.verified\u002F08.discord","i-ph-discord-logo",{"title":544,"path":545,"stem":546,"icon":547},"Microsoft Teams","\u002Fbuild\u002Fplugins\u002Fverified\u002Fteams","04.build\u002F01.plugins\u002F22.verified\u002F09.teams","i-ph-microsoft-teams-logo",{"title":549,"path":550,"stem":551,"icon":552},"ai.oz0\u002Fai-spend","\u002Fbuild\u002Fplugins\u002Fverified\u002Fai-spend","04.build\u002F01.plugins\u002F22.verified\u002F10.ai-spend","i-ph-coins",{"title":554,"path":555,"stem":556,"icon":557},"ai.oz0\u002Fa2a-remote","\u002Fbuild\u002Fplugins\u002Fverified\u002Fa2a-remote","04.build\u002F01.plugins\u002F22.verified\u002F11.a2a-remote","i-ph-arrows-left-right",{"title":559,"path":560,"stem":561,"children":562,"icon":98},"Guardrails","\u002Fbuild\u002Fplugins\u002Fverified\u002Fguardrails","04.build\u002F01.plugins\u002F22.verified\u002F12.guardrails\u002F00.index",[563,564,568,572,576],{"title":559,"path":560,"stem":561,"icon":98},{"title":565,"path":566,"stem":567,"icon":98},"Configure guardrails","\u002Fbuild\u002Fplugins\u002Fverified\u002Fguardrails\u002Fsettings","04.build\u002F01.plugins\u002F22.verified\u002F12.guardrails\u002F01.settings",{"title":569,"path":570,"stem":571,"icon":98},"Check classified text","\u002Fbuild\u002Fplugins\u002Fverified\u002Fguardrails\u002Fclassified-text","04.build\u002F01.plugins\u002F22.verified\u002F12.guardrails\u002F02.classified-text",{"title":573,"path":574,"stem":575,"icon":98},"Check shell commands","\u002Fbuild\u002Fplugins\u002Fverified\u002Fguardrails\u002Fcommands","04.build\u002F01.plugins\u002F22.verified\u002F12.guardrails\u002F03.commands",{"title":577,"path":578,"stem":579,"icon":98},"Guardrail coverage and limits","\u002Fbuild\u002Fplugins\u002Fverified\u002Fguardrails\u002Fintent-and-limits","04.build\u002F01.plugins\u002F22.verified\u002F12.guardrails\u002F04.intent-and-limits",{"title":581,"path":582,"stem":583,"icon":584},"ai.oz0\u002Fmemory","\u002Fbuild\u002Fplugins\u002Fverified\u002Fmemory","04.build\u002F01.plugins\u002F22.verified\u002F13.memory","i-ph-brain",{"title":586,"path":587,"stem":588,"icon":416},"ai.oz0\u002Fsetup-assistant","\u002Fbuild\u002Fplugins\u002Fverified\u002Fsetup-assistant","04.build\u002F01.plugins\u002F22.verified\u002F14.setup-assistant",{"title":590,"path":591,"stem":592,"icon":593},"ai.oz0\u002Fpublic-access","\u002Fbuild\u002Fplugins\u002Fverified\u002Fpublic-access","04.build\u002F01.plugins\u002F22.verified\u002F15.public-access","i-ph-files",{"title":595,"path":596,"stem":597,"icon":598},"ai.oz0\u002Femail","\u002Fbuild\u002Fplugins\u002Fverified\u002Femail","04.build\u002F01.plugins\u002F22.verified\u002F16.email","i-ph-envelope-simple",{"title":600,"path":601,"stem":602,"icon":603},"Atlassian Cloud","\u002Fbuild\u002Fplugins\u002Fverified\u002Fatlassian","04.build\u002F01.plugins\u002F22.verified\u002F17.atlassian","i-ph-kanban",{"title":605,"path":606,"stem":607,"icon":603},"Atlassian Data Center","\u002Fbuild\u002Fplugins\u002Fverified\u002Fatlassian-dc","04.build\u002F01.plugins\u002F22.verified\u002F18.atlassian-dc",{"title":609,"path":610,"stem":611,"icon":421},"ServiceNow","\u002Fbuild\u002Fplugins\u002Fverified\u002Fservicenow","04.build\u002F01.plugins\u002F22.verified\u002F19.servicenow",{"title":613,"path":614,"stem":615,"icon":616},"GitLab","\u002Fbuild\u002Fplugins\u002Fverified\u002Fgitlab","04.build\u002F01.plugins\u002F22.verified\u002F20.gitlab","i-ph-git-merge",{"title":618,"path":619,"stem":620,"icon":621},"Support triage","\u002Fbuild\u002Fplugins\u002Fverified\u002Fsupport-triage","04.build\u002F01.plugins\u002F22.verified\u002F21.support-triage","i-ph-ticket",{"title":623,"path":624,"stem":625,"icon":361},"Essentials","\u002Fbuild\u002Fplugins\u002Fverified\u002Fessentials","04.build\u002F01.plugins\u002F22.verified\u002F22.essentials",{"title":627,"path":628,"stem":629,"children":630,"icon":532},"Plugin improver","\u002Fbuild\u002Fplugins\u002Fverified\u002Fplugin-improver","04.build\u002F01.plugins\u002F22.verified\u002F23.plugin-improver\u002F00.index",[631,632,636],{"title":627,"path":628,"stem":629,"icon":532},{"title":633,"path":634,"stem":635,"icon":532},"How an improvement runs","\u002Fbuild\u002Fplugins\u002Fverified\u002Fplugin-improver\u002Fjob-lifecycle","04.build\u002F01.plugins\u002F22.verified\u002F23.plugin-improver\u002F01.job-lifecycle",{"title":637,"path":638,"stem":639,"icon":532},"Improver limits and records","\u002Fbuild\u002Fplugins\u002Fverified\u002Fplugin-improver\u002Flimits-and-records","04.build\u002F01.plugins\u002F22.verified\u002F23.plugin-improver\u002F02.limits-and-records",{"title":641,"path":642,"stem":643,"children":644,"icon":646},"Plugin size limits","\u002Fbuild\u002Fplugins\u002Flimits","04.build\u002F01.plugins\u002F23.limits\u002F00.index",[645,647,651],{"title":641,"path":642,"stem":643,"icon":646},"i-ph-ruler",{"title":648,"path":649,"stem":650,"icon":646},"Documentation limits","\u002Fbuild\u002Fplugins\u002Flimits\u002Fdocumentation","04.build\u002F01.plugins\u002F23.limits\u002F01.documentation",{"title":652,"path":653,"stem":654,"icon":646},"Artifact and index limits","\u002Fbuild\u002Fplugins\u002Flimits\u002Fartifacts","04.build\u002F01.plugins\u002F23.limits\u002F02.artifacts",{"title":656,"path":657,"stem":658,"children":659,"icon":71},"Parts","\u002Fbuild\u002Fparts","04.build\u002F02.parts\u002F00.index",[660,662,667,672,690,721,726,730,741,756,761,776,791,814,818,823,828,839],{"title":661,"path":657,"stem":658},"Plugin parts",{"title":663,"path":664,"stem":665,"icon":666},"Agents","\u002Fbuild\u002Fparts\u002Fagents","04.build\u002F02.parts\u002F01.agents","i-ph-robot",{"title":668,"path":669,"stem":670,"icon":671},"What an agent combines","\u002Fbuild\u002Fparts\u002Fwhat-an-agent-combines","04.build\u002F02.parts\u002F02.what-an-agent-combines","i-ph-intersect-three",{"title":673,"path":674,"stem":675,"children":676,"icon":646},"Agent contracts","\u002Fbuild\u002Fparts\u002Fcontracts-and-limits","04.build\u002F02.parts\u002F03.contracts-and-limits\u002F00.index",[677,678,682,686],{"title":673,"path":674,"stem":675,"icon":646},{"title":679,"path":680,"stem":681,"icon":646},"Agent failure kinds","\u002Fbuild\u002Fparts\u002Fcontracts-and-limits\u002Ffailures","04.build\u002F02.parts\u002F03.contracts-and-limits\u002F01.failures",{"title":683,"path":684,"stem":685,"icon":646},"Agent limits","\u002Fbuild\u002Fparts\u002Fcontracts-and-limits\u002Flimits","04.build\u002F02.parts\u002F03.contracts-and-limits\u002F02.limits",{"title":687,"path":688,"stem":689,"icon":646},"Agent budgets","\u002Fbuild\u002Fparts\u002Fcontracts-and-limits\u002Fbudgets","04.build\u002F02.parts\u002F03.contracts-and-limits\u002F03.budgets",{"title":691,"path":692,"stem":693,"children":694,"icon":696},"Write a tool","\u002Fbuild\u002Fparts\u002Ftools","04.build\u002F02.parts\u002F04.tools\u002F00.index",[695,697,701,705,709,713,717],{"title":691,"path":692,"stem":693,"icon":696},"i-ph-wrench",{"title":698,"path":699,"stem":700,"icon":696},"Describe tool functions","\u002Fbuild\u002Fparts\u002Ftools\u002Fdefinitions","04.build\u002F02.parts\u002F04.tools\u002F01.definitions",{"title":702,"path":703,"stem":704,"icon":696},"Return results and files","\u002Fbuild\u002Fparts\u002Ftools\u002Fresults-and-files","04.build\u002F02.parts\u002F04.tools\u002F02.results-and-files",{"title":706,"path":707,"stem":708,"icon":696},"Handle tool call lifecycle","\u002Fbuild\u002Fparts\u002Ftools\u002Fcall-lifecycle","04.build\u002F02.parts\u002F04.tools\u002F03.call-lifecycle",{"title":710,"path":711,"stem":712,"icon":696},"Pin tool definitions","\u002Fbuild\u002Fparts\u002Ftools\u002Fsnapshots","04.build\u002F02.parts\u002F04.tools\u002F04.snapshots",{"title":714,"path":715,"stem":716,"icon":696},"Call a model from a tool","\u002Fbuild\u002Fparts\u002Ftools\u002Fmodel-calls","04.build\u002F02.parts\u002F04.tools\u002F05.model-calls",{"title":718,"path":719,"stem":720,"icon":696},"Tool labels and approvals","\u002Fbuild\u002Fparts\u002Ftools\u002Fpolicy","04.build\u002F02.parts\u002F04.tools\u002F06.policy",{"title":722,"path":723,"stem":724,"icon":725},"TypeScript tools","\u002Fbuild\u002Fparts\u002Ftypescript-tools","04.build\u002F02.parts\u002F05.typescript-tools","i-ph-file-code",{"title":727,"path":728,"stem":729,"icon":725},"Import an OpenAPI document","\u002Fbuild\u002Fparts\u002Fopenapi-import","04.build\u002F02.parts\u002F06.openapi-import",{"title":731,"path":732,"stem":733,"children":734,"icon":736},"Write and load skills","\u002Fbuild\u002Fparts\u002Fskills","04.build\u002F02.parts\u002F07.skills\u002F00.index",[735,737],{"title":731,"path":732,"stem":733,"icon":736},"i-ph-graduation-cap",{"title":738,"path":739,"stem":740,"icon":736},"Review skill use and proposals","\u002Fbuild\u002Fparts\u002Fskills\u002Fusage-and-proposals","04.build\u002F02.parts\u002F07.skills\u002F01.usage-and-proposals",{"title":742,"path":743,"stem":744,"children":745,"icon":747},"Write a flow","\u002Fbuild\u002Fparts\u002Fflows","04.build\u002F02.parts\u002F08.flows\u002F00.index",[746,748,752],{"title":742,"path":743,"stem":744,"icon":747},"i-ph-flow-arrow",{"title":749,"path":750,"stem":751,"icon":747},"Flow steps and expressions","\u002Fbuild\u002Fparts\u002Fflows\u002Fsteps-and-expressions","04.build\u002F02.parts\u002F08.flows\u002F01.steps-and-expressions",{"title":753,"path":754,"stem":755,"icon":747},"Expose and explain flows","\u002Fbuild\u002Fparts\u002Fflows\u002Fflow-tools","04.build\u002F02.parts\u002F08.flows\u002F02.flow-tools",{"title":757,"path":758,"stem":759,"icon":760},"Hooks","\u002Fbuild\u002Fparts\u002Fhooks","04.build\u002F02.parts\u002F09.hooks","i-ph-anchor",{"title":762,"path":763,"stem":764,"children":765,"icon":767},"Declare an event source","\u002Fbuild\u002Fparts\u002Fevent-sources","04.build\u002F02.parts\u002F10.event-sources\u002F00.index",[766,768,772],{"title":762,"path":763,"stem":764,"icon":767},"i-ph-broadcast",{"title":769,"path":770,"stem":771,"icon":767},"Bind and answer deliveries","\u002Fbuild\u002Fparts\u002Fevent-sources\u002Fdelivery-binding","04.build\u002F02.parts\u002F10.event-sources\u002F01.delivery-binding",{"title":773,"path":774,"stem":775,"icon":767},"Use platform events","\u002Fbuild\u002Fparts\u002Fevent-sources\u002Fplatform-events","04.build\u002F02.parts\u002F10.event-sources\u002F02.platform-events",{"title":777,"path":778,"stem":779,"children":780,"icon":782},"Declare a connection","\u002Fbuild\u002Fparts\u002Fconnections","04.build\u002F02.parts\u002F11.connections\u002F00.index",[781,783,787],{"title":777,"path":778,"stem":779,"icon":782},"i-ph-plugs-connected",{"title":784,"path":785,"stem":786,"icon":782},"Connection token lifecycle","\u002Fbuild\u002Fparts\u002Fconnections\u002Ftoken-lifecycle","04.build\u002F02.parts\u002F11.connections\u002F01.token-lifecycle",{"title":788,"path":789,"stem":790,"icon":782},"Connection setup and security","\u002Fbuild\u002Fparts\u002Fconnections\u002Fsetup-and-security","04.build\u002F02.parts\u002F11.connections\u002F02.setup-and-security",{"title":792,"path":793,"stem":794,"children":795,"icon":797},"Choose a harness","\u002Fbuild\u002Fparts\u002Fharnesses","04.build\u002F02.parts\u002F12.harnesses\u002F00.index",[796,798,802,806,810],{"title":792,"path":793,"stem":794,"icon":797},"i-ph-cpu",{"title":799,"path":800,"stem":801,"icon":797},"Harness tool controls","\u002Fbuild\u002Fparts\u002Fharnesses\u002Ftool-controls","04.build\u002F02.parts\u002F12.harnesses\u002F01.tool-controls",{"title":803,"path":804,"stem":805,"icon":797},"Recover a harness session","\u002Fbuild\u002Fparts\u002Fharnesses\u002Frecovery","04.build\u002F02.parts\u002F12.harnesses\u002F02.recovery",{"title":807,"path":808,"stem":809,"icon":797},"Write a harness","\u002Fbuild\u002Fparts\u002Fharnesses\u002Fcustom-harnesses","04.build\u002F02.parts\u002F12.harnesses\u002F03.custom-harnesses",{"title":811,"path":812,"stem":813,"icon":797},"Use an ACP agent","\u002Fbuild\u002Fparts\u002Fharnesses\u002Facp","04.build\u002F02.parts\u002F12.harnesses\u002F04.acp",{"title":815,"path":816,"stem":817,"icon":782},"Bring your own agent","\u002Fbuild\u002Fparts\u002Fbring-your-own-agent","04.build\u002F02.parts\u002F13.bring-your-own-agent",{"title":819,"path":820,"stem":821,"icon":822},"Records and start-up text","\u002Fbuild\u002Fparts\u002Frecords-and-startup","04.build\u002F02.parts\u002F14.records-and-startup","i-ph-database",{"title":824,"path":825,"stem":826,"icon":827},"Addresses","\u002Fbuild\u002Fparts\u002Faddresses","04.build\u002F02.parts\u002F15.addresses","i-ph-signpost",{"title":829,"path":830,"stem":831,"children":832,"icon":834},"Define a routine","\u002Fbuild\u002Fparts\u002Froutines","04.build\u002F02.parts\u002F16.routines\u002F00.index",[833,835],{"title":829,"path":830,"stem":831,"icon":834},"i-ph-clock-clockwise",{"title":836,"path":837,"stem":838,"icon":834},"Routine permissions and outputs","\u002Fbuild\u002Fparts\u002Froutines\u002Foutputs-and-permissions","04.build\u002F02.parts\u002F16.routines\u002F01.outputs-and-permissions",{"title":840,"path":841,"stem":842,"icon":843},"When to split an agent","\u002Fbuild\u002Fparts\u002Fwhen-to-split-an-agent","04.build\u002F02.parts\u002F17.when-to-split-an-agent","i-ph-arrows-split",{"title":845,"path":846,"stem":847,"children":848,"icon":71},"Apps on OZ","\u002Fbuild\u002Fapps","04.build\u002F03.apps\u002F00.index",[849,851,862,867,872,876,880,884,894,908,913,928,942],{"title":850,"path":846,"stem":847},"Applications and clients",{"title":852,"path":853,"stem":854,"children":855,"icon":857},"Use the runtime API","\u002Fbuild\u002Fapps\u002Fruntime-api","04.build\u002F03.apps\u002F01.runtime-api\u002F00.index",[856,858],{"title":852,"path":853,"stem":854,"icon":857},"i-ph-plug",{"title":859,"path":860,"stem":861,"icon":857},"Runtime API authentication","\u002Fbuild\u002Fapps\u002Fruntime-api\u002Fauthentication","04.build\u002F03.apps\u002F01.runtime-api\u002F01.authentication",{"title":863,"path":864,"stem":865,"icon":866},"Python SDK","\u002Fbuild\u002Fapps\u002Fsdk-python","04.build\u002F03.apps\u002F02.sdk-python","i-ph-file-py",{"title":868,"path":869,"stem":870,"icon":871},"TypeScript SDK","\u002Fbuild\u002Fapps\u002Fsdk-typescript","04.build\u002F03.apps\u002F03.sdk-typescript","i-ph-file-ts",{"title":873,"path":874,"stem":875,"icon":725},"Go SDK","\u002Fbuild\u002Fapps\u002Fsdk-go","04.build\u002F03.apps\u002F04.sdk-go",{"title":877,"path":878,"stem":879,"icon":782},"AG-UI for your apps","\u002Fbuild\u002Fapps\u002Fag-ui","04.build\u002F03.apps\u002F05.ag-ui",{"title":881,"path":882,"stem":883,"icon":249},"A chat in your own app","\u002Fbuild\u002Fapps\u002Fchat-app","04.build\u002F03.apps\u002F06.chat-app",{"title":885,"path":886,"stem":887,"children":888,"icon":767},"Follow live jobs","\u002Fbuild\u002Fapps\u002Flive-feeds","04.build\u002F03.apps\u002F07.live-feeds\u002F00.index",[889,890],{"title":885,"path":886,"stem":887,"icon":767},{"title":891,"path":892,"stem":893,"icon":767},"Feed access and browser streams","\u002Fbuild\u002Fapps\u002Flive-feeds\u002Fbrowser-and-access","04.build\u002F03.apps\u002F07.live-feeds\u002F01.browser-and-access",{"title":895,"path":896,"stem":897,"children":898,"icon":782},"Call agents over MCP","\u002Fbuild\u002Fapps\u002Fmcp-server","04.build\u002F03.apps\u002F08.mcp-server\u002F00.index",[899,900,904],{"title":895,"path":896,"stem":897,"icon":782},{"title":901,"path":902,"stem":903,"icon":782},"MCP client OAuth","\u002Fbuild\u002Fapps\u002Fmcp-server\u002Foauth","04.build\u002F03.apps\u002F08.mcp-server\u002F01.oauth",{"title":905,"path":906,"stem":907,"icon":782},"MCP security and limits","\u002Fbuild\u002Fapps\u002Fmcp-server\u002Fsecurity-and-limits","04.build\u002F03.apps\u002F08.mcp-server\u002F02.security-and-limits",{"title":909,"path":910,"stem":911,"icon":912},"A2A agents","\u002Fbuild\u002Fapps\u002Fa2a","04.build\u002F03.apps\u002F09.a2a","i-ph-share-network",{"title":914,"path":915,"stem":916,"children":917,"icon":919},"Run a remote agent","\u002Fbuild\u002Fapps\u002Fremote-agents","04.build\u002F03.apps\u002F10.remote-agents\u002F00.index",[918,920,924],{"title":914,"path":915,"stem":916,"icon":919},"i-ph-cloud-arrow-down",{"title":921,"path":922,"stem":923,"icon":919},"Remote sessions and limits","\u002Fbuild\u002Fapps\u002Fremote-agents\u002Fsessions-and-limits","04.build\u002F03.apps\u002F10.remote-agents\u002F01.sessions-and-limits",{"title":925,"path":926,"stem":927,"icon":919},"Connect an outside A2A agent","\u002Fbuild\u002Fapps\u002Fremote-agents\u002Fa2a","04.build\u002F03.apps\u002F10.remote-agents\u002F02.a2a",{"title":929,"path":930,"stem":931,"children":932,"icon":249},"Connect a chat channel","\u002Fbuild\u002Fapps\u002Fchat-channels","04.build\u002F03.apps\u002F11.chat-channels\u002F00.index",[933,934,938],{"title":929,"path":930,"stem":931,"icon":249},{"title":935,"path":936,"stem":937,"icon":249},"Chat channel conversations","\u002Fbuild\u002Fapps\u002Fchat-channels\u002Fconversations","04.build\u002F03.apps\u002F11.chat-channels\u002F01.conversations",{"title":939,"path":940,"stem":941,"icon":249},"Build a chat channel","\u002Fbuild\u002Fapps\u002Fchat-channels\u002Fbuild","04.build\u002F03.apps\u002F11.chat-channels\u002F02.build",{"title":943,"path":944,"stem":945,"icon":946},"Interop matrix","\u002Fbuild\u002Fapps\u002Finterop","04.build\u002F03.apps\u002F12.interop","i-ph-check-square-offset",{"title":948,"path":949,"stem":950,"children":951,"icon":71},"Improve","\u002Fimprove","05.improve\u002F00.index",[952,953,958,963,968,994,1021,1026,1031,1036],{"title":948,"path":949,"stem":950},{"title":954,"path":955,"stem":956,"icon":957},"Search, compare and fix","\u002Fimprove\u002Fsearch-and-compare","05.improve\u002F01.search-and-compare","i-ph-magnifying-glass",{"title":959,"path":960,"stem":961,"icon":962},"Errors and insights","\u002Fimprove\u002Ferrors-and-insights","05.improve\u002F02.errors-and-insights","i-ph-chart-line",{"title":964,"path":965,"stem":966,"icon":967},"Measured savings","\u002Fimprove\u002Fmeasured-savings","05.improve\u002F03.measured-savings","i-ph-scales",{"title":969,"path":970,"stem":971,"children":972,"icon":463},"Evals and quality gates","\u002Fimprove\u002Fevals","05.improve\u002F04.evals\u002F00.index",[973,974,978,982,986,990],{"title":969,"path":970,"stem":971,"icon":463},{"title":975,"path":976,"stem":977},"Case expectations","\u002Fimprove\u002Fevals\u002Fcases","05.improve\u002F04.evals\u002F01.cases",{"title":979,"path":980,"stem":981},"Record and replay answers","\u002Fimprove\u002Fevals\u002Frecordings","05.improve\u002F04.evals\u002F02.recordings",{"title":983,"path":984,"stem":985},"Check policy paths","\u002Fimprove\u002Fevals\u002Fcoverage","05.improve\u002F04.evals\u002F03.coverage",{"title":987,"path":988,"stem":989},"Gate a plugin update","\u002Fimprove\u002Fevals\u002Fquality-gates","05.improve\u002F04.evals\u002F04.quality-gates",{"title":991,"path":992,"stem":993},"Track quality and regressions","\u002Fimprove\u002Fevals\u002Fregressions","05.improve\u002F04.evals\u002F05.regressions",{"title":995,"path":996,"stem":997,"children":998,"icon":1000},"Outcome checks and patterns","\u002Fimprove\u002Foutcome-checks","05.improve\u002F05.outcome-checks\u002F00.index",[999,1001,1005,1009,1013,1017],{"title":995,"path":996,"stem":997,"icon":1000},"i-ph-gavel",{"title":1002,"path":1003,"stem":1004},"Choose a judge and rubric","\u002Fimprove\u002Foutcome-checks\u002Fjudges","05.improve\u002F05.outcome-checks\u002F01.judges",{"title":1006,"path":1007,"stem":1008},"Measure a judge over time","\u002Fimprove\u002Foutcome-checks\u002Fsampling","05.improve\u002F05.outcome-checks\u002F02.sampling",{"title":1010,"path":1011,"stem":1012},"Use a reviewer agent","\u002Fimprove\u002Foutcome-checks\u002Freviewer","05.improve\u002F05.outcome-checks\u002F03.reviewer",{"title":1014,"path":1015,"stem":1016},"Choose among candidate answers","\u002Fimprove\u002Foutcome-checks\u002Fselection","05.improve\u002F05.outcome-checks\u002F04.selection",{"title":1018,"path":1019,"stem":1020},"Test and roll out judged agents","\u002Fimprove\u002Foutcome-checks\u002Frollouts","05.improve\u002F05.outcome-checks\u002F05.rollouts",{"title":1022,"path":1023,"stem":1024,"icon":1025},"Measured results","\u002Fimprove\u002Fmeasured-results","05.improve\u002F06.measured-results","i-ph-chart-bar",{"title":1027,"path":1028,"stem":1029,"icon":1030},"Comparisons of a changed agent","\u002Fimprove\u002Fcomparisons-of-a-changed-agent","05.improve\u002F07.comparisons-of-a-changed-agent","i-ph-git-diff",{"title":1032,"path":1033,"stem":1034,"icon":1035},"Where a fix belongs","\u002Fimprove\u002Fwhere-a-fix-belongs","05.improve\u002F08.where-a-fix-belongs","i-ph-ladder",{"title":1037,"path":1038,"stem":1039,"icon":957},"Evidence for agents","\u002Fimprove\u002Fevidence-for-agents","05.improve\u002F09.evidence-for-agents",{"title":1041,"path":1042,"stem":1043,"children":1044,"icon":71},"Govern","\u002Fgovern","06.govern\u002F00.index",[1045,1047,1085,1089,1111,1115,1120,1151,1170,1175,1180,1184,1207],{"title":1046,"path":1042,"stem":1043},"Govern agents",{"title":1048,"path":1049,"stem":1050,"children":1051,"icon":98},"Tool policy","\u002Fgovern\u002Ftool-policy","06.govern\u002F01.tool-policy\u002F00.index",[1052,1053,1057,1061,1065,1069,1073,1077,1081],{"title":1048,"path":1049,"stem":1050,"icon":98},{"title":1054,"path":1055,"stem":1056},"Export and apply a tool policy","\u002Fgovern\u002Ftool-policy\u002Ffiles","06.govern\u002F01.tool-policy\u002F02.files",{"title":1058,"path":1059,"stem":1060},"Rules for plugin and remote functions","\u002Fgovern\u002Ftool-policy\u002Fplugin-functions","06.govern\u002F01.tool-policy\u002F03.plugin-functions",{"title":1062,"path":1063,"stem":1064},"Function conditions and action classes","\u002Fgovern\u002Ftool-policy\u002Fconditions","06.govern\u002F01.tool-policy\u002F04.conditions",{"title":1066,"path":1067,"stem":1068},"Rules for taint, origins and sequences","\u002Fgovern\u002Ftool-policy\u002Forigins-and-sequences","06.govern\u002F01.tool-policy\u002F05.origins-and-sequences",{"title":1070,"path":1071,"stem":1072},"How the runtime enforces tool policy","\u002Fgovern\u002Ftool-policy\u002Fruntime","06.govern\u002F01.tool-policy\u002F06.runtime",{"title":1074,"path":1075,"stem":1076},"Preview, review and lint tool policy changes","\u002Fgovern\u002Ftool-policy\u002Freview-changes","06.govern\u002F01.tool-policy\u002F07.review-changes",{"title":1078,"path":1079,"stem":1080},"Assign duties to tool calls","\u002Fgovern\u002Ftool-policy\u002Fduties","06.govern\u002F01.tool-policy\u002F08.duties",{"title":1082,"path":1083,"stem":1084},"Command rules in a tool policy","\u002Fgovern\u002Ftool-policy\u002Fcommand-rules","06.govern\u002F01.tool-policy\u002F09.command-rules",{"title":1086,"path":1087,"stem":1088,"icon":230},"Governance replay","\u002Fgovern\u002Fgovernance-replay","06.govern\u002F02.governance-replay",{"title":1090,"path":1091,"stem":1092,"children":1093,"icon":532},"Reviewed changes","\u002Fgovern\u002Freviewed-changes","06.govern\u002F03.reviewed-changes\u002F00.index",[1094,1095,1099,1103,1107],{"title":1090,"path":1091,"stem":1092,"icon":532},{"title":1096,"path":1097,"stem":1098},"Review assistant and job proposals","\u002Fgovern\u002Freviewed-changes\u002Fproposals","06.govern\u002F03.reviewed-changes\u002F02.proposals",{"title":1100,"path":1101,"stem":1102},"Review plugin configurations","\u002Fgovern\u002Freviewed-changes\u002Fplugin-configurations","06.govern\u002F03.reviewed-changes\u002F03.plugin-configurations",{"title":1104,"path":1105,"stem":1106},"Review and roll back changesets","\u002Fgovern\u002Freviewed-changes\u002Fchangesets","06.govern\u002F03.reviewed-changes\u002F04.changesets",{"title":1108,"path":1109,"stem":1110},"Review changes to protected paths","\u002Fgovern\u002Freviewed-changes\u002Fprotected-paths","06.govern\u002F03.reviewed-changes\u002F05.protected-paths",{"title":1112,"path":1113,"stem":1114,"icon":666},"AI labels","\u002Fgovern\u002Fai-labels","06.govern\u002F04.ai-labels",{"title":1116,"path":1117,"stem":1118,"icon":1119},"Kill switches","\u002Fgovern\u002Fkill-switches","06.govern\u002F05.kill-switches","i-ph-power",{"title":1121,"path":1122,"stem":1123,"children":1124,"icon":1126},"Personal data","\u002Fgovern\u002Fpersonal-data","06.govern\u002F06.personal-data\u002F00.index",[1125,1127,1131,1135,1139,1143,1147],{"title":1121,"path":1122,"stem":1123,"icon":1126},"i-ph-user-minus",{"title":1128,"path":1129,"stem":1130},"Associate people and purposes with jobs","\u002Fgovern\u002Fpersonal-data\u002Fassociate-people","06.govern\u002F06.personal-data\u002F01.associate-people",{"title":1132,"path":1133,"stem":1134},"Find and export personal data","\u002Fgovern\u002Fpersonal-data\u002Fexport","06.govern\u002F06.personal-data\u002F02.export",{"title":1136,"path":1137,"stem":1138},"Restrict processing and record contests","\u002Fgovern\u002Fpersonal-data\u002Frestrictions-and-contests","06.govern\u002F06.personal-data\u002F03.restrictions-and-contests",{"title":1140,"path":1141,"stem":1142},"Erase personal data","\u002Fgovern\u002Fpersonal-data\u002Ferase","06.govern\u002F06.personal-data\u002F04.erase",{"title":1144,"path":1145,"stem":1146},"Retain records and restore backups","\u002Fgovern\u002Fpersonal-data\u002Fretention","06.govern\u002F06.personal-data\u002F05.retention",{"title":1148,"path":1149,"stem":1150},"Personal data held by plugins","\u002Fgovern\u002Fpersonal-data\u002Fplugin-records","06.govern\u002F06.personal-data\u002F06.plugin-records",{"title":1152,"path":1153,"stem":1154,"children":1155,"icon":1157},"Taint and labels","\u002Fgovern\u002Ftaint-and-labels","06.govern\u002F07.taint-and-labels\u002F00.index",[1156,1158,1162,1166],{"title":1152,"path":1153,"stem":1154,"icon":1157},"i-ph-drop-half-bottom",{"title":1159,"path":1160,"stem":1161},"Set rules on taint and labels","\u002Fgovern\u002Ftaint-and-labels\u002Frules","06.govern\u002F07.taint-and-labels\u002F02.rules",{"title":1163,"path":1164,"stem":1165},"Set clearance, egress and content walls","\u002Fgovern\u002Ftaint-and-labels\u002Flabel-policies","06.govern\u002F07.taint-and-labels\u002F03.label-policies",{"title":1167,"path":1168,"stem":1169},"Read outside text in a quarantine child","\u002Fgovern\u002Ftaint-and-labels\u002Fquarantine","06.govern\u002F07.taint-and-labels\u002F04.quarantine",{"title":1171,"path":1172,"stem":1173,"icon":1174},"Works-council mode","\u002Fgovern\u002Fworks-council-mode","06.govern\u002F08.works-council-mode","i-ph-users-three",{"title":1176,"path":1177,"stem":1178,"icon":1179},"Incidents","\u002Fgovern\u002Fincidents","06.govern\u002F09.incidents","i-ph-siren",{"title":1181,"path":1182,"stem":1183,"icon":213},"Inventory","\u002Fgovern\u002Finventory","06.govern\u002F10.inventory",{"title":1185,"path":1186,"stem":1187,"children":1188,"icon":1190},"Audit trail","\u002Fgovern\u002Faudit-trail","06.govern\u002F11.audit-trail\u002F00.index",[1189,1191,1195,1199,1203],{"title":1185,"path":1186,"stem":1187,"icon":1190},"i-ph-scroll",{"title":1192,"path":1193,"stem":1194},"Audit records and run identity","\u002Fgovern\u002Faudit-trail\u002Frecords","06.govern\u002F11.audit-trail\u002F02.records",{"title":1196,"path":1197,"stem":1198},"Verify the audit chain","\u002Fgovern\u002Faudit-trail\u002Fverification","06.govern\u002F11.audit-trail\u002F03.verification",{"title":1200,"path":1201,"stem":1202},"Export and verify evidence bundles","\u002Fgovern\u002Faudit-trail\u002Fevidence-bundles","06.govern\u002F11.audit-trail\u002F04.evidence-bundles",{"title":1204,"path":1205,"stem":1206},"Audit retention, erasure and legal holds","\u002Fgovern\u002Faudit-trail\u002Fretention","06.govern\u002F11.audit-trail\u002F05.retention",{"title":1208,"path":1209,"stem":1210,"children":1211,"icon":1213},"Command rules","\u002Fgovern\u002Fcommand-rules","06.govern\u002F12.command-rules\u002F00.index",[1212,1214,1218,1222,1226],{"title":1208,"path":1209,"stem":1210,"icon":1213},"i-ph-terminal",{"title":1215,"path":1216,"stem":1217},"Command rule patterns","\u002Fgovern\u002Fcommand-rules\u002Fpatterns","06.govern\u002F12.command-rules\u002F02.patterns",{"title":1219,"path":1220,"stem":1221},"What the command reader understands","\u002Fgovern\u002Fcommand-rules\u002Fcommand-reader","06.govern\u002F12.command-rules\u002F03.command-reader",{"title":1223,"path":1224,"stem":1225},"Create a command rule from an approval","\u002Fgovern\u002Fcommand-rules\u002Fallow-from-card","06.govern\u002F12.command-rules\u002F04.allow-from-card",{"title":1227,"path":1228,"stem":1229},"Command rule evaluation and limits","\u002Fgovern\u002Fcommand-rules\u002Fevaluation-and-limits","06.govern\u002F12.command-rules\u002F05.evaluation-and-limits",{"title":1231,"path":1232,"stem":1233,"children":1234,"icon":71},"Fleet","\u002Ffleet","07.fleet\u002F00.index",[1235,1237,1242,1247,1251,1256,1260,1265,1270,1274,1278,1297,1302,1307,1325,1329,1333,1352,1357,1380,1385,1390,1395,1399,1458,1462,1467,1481,1486,1490,1494],{"title":1236,"path":1232,"stem":1233},"Operate a fleet",{"title":1238,"path":1239,"stem":1240,"icon":1241},"Dev mode","\u002Ffleet\u002Fdev-mode","07.fleet\u002F01.dev-mode","i-ph-laptop",{"title":1243,"path":1244,"stem":1245,"icon":1246},"Run a cluster","\u002Ffleet\u002Fcluster","07.fleet\u002F02.cluster","i-ph-hard-drives",{"title":1248,"path":1249,"stem":1250,"icon":782},"Join nodes","\u002Ffleet\u002Fjoin-nodes","07.fleet\u002F03.join-nodes",{"title":1252,"path":1253,"stem":1254,"icon":1255},"Manage nodes","\u002Ffleet\u002Fmanage-nodes","07.fleet\u002F04.manage-nodes","i-ph-list-bullets",{"title":1257,"path":1258,"stem":1259,"icon":527},"Node health","\u002Ffleet\u002Fnodes","07.fleet\u002F05.nodes",{"title":1261,"path":1262,"stem":1263,"icon":1264},"Nodes as services","\u002Ffleet\u002Fservices","07.fleet\u002F06.services","i-ph-gear-six",{"title":1266,"path":1267,"stem":1268,"icon":1269},"Doctor","\u002Ffleet\u002Fdoctor","07.fleet\u002F07.doctor","i-ph-stethoscope",{"title":1271,"path":1272,"stem":1273,"icon":421},"Troubleshooting","\u002Ffleet\u002Ftroubleshooting","07.fleet\u002F08.troubleshooting",{"title":1275,"path":1276,"stem":1277,"icon":962},"Tracing and metrics","\u002Ffleet\u002Fobservability","07.fleet\u002F09.observability",{"title":1279,"path":1280,"stem":1281,"children":1282,"icon":1284},"Choose sandbox tier 2","\u002Ffleet\u002Fsandbox-tier-2","07.fleet\u002F10.sandbox-tier-2\u002F00.index",[1283,1285,1289,1293],{"title":1279,"path":1280,"stem":1281,"icon":1284},"i-ph-shield-chevron",{"title":1286,"path":1287,"stem":1288,"icon":1284},"Set up gVisor","\u002Ffleet\u002Fsandbox-tier-2\u002Fgvisor","07.fleet\u002F10.sandbox-tier-2\u002F01.gvisor",{"title":1290,"path":1291,"stem":1292,"icon":1284},"Set up microVM isolation","\u002Ffleet\u002Fsandbox-tier-2\u002Fmicrovms","07.fleet\u002F10.sandbox-tier-2\u002F02.microvms",{"title":1294,"path":1295,"stem":1296,"icon":1284},"Configure remote sandboxes","\u002Ffleet\u002Fsandbox-tier-2\u002Fremote","07.fleet\u002F10.sandbox-tier-2\u002F03.remote",{"title":1298,"path":1299,"stem":1300,"icon":1301},"Sandbox on macOS","\u002Ffleet\u002Fsandbox-on-macos","07.fleet\u002F11.sandbox-on-macos","i-ph-apple-logo",{"title":1303,"path":1304,"stem":1305,"icon":1306},"Sandbox on Windows","\u002Ffleet\u002Fsandbox-on-windows","07.fleet\u002F12.sandbox-on-windows","i-ph-windows-logo",{"title":1308,"path":1309,"stem":1310,"children":1311,"icon":797},"Configure local models","\u002Ffleet\u002Flocal-models","07.fleet\u002F13.local-models\u002F00.index",[1312,1313,1317,1321],{"title":1308,"path":1309,"stem":1310,"icon":797},{"title":1314,"path":1315,"stem":1316,"icon":797},"Share a local model with the fleet","\u002Ffleet\u002Flocal-models\u002Ffleet","07.fleet\u002F13.local-models\u002F01.fleet",{"title":1318,"path":1319,"stem":1320,"icon":797},"Review local-model safety checks","\u002Ffleet\u002Flocal-models\u002Ftrust","07.fleet\u002F13.local-models\u002F02.trust",{"title":1322,"path":1323,"stem":1324,"icon":797},"Size and price local models","\u002Ffleet\u002Flocal-models\u002Fsizing-and-cost","07.fleet\u002F13.local-models\u002F03.sizing-and-cost",{"title":1326,"path":1327,"stem":1328,"icon":1241},"Agents on a Mac with MLX","\u002Ffleet\u002Flocal-models-on-a-mac","07.fleet\u002F14.local-models-on-a-mac",{"title":1330,"path":1331,"stem":1332,"icon":127},"Queues","\u002Ffleet\u002Fqueues","07.fleet\u002F15.queues",{"title":1334,"path":1335,"stem":1336,"children":1337,"icon":1339},"Choose a Temporal backend","\u002Ffleet\u002Ftemporal-backends","07.fleet\u002F16.temporal-backends\u002F00.index",[1338,1340,1344,1348],{"title":1334,"path":1335,"stem":1336,"icon":1339},"i-ph-cloud",{"title":1341,"path":1342,"stem":1343},"Set retention and move tenants","\u002Ffleet\u002Ftemporal-backends\u002Fretention-and-migration","07.fleet\u002F16.temporal-backends\u002F01.retention-and-migration",{"title":1345,"path":1346,"stem":1347},"Encrypt Temporal payloads","\u002Ffleet\u002Ftemporal-backends\u002Fencryption","07.fleet\u002F16.temporal-backends\u002F02.encryption",{"title":1349,"path":1350,"stem":1351},"Read payloads in Temporal UI","\u002Ffleet\u002Ftemporal-backends\u002Fcodec","07.fleet\u002F16.temporal-backends\u002F03.codec",{"title":1353,"path":1354,"stem":1355,"icon":1356},"Regions","\u002Ffleet\u002Fregions","07.fleet\u002F17.regions","i-ph-globe-hemisphere-east",{"title":1358,"path":1359,"stem":1360,"children":1361,"icon":1363},"Run the roles separately","\u002Ffleet\u002Fseparate-roles","07.fleet\u002F18.separate-roles\u002F00.index",[1362,1364,1368,1372,1376],{"title":1358,"path":1359,"stem":1360,"icon":1363},"i-ph-squares-four",{"title":1365,"path":1366,"stem":1367},"Prepare database rights","\u002Ffleet\u002Fseparate-roles\u002Fdatabase-rights","07.fleet\u002F18.separate-roles\u002F01.database-rights",{"title":1369,"path":1370,"stem":1371},"Keep plaintext secrets on edges","\u002Ffleet\u002Fseparate-roles\u002Fsecrets","07.fleet\u002F18.separate-roles\u002F02.secrets",{"title":1373,"path":1374,"stem":1375},"Operate through role outages","\u002Ffleet\u002Fseparate-roles\u002Foutages","07.fleet\u002F18.separate-roles\u002F03.outages",{"title":1377,"path":1378,"stem":1379},"Use Temporal UI with separate roles","\u002Ffleet\u002Fseparate-roles\u002Ftemporal-ui","07.fleet\u002F18.separate-roles\u002F04.temporal-ui",{"title":1381,"path":1382,"stem":1383,"icon":1384},"High availability","\u002Ffleet\u002Fhigh-availability","07.fleet\u002F19.high-availability","i-ph-copy",{"title":1386,"path":1387,"stem":1388,"icon":1389},"Management over a WAN","\u002Ffleet\u002Fmanagement-over-a-wan","07.fleet\u002F20.management-over-a-wan","i-ph-globe-hemisphere-west",{"title":1391,"path":1392,"stem":1393,"icon":1394},"Cloud federation","\u002Ffleet\u002Fcloud-federation","07.fleet\u002F21.cloud-federation","i-ph-cloud-check",{"title":1396,"path":1397,"stem":1398,"icon":451},"Payload storage","\u002Ffleet\u002Fpayload-storage","07.fleet\u002F22.payload-storage",{"title":1400,"path":1401,"stem":1402,"children":1403,"icon":1405},"Upgrade a cluster","\u002Ffleet\u002Fupgrades","07.fleet\u002F23.upgrades\u002F00.index",[1404,1406,1410,1414,1418,1422,1426,1430,1434,1438,1442,1446,1450,1454],{"title":1400,"path":1401,"stem":1402,"icon":1405},"i-ph-arrows-clockwise",{"title":1407,"path":1408,"stem":1409},"Prepare for sandbox changes","\u002Ffleet\u002Fupgrades\u002Fsandbox-changes","07.fleet\u002F23.upgrades\u002F01.sandbox-changes",{"title":1411,"path":1412,"stem":1413},"Review policy changes","\u002Ffleet\u002Fupgrades\u002Fpolicy-changes","07.fleet\u002F23.upgrades\u002F02.policy-changes",{"title":1415,"path":1416,"stem":1417},"Review data and privacy migrations","\u002Ffleet\u002Fupgrades\u002Fdata-migrations","07.fleet\u002F23.upgrades\u002F03.data-migrations",{"title":1419,"path":1420,"stem":1421},"Prepare storage and identity migrations","\u002Ffleet\u002Fupgrades\u002Fstorage-and-identity","07.fleet\u002F23.upgrades\u002F04.storage-and-identity",{"title":1423,"path":1424,"stem":1425},"Prepare plugins for an upgrade","\u002Ffleet\u002Fupgrades\u002Fplugin-changes","07.fleet\u002F23.upgrades\u002F05.plugin-changes",{"title":1427,"path":1428,"stem":1429},"Keep calls compatible during upgrades","\u002Ffleet\u002Fupgrades\u002Fcall-compatibility","07.fleet\u002F23.upgrades\u002F06.call-compatibility",{"title":1431,"path":1432,"stem":1433},"Review model and budget migrations","\u002Ffleet\u002Fupgrades\u002Fmodel-and-budget-changes","07.fleet\u002F23.upgrades\u002F07.model-and-budget-changes",{"title":1435,"path":1436,"stem":1437},"Migrate to shared worker pools","\u002Ffleet\u002Fupgrades\u002Fshared-pools","07.fleet\u002F23.upgrades\u002F08.shared-pools",{"title":1439,"path":1440,"stem":1441},"Upgrade node binaries and runtimes","\u002Ffleet\u002Fupgrades\u002Fnodes","07.fleet\u002F23.upgrades\u002F09.nodes",{"title":1443,"path":1444,"stem":1445},"Understand runtime shutdown","\u002Ffleet\u002Fupgrades\u002Fruntime-shutdown","07.fleet\u002F23.upgrades\u002F10.runtime-shutdown",{"title":1447,"path":1448,"stem":1449},"Review runtime behaviour changes","\u002Ffleet\u002Fupgrades\u002Fruntime-changes","07.fleet\u002F23.upgrades\u002F11.runtime-changes",{"title":1451,"path":1452,"stem":1453},"Verify releases and switch channels","\u002Ffleet\u002Fupgrades\u002Frelease-verification","07.fleet\u002F23.upgrades\u002F12.release-verification",{"title":1455,"path":1456,"stem":1457},"Roll a runtime out in steps","\u002Ffleet\u002Fupgrades\u002Fruntime-rollouts","07.fleet\u002F23.upgrades\u002F13.runtime-rollouts",{"title":1459,"path":1460,"stem":1461,"icon":463},"Releases","\u002Ffleet\u002Freleases","07.fleet\u002F24.releases",{"title":1463,"path":1464,"stem":1465,"icon":1466},"Docker","\u002Ffleet\u002Fdocker","07.fleet\u002F25.docker","i-ph-shipping-container",{"title":1468,"path":1469,"stem":1470,"children":1471,"icon":480},"Deploy with Kubernetes","\u002Ffleet\u002Fkubernetes","07.fleet\u002F26.kubernetes\u002F00.index",[1472,1473,1477],{"title":1468,"path":1469,"stem":1470,"icon":480},{"title":1474,"path":1475,"stem":1476,"icon":480},"Helm objects and values","\u002Ffleet\u002Fkubernetes\u002Fvalues","07.fleet\u002F26.kubernetes\u002F01.values",{"title":1478,"path":1479,"stem":1480,"icon":480},"Maintain a Kubernetes deployment","\u002Ffleet\u002Fkubernetes\u002Fmaintenance","07.fleet\u002F26.kubernetes\u002F02.maintenance",{"title":1482,"path":1483,"stem":1484,"icon":1485},"Offline install","\u002Ffleet\u002Foffline-install","07.fleet\u002F27.offline-install","i-ph-airplane-tilt",{"title":1487,"path":1488,"stem":1489,"icon":98},"FIPS builds","\u002Ffleet\u002Ffips","07.fleet\u002F28.fips",{"title":1491,"path":1492,"stem":1493,"icon":249},"Run Orchestrator Zero from an MCP client","\u002Ffleet\u002Fmcp-client","07.fleet\u002F29.mcp-client",{"title":1495,"path":1496,"stem":1497,"children":1498,"icon":451},"Back up a cluster","\u002Ffleet\u002Fbackups","07.fleet\u002F30.backups\u002F00.index",[1499,1500],{"title":1495,"path":1496,"stem":1497,"icon":451},{"title":1501,"path":1502,"stem":1503},"Restore a cluster","\u002Ffleet\u002Fbackups\u002Frestore","07.fleet\u002F30.backups\u002F01.restore",{"title":1505,"path":1506,"stem":1507,"children":1508,"icon":71},"Spend","\u002Fspend","08.spend\u002F00.index",[1509,1511,1533,1547,1585],{"title":1510,"path":1506,"stem":1507},"Manage model access and spending",{"title":1512,"path":1513,"stem":1514,"children":1515,"icon":552},"Read cost and usage","\u002Fspend\u002Fcost-and-usage","08.spend\u002F01.cost-and-usage\u002F00.index",[1516,1517,1521,1525,1529],{"title":1512,"path":1513,"stem":1514,"icon":552},{"title":1518,"path":1519,"stem":1520},"Understand recorded charges","\u002Fspend\u002Fcost-and-usage\u002Faccounting","08.spend\u002F01.cost-and-usage\u002F01.accounting",{"title":1522,"path":1523,"stem":1524},"Read model call timings","\u002Fspend\u002Fcost-and-usage\u002Ftimings","08.spend\u002F01.cost-and-usage\u002F02.timings",{"title":1526,"path":1527,"stem":1528},"Export usage","\u002Fspend\u002Fcost-and-usage\u002Fexports","08.spend\u002F01.cost-and-usage\u002F03.exports",{"title":1530,"path":1531,"stem":1532},"Explain prices and cache costs","\u002Fspend\u002Fcost-and-usage\u002Fprices-and-cache","08.spend\u002F01.cost-and-usage\u002F04.prices-and-cache",{"title":1534,"path":1535,"stem":1536,"children":1537,"icon":134},"Set budgets and quotas","\u002Fspend\u002Fbudgets-and-quotas","08.spend\u002F02.budgets-and-quotas\u002F00.index",[1538,1539,1543],{"title":1534,"path":1535,"stem":1536,"icon":134},{"title":1540,"path":1541,"stem":1542,"icon":134},"Understand quota charging and refusals","\u002Fspend\u002Fbudgets-and-quotas\u002Fcharging","08.spend\u002F02.budgets-and-quotas\u002F01.charging",{"title":1544,"path":1545,"stem":1546,"icon":134},"Request and review budget","\u002Fspend\u002Fbudgets-and-quotas\u002Frequests","08.spend\u002F02.budgets-and-quotas\u002F02.requests",{"title":1548,"path":1549,"stem":1550,"children":1551,"icon":416},"Connect a model provider","\u002Fspend\u002Fmodels-and-keys","08.spend\u002F03.models-and-keys\u002F00.index",[1552,1553,1557,1561,1565,1569,1573,1577,1581],{"title":1548,"path":1549,"stem":1550,"icon":416},{"title":1554,"path":1555,"stem":1556},"Choose model aliases","\u002Fspend\u002Fmodels-and-keys\u002Faliases","08.spend\u002F03.models-and-keys\u002F01.aliases",{"title":1558,"path":1559,"stem":1560},"Map a plugin's models","\u002Fspend\u002Fmodels-and-keys\u002Fmapping","08.spend\u002F03.models-and-keys\u002F02.mapping",{"title":1562,"path":1563,"stem":1564},"Set reasoning effort and cascades","\u002Fspend\u002Fmodels-and-keys\u002Feffort-and-cascades","08.spend\u002F03.models-and-keys\u002F03.effort-and-cascades",{"title":1566,"path":1567,"stem":1568},"Authenticate model calls","\u002Fspend\u002Fmodels-and-keys\u002Fauthentication","08.spend\u002F03.models-and-keys\u002F04.authentication",{"title":1570,"path":1571,"stem":1572},"Control what model calls can reach","\u002Fspend\u002Fmodels-and-keys\u002Fdata-rules","08.spend\u002F03.models-and-keys\u002F05.data-rules",{"title":1574,"path":1575,"stem":1576},"Pool model deployments","\u002Fspend\u002Fmodels-and-keys\u002Fdeployment-pools","08.spend\u002F03.models-and-keys\u002F06.deployment-pools",{"title":1578,"path":1579,"stem":1580},"Configure caches and server tools","\u002Fspend\u002Fmodels-and-keys\u002Fcache-and-tools","08.spend\u002F03.models-and-keys\u002F07.cache-and-tools",{"title":1582,"path":1583,"stem":1584},"Check model changes and retirement","\u002Fspend\u002Fmodels-and-keys\u002Fcanaries-and-retirement","08.spend\u002F03.models-and-keys\u002F08.canaries-and-retirement",{"title":1586,"path":1587,"stem":1588,"icon":1589},"Translating providers","\u002Fspend\u002Ftranslating-providers","08.spend\u002F04.translating-providers","i-ph-translate",{"title":1591,"path":1592,"stem":1593,"children":1594,"icon":71},"Admin","\u002Fadmin","09.admin\u002F00.index",[1595,1597,1623,1650,1654,1658,1680,1685,1696],{"title":1596,"path":1592,"stem":1593},"Administer access and credentials",{"title":1598,"path":1599,"stem":1600,"children":1601,"icon":98},"Configure sign-in","\u002Fadmin\u002Fsign-in","09.admin\u002F01.sign-in\u002F00.index",[1602,1603,1607,1611,1615,1619],{"title":1598,"path":1599,"stem":1600,"icon":98},{"title":1604,"path":1605,"stem":1606},"Configure an identity provider","\u002Fadmin\u002Fsign-in\u002Fidentity-providers","09.admin\u002F01.sign-in\u002F01.identity-providers",{"title":1608,"path":1609,"stem":1610},"Provision accounts from a directory","\u002Fadmin\u002Fsign-in\u002Fprovisioning","09.admin\u002F01.sign-in\u002F02.provisioning",{"title":1612,"path":1613,"stem":1614},"Manage passwords and second factors","\u002Fadmin\u002Fsign-in\u002Fpasswords","09.admin\u002F01.sign-in\u002F03.passwords",{"title":1616,"path":1617,"stem":1618},"Sign in from the CLI and MCP clients","\u002Fadmin\u002Fsign-in\u002Fclients","09.admin\u002F01.sign-in\u002F04.clients",{"title":1620,"path":1621,"stem":1622},"End sessions and inspect sign-in events","\u002Fadmin\u002Fsign-in\u002Fsessions","09.admin\u002F01.sign-in\u002F05.sessions",{"title":1624,"path":1625,"stem":1626,"children":1627,"icon":1629},"Manage tenant secrets","\u002Fadmin\u002Fsecrets","09.admin\u002F02.secrets\u002F00.index",[1628,1630,1634,1638,1642,1646],{"title":1624,"path":1625,"stem":1626,"icon":1629},"i-ph-key",{"title":1631,"path":1632,"stem":1633},"Bind secrets to destination hosts","\u002Fadmin\u002Fsecrets\u002Fhost-bindings","09.admin\u002F02.secrets\u002F01.host-bindings",{"title":1635,"path":1636,"stem":1637},"Test and rotate secrets","\u002Fadmin\u002Fsecrets\u002Frotation","09.admin\u002F02.secrets\u002F02.rotation",{"title":1639,"path":1640,"stem":1641},"Use an external secret store","\u002Fadmin\u002Fsecrets\u002Fexternal-stores","09.admin\u002F02.secrets\u002F03.external-stores",{"title":1643,"path":1644,"stem":1645},"Deliver and scan plugin secrets","\u002Fadmin\u002Fsecrets\u002Fplugin-secrets","09.admin\u002F02.secrets\u002F04.plugin-secrets",{"title":1647,"path":1648,"stem":1649},"Configure plugin settings","\u002Fadmin\u002Fsecrets\u002Fsettings","09.admin\u002F02.secrets\u002F05.settings",{"title":1651,"path":1652,"stem":1653,"icon":1629},"Credential injection","\u002Fadmin\u002Fcredential-injection","09.admin\u002F03.credential-injection",{"title":1655,"path":1656,"stem":1657,"icon":1629},"Key commands","\u002Fadmin\u002Fkey-commands","09.admin\u002F04.key-commands",{"title":1659,"path":1660,"stem":1661,"children":1662,"icon":782},"Connect a plugin to another system","\u002Fadmin\u002Fconnections","09.admin\u002F05.connections\u002F00.index",[1663,1664,1668,1672,1676],{"title":1659,"path":1660,"stem":1661,"icon":782},{"title":1665,"path":1666,"stem":1667,"icon":782},"Renew and reconnect credentials","\u002Fadmin\u002Fconnections\u002Frenewal","09.admin\u002F05.connections\u002F01.renewal",{"title":1669,"path":1670,"stem":1671,"icon":782},"Restrict connection destinations","\u002Fadmin\u002Fconnections\u002Fdestinations","09.admin\u002F05.connections\u002F02.destinations",{"title":1673,"path":1674,"stem":1675,"icon":782},"Diagnose connection failures","\u002Fadmin\u002Fconnections\u002Ftroubleshooting","09.admin\u002F05.connections\u002F03.troubleshooting",{"title":1677,"path":1678,"stem":1679,"icon":782},"Understand connection security","\u002Fadmin\u002Fconnections\u002Fsecurity","09.admin\u002F05.connections\u002F04.security",{"title":1681,"path":1682,"stem":1683,"icon":1684},"Tenants","\u002Fadmin\u002Ftenants","09.admin\u002F06.tenants","i-ph-buildings",{"title":1686,"path":1687,"stem":1688,"children":1689,"icon":1691},"Export and verify a tenant","\u002Fadmin\u002Ftenant-export","09.admin\u002F07.tenant-export\u002F00.index",[1690,1692],{"title":1686,"path":1687,"stem":1688,"icon":1691},"i-ph-export",{"title":1693,"path":1694,"stem":1695,"icon":1691},"Tenant export format","\u002Fadmin\u002Ftenant-export\u002Fformat","09.admin\u002F07.tenant-export\u002F01.format",{"title":1697,"path":1698,"stem":1699,"icon":1700},"Notifications","\u002Fadmin\u002Fnotifications","09.admin\u002F08.notifications","i-ph-bell-ringing",{"title":1702,"path":1703,"stem":1704,"children":1705,"icon":71},"Reference","\u002Freference","10.reference\u002F00.index",[1706,1707,1726,1760,1794,1798,1803,1807,1812,1817,1822,1826],{"title":1702,"path":1703,"stem":1704},{"title":1708,"path":1709,"stem":1710,"children":1711,"icon":1725},"CLI","\u002Freference\u002Fcli","10.reference\u002F01.cli\u002F00.index",[1712,1713,1719],{"title":1708,"path":1709,"stem":1710},{"title":1714,"path":1715,"stem":1716,"children":1717},"oz0","\u002Freference\u002Fcli\u002Foz0","10.reference\u002F01.cli\u002F01.oz0\u002F00.index",[1718],{"title":1714,"path":1715,"stem":1716},{"title":1720,"path":1721,"stem":1722,"children":1723},"oz0-node","\u002Freference\u002Fcli\u002Foz0-node","10.reference\u002F01.cli\u002F02.oz0-node\u002F00.index",[1724],{"title":1720,"path":1721,"stem":1722},"i-ph-terminal-window",{"title":1727,"path":1728,"stem":1729,"children":1730,"icon":725},"oz0-plugin.yaml","\u002Freference\u002Fplugin-manifest","10.reference\u002F02.plugin-manifest\u002F00.index",[1731,1732,1736,1740,1744,1748,1752,1756],{"title":1727,"path":1728,"stem":1729,"icon":725},{"title":1733,"path":1734,"stem":1735},"Dependencies and cross-plugin access","\u002Freference\u002Fplugin-manifest\u002Fdependencies","10.reference\u002F02.plugin-manifest\u002F01.dependencies",{"title":1737,"path":1738,"stem":1739},"Tool declarations","\u002Freference\u002Fplugin-manifest\u002Ftools","10.reference\u002F02.plugin-manifest\u002F02.tools",{"title":1741,"path":1742,"stem":1743},"Harnesses, events and channels","\u002Freference\u002Fplugin-manifest\u002Fruntimes","10.reference\u002F02.plugin-manifest\u002F03.runtimes",{"title":1745,"path":1746,"stem":1747},"Connections and hooks","\u002Freference\u002Fplugin-manifest\u002Fconnections","10.reference\u002F02.plugin-manifest\u002F04.connections",{"title":1749,"path":1750,"stem":1751},"Plugin sets and policies","\u002Freference\u002Fplugin-manifest\u002Fsets-policy","10.reference\u002F02.plugin-manifest\u002F05.sets-policy",{"title":1753,"path":1754,"stem":1755},"Data, evidence and mail","\u002Freference\u002Fplugin-manifest\u002Fdata","10.reference\u002F02.plugin-manifest\u002F06.data",{"title":1757,"path":1758,"stem":1759},"Generated OpenAPI manifests","\u002Freference\u002Fplugin-manifest\u002Fopenapi","10.reference\u002F02.plugin-manifest\u002F07.openapi",{"title":1761,"path":1762,"stem":1763,"children":1764,"icon":666},"Agent definition","\u002Freference\u002Fagent-definition","10.reference\u002F03.agent-definition\u002F00.index",[1765,1766,1770,1774,1778,1782,1786,1790],{"title":1761,"path":1762,"stem":1763,"icon":666},{"title":1767,"path":1768,"stem":1769},"Identity, instructions and tools","\u002Freference\u002Fagent-definition\u002Fidentity","10.reference\u002F03.agent-definition\u002F01.identity",{"title":1771,"path":1772,"stem":1773},"Models and placement","\u002Freference\u002Fagent-definition\u002Fmodels","10.reference\u002F03.agent-definition\u002F02.models",{"title":1775,"path":1776,"stem":1777},"Limits and spend","\u002Freference\u002Fagent-definition\u002Flimits","10.reference\u002F03.agent-definition\u002F03.limits",{"title":1779,"path":1780,"stem":1781},"Judges and candidate selection","\u002Freference\u002Fagent-definition\u002Fquality","10.reference\u002F03.agent-definition\u002F04.quality",{"title":1783,"path":1784,"stem":1785},"Delegation and human decisions","\u002Freference\u002Fagent-definition\u002Fcoordination","10.reference\u002F03.agent-definition\u002F05.coordination",{"title":1787,"path":1788,"stem":1789},"History and recovery","\u002Freference\u002Fagent-definition\u002Fhistory","10.reference\u002F03.agent-definition\u002F06.history",{"title":1791,"path":1792,"stem":1793},"Sandbox, data and retention","\u002Freference\u002Fagent-definition\u002Fsecurity","10.reference\u002F03.agent-definition\u002F07.security",{"title":1795,"path":1796,"stem":1797,"icon":517},"Ports","\u002Freference\u002Fports","10.reference\u002F04.ports",{"title":1799,"path":1800,"stem":1801,"icon":1802},"Environment variables","\u002Freference\u002Fenvironment","10.reference\u002F05.environment","i-ph-brackets-curly",{"title":1804,"path":1805,"stem":1806,"icon":373},"Files and directories","\u002Freference\u002Ffiles","10.reference\u002F06.files",{"title":1808,"path":1809,"stem":1810,"icon":1811},"Lists and pages","\u002Freference\u002Flist-pages","10.reference\u002F07.list-pages","i-ph-list-numbers",{"title":1813,"path":1814,"stem":1815,"icon":1816},"Spend refusals","\u002Freference\u002Fspend-refusals","10.reference\u002F08.spend-refusals","i-ph-hand-coins",{"title":1818,"path":1819,"stem":1820,"icon":1821},"Admin API","\u002Freference\u002Fadmin-api","10.reference\u002F09.admin-api","i-ph-repeat",{"title":1823,"path":1824,"stem":1825},"Compatibility","\u002Freference\u002Fcompatibility","10.reference\u002F10.compatibility",{"title":1827,"path":1828,"stem":1829},"Known issues","\u002Freference\u002Fknown-issues","10.reference\u002F11.known-issues",{"title":1831,"path":1832,"stem":1833,"children":1834,"icon":71},"About","\u002Fabout","11.about\u002F00.index",[1835,1836,1840,1845],{"title":1831,"path":1832,"stem":1833},{"title":1837,"path":1838,"stem":1839,"icon":967},"Licensing","\u002Fabout\u002Flicensing","11.about\u002F01.licensing",{"title":1841,"path":1842,"stem":1843,"icon":1844},"About these docs","\u002Fabout\u002Fcontributing-docs","11.about\u002F02.contributing-docs","i-ph-pencil-simple",{"title":1846,"path":1847,"stem":1848,"icon":42},"A local environment","\u002Fabout\u002Flocal-environment","11.about\u002F03.local-environment",{"id":1850,"title":1185,"body":1851,"description":3449,"extension":3450,"links":3451,"meta":3452,"navigation":3455,"path":1186,"seo":3456,"stem":1187,"__hash__":3457},"docs\u002F06.govern\u002F11.audit-trail\u002F00.index.md",{"type":1852,"value":1853,"toc":3438},"minimark",[1854,1858,1861,1864,1869,1929,1932,2525,2531,2552,2560,2566,2579,2593,2618,2646,2653,2662,2683,2699,2715,2720,2741,2791,2800,2806,2813,2817,2826,2995,3003,3057,3061,3066,3092,3103,3113,3117,3137,3144,3154,3176,3180,3206,3235,3246,3250,3270,3434],[1855,1856,1857],"p",{},"For: tenant admins and governance reviewers.",[1855,1859,1860],{},"Read the audit trail to identify who acted, what authority a run used and which decisions the platform recorded. Export the records for review, or use an evidence bundle when you need to verify a job's receipts and gateway records together.",[1855,1862,1863],{},"The audit log records what people change (tenants, nodes, plugins, secrets, members, rollouts), what the platform does by itself (gate verdicts, health changes), and what runs do. It is meant for the person who has to answer for what an agent did: an auditor, a regulator, a customer's security team. An authority's question becomes an export, not a project.",[1865,1866,1868],"h2",{"id":1867},"export","Export",[1870,1871,1877],"pre",{"className":1872,"code":1873,"filename":1874,"language":1875,"meta":1876,"style":1876},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","oz0 audit export --tenant default -o audit.jsonl\noz0 audit verify --file audit.jsonl --key 3f9a…\n","Terminal","bash","",[1878,1879,1880,1907],"code",{"__ignoreMap":1876},[1881,1882,1885,1888,1892,1895,1898,1901,1904],"span",{"class":1883,"line":1884},"line",1,[1881,1886,1714],{"class":1887},"sBMFI",[1881,1889,1891],{"class":1890},"sfazB"," audit",[1881,1893,1894],{"class":1890}," export",[1881,1896,1897],{"class":1890}," --tenant",[1881,1899,1900],{"class":1890}," default",[1881,1902,1903],{"class":1890}," -o",[1881,1905,1906],{"class":1890}," audit.jsonl\n",[1881,1908,1910,1912,1914,1917,1920,1923,1926],{"class":1883,"line":1909},2,[1881,1911,1714],{"class":1887},[1881,1913,1891],{"class":1890},[1881,1915,1916],{"class":1890}," verify",[1881,1918,1919],{"class":1890}," --file",[1881,1921,1922],{"class":1890}," audit.jsonl",[1881,1924,1925],{"class":1890}," --key",[1881,1927,1928],{"class":1890}," 3f9a…\n",[1855,1930,1931],{},"An export is one chain as JSON lines, oldest first. Each line carries the entry and its place in the chain, and the last line is the chain's head when the export was made:",[1870,1933,1938],{"className":1934,"code":1935,"filename":1936,"language":1937,"meta":1876,"style":1876},"language-json shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\"seq\":7,\"id\":\"run-4f0c…\",\"at\":\"2026-10-03T06:34:12.101Z\",\"at_ms\":1790000052101,\"recorded_at\":\"2026-10-03T06:34:12.240Z\",\"recorded_at_ms\":1790000052240,\"tenant\":\"default\",\"actor\":\"node:node-486fffd604bd\",\"action\":\"run.model_call\",\"target\":\"job-9eae…\",\"agent\":\"helper\",\"detail\":{\"model\":\"claude-sonnet-5-5\",\"provider\":\"anthropic\",\"status\":200},\"salt\":\"0f3a…\",\"actor_hash\":\"77c2…\",\"target_hash\":\"1d09…\",\"detail_hash\":\"a4e8…\",\"private_hash\":\"c61b…\",\"prev_hash\":\"9c1e…\",\"content_hash\":\"4b7d…\",\"hash\":\"e02a…\"}\n{\"head\":{\"tenant\":\"default\",\"seq\":45,\"hash\":\"9c41…\",\"base_seq\":0,\"base_hash\":\"\",\"seal\":{\"blinded\":0,\"lines_sha256\":\"7be0…\",\"key_id\":\"audit-3f9a…\",\"public_key\":\"mC4w…\",\"signature\":\"Q2hr…\"}}}\n","audit.jsonl","json",[1878,1939,1940,2343],{"__ignoreMap":1876},[1881,1941,1942,1946,1949,1953,1955,1958,1962,1965,1967,1970,1972,1974,1976,1979,1981,1983,1985,1988,1990,1992,1994,1997,1999,2001,2003,2006,2008,2010,2013,2015,2017,2020,2022,2024,2026,2029,2031,2033,2035,2038,2040,2042,2045,2047,2049,2052,2054,2056,2058,2061,2063,2065,2067,2070,2072,2074,2076,2079,2081,2083,2085,2088,2090,2092,2094,2097,2099,2101,2103,2106,2108,2110,2112,2115,2117,2119,2121,2124,2126,2128,2130,2133,2135,2137,2139,2142,2144,2147,2149,2152,2154,2156,2158,2161,2163,2165,2167,2170,2172,2174,2176,2179,2181,2183,2185,2188,2190,2192,2195,2198,2200,2203,2205,2207,2209,2212,2214,2216,2218,2221,2223,2225,2227,2230,2232,2234,2236,2239,2241,2243,2245,2248,2250,2252,2254,2257,2259,2261,2263,2266,2268,2270,2272,2275,2277,2279,2281,2284,2286,2288,2290,2293,2295,2297,2299,2302,2304,2306,2308,2311,2313,2315,2317,2320,2322,2324,2326,2329,2331,2333,2335,2338,2340],{"class":1883,"line":1884},[1881,1943,1945],{"class":1944},"sMK4o","{",[1881,1947,1948],{"class":1944},"\"",[1881,1950,1952],{"class":1951},"spNyl","seq",[1881,1954,1948],{"class":1944},[1881,1956,1957],{"class":1944},":",[1881,1959,1961],{"class":1960},"sbssI","7",[1881,1963,1964],{"class":1944},",",[1881,1966,1948],{"class":1944},[1881,1968,1969],{"class":1951},"id",[1881,1971,1948],{"class":1944},[1881,1973,1957],{"class":1944},[1881,1975,1948],{"class":1944},[1881,1977,1978],{"class":1890},"run-4f0c…",[1881,1980,1948],{"class":1944},[1881,1982,1964],{"class":1944},[1881,1984,1948],{"class":1944},[1881,1986,1987],{"class":1951},"at",[1881,1989,1948],{"class":1944},[1881,1991,1957],{"class":1944},[1881,1993,1948],{"class":1944},[1881,1995,1996],{"class":1890},"2026-10-03T06:34:12.101Z",[1881,1998,1948],{"class":1944},[1881,2000,1964],{"class":1944},[1881,2002,1948],{"class":1944},[1881,2004,2005],{"class":1951},"at_ms",[1881,2007,1948],{"class":1944},[1881,2009,1957],{"class":1944},[1881,2011,2012],{"class":1960},"1790000052101",[1881,2014,1964],{"class":1944},[1881,2016,1948],{"class":1944},[1881,2018,2019],{"class":1951},"recorded_at",[1881,2021,1948],{"class":1944},[1881,2023,1957],{"class":1944},[1881,2025,1948],{"class":1944},[1881,2027,2028],{"class":1890},"2026-10-03T06:34:12.240Z",[1881,2030,1948],{"class":1944},[1881,2032,1964],{"class":1944},[1881,2034,1948],{"class":1944},[1881,2036,2037],{"class":1951},"recorded_at_ms",[1881,2039,1948],{"class":1944},[1881,2041,1957],{"class":1944},[1881,2043,2044],{"class":1960},"1790000052240",[1881,2046,1964],{"class":1944},[1881,2048,1948],{"class":1944},[1881,2050,2051],{"class":1951},"tenant",[1881,2053,1948],{"class":1944},[1881,2055,1957],{"class":1944},[1881,2057,1948],{"class":1944},[1881,2059,2060],{"class":1890},"default",[1881,2062,1948],{"class":1944},[1881,2064,1964],{"class":1944},[1881,2066,1948],{"class":1944},[1881,2068,2069],{"class":1951},"actor",[1881,2071,1948],{"class":1944},[1881,2073,1957],{"class":1944},[1881,2075,1948],{"class":1944},[1881,2077,2078],{"class":1890},"node:node-486fffd604bd",[1881,2080,1948],{"class":1944},[1881,2082,1964],{"class":1944},[1881,2084,1948],{"class":1944},[1881,2086,2087],{"class":1951},"action",[1881,2089,1948],{"class":1944},[1881,2091,1957],{"class":1944},[1881,2093,1948],{"class":1944},[1881,2095,2096],{"class":1890},"run.model_call",[1881,2098,1948],{"class":1944},[1881,2100,1964],{"class":1944},[1881,2102,1948],{"class":1944},[1881,2104,2105],{"class":1951},"target",[1881,2107,1948],{"class":1944},[1881,2109,1957],{"class":1944},[1881,2111,1948],{"class":1944},[1881,2113,2114],{"class":1890},"job-9eae…",[1881,2116,1948],{"class":1944},[1881,2118,1964],{"class":1944},[1881,2120,1948],{"class":1944},[1881,2122,2123],{"class":1951},"agent",[1881,2125,1948],{"class":1944},[1881,2127,1957],{"class":1944},[1881,2129,1948],{"class":1944},[1881,2131,2132],{"class":1890},"helper",[1881,2134,1948],{"class":1944},[1881,2136,1964],{"class":1944},[1881,2138,1948],{"class":1944},[1881,2140,2141],{"class":1951},"detail",[1881,2143,1948],{"class":1944},[1881,2145,2146],{"class":1944},":{",[1881,2148,1948],{"class":1944},[1881,2150,2151],{"class":1887},"model",[1881,2153,1948],{"class":1944},[1881,2155,1957],{"class":1944},[1881,2157,1948],{"class":1944},[1881,2159,2160],{"class":1890},"claude-sonnet-5-5",[1881,2162,1948],{"class":1944},[1881,2164,1964],{"class":1944},[1881,2166,1948],{"class":1944},[1881,2168,2169],{"class":1887},"provider",[1881,2171,1948],{"class":1944},[1881,2173,1957],{"class":1944},[1881,2175,1948],{"class":1944},[1881,2177,2178],{"class":1890},"anthropic",[1881,2180,1948],{"class":1944},[1881,2182,1964],{"class":1944},[1881,2184,1948],{"class":1944},[1881,2186,2187],{"class":1887},"status",[1881,2189,1948],{"class":1944},[1881,2191,1957],{"class":1944},[1881,2193,2194],{"class":1960},"200",[1881,2196,2197],{"class":1944},"},",[1881,2199,1948],{"class":1944},[1881,2201,2202],{"class":1951},"salt",[1881,2204,1948],{"class":1944},[1881,2206,1957],{"class":1944},[1881,2208,1948],{"class":1944},[1881,2210,2211],{"class":1890},"0f3a…",[1881,2213,1948],{"class":1944},[1881,2215,1964],{"class":1944},[1881,2217,1948],{"class":1944},[1881,2219,2220],{"class":1951},"actor_hash",[1881,2222,1948],{"class":1944},[1881,2224,1957],{"class":1944},[1881,2226,1948],{"class":1944},[1881,2228,2229],{"class":1890},"77c2…",[1881,2231,1948],{"class":1944},[1881,2233,1964],{"class":1944},[1881,2235,1948],{"class":1944},[1881,2237,2238],{"class":1951},"target_hash",[1881,2240,1948],{"class":1944},[1881,2242,1957],{"class":1944},[1881,2244,1948],{"class":1944},[1881,2246,2247],{"class":1890},"1d09…",[1881,2249,1948],{"class":1944},[1881,2251,1964],{"class":1944},[1881,2253,1948],{"class":1944},[1881,2255,2256],{"class":1951},"detail_hash",[1881,2258,1948],{"class":1944},[1881,2260,1957],{"class":1944},[1881,2262,1948],{"class":1944},[1881,2264,2265],{"class":1890},"a4e8…",[1881,2267,1948],{"class":1944},[1881,2269,1964],{"class":1944},[1881,2271,1948],{"class":1944},[1881,2273,2274],{"class":1951},"private_hash",[1881,2276,1948],{"class":1944},[1881,2278,1957],{"class":1944},[1881,2280,1948],{"class":1944},[1881,2282,2283],{"class":1890},"c61b…",[1881,2285,1948],{"class":1944},[1881,2287,1964],{"class":1944},[1881,2289,1948],{"class":1944},[1881,2291,2292],{"class":1951},"prev_hash",[1881,2294,1948],{"class":1944},[1881,2296,1957],{"class":1944},[1881,2298,1948],{"class":1944},[1881,2300,2301],{"class":1890},"9c1e…",[1881,2303,1948],{"class":1944},[1881,2305,1964],{"class":1944},[1881,2307,1948],{"class":1944},[1881,2309,2310],{"class":1951},"content_hash",[1881,2312,1948],{"class":1944},[1881,2314,1957],{"class":1944},[1881,2316,1948],{"class":1944},[1881,2318,2319],{"class":1890},"4b7d…",[1881,2321,1948],{"class":1944},[1881,2323,1964],{"class":1944},[1881,2325,1948],{"class":1944},[1881,2327,2328],{"class":1951},"hash",[1881,2330,1948],{"class":1944},[1881,2332,1957],{"class":1944},[1881,2334,1948],{"class":1944},[1881,2336,2337],{"class":1890},"e02a…",[1881,2339,1948],{"class":1944},[1881,2341,2342],{"class":1944},"}\n",[1881,2344,2345,2347,2349,2352,2354,2356,2358,2360,2362,2364,2366,2368,2370,2372,2374,2376,2378,2380,2383,2385,2387,2389,2391,2393,2395,2398,2400,2402,2404,2407,2409,2411,2414,2416,2418,2421,2423,2425,2428,2430,2432,2435,2437,2439,2441,2444,2446,2448,2450,2452,2454,2457,2459,2461,2463,2466,2468,2470,2472,2475,2477,2479,2481,2484,2486,2488,2490,2493,2495,2497,2499,2502,2504,2506,2508,2511,2513,2515,2517,2520,2522],{"class":1883,"line":1909},[1881,2346,1945],{"class":1944},[1881,2348,1948],{"class":1944},[1881,2350,2351],{"class":1951},"head",[1881,2353,1948],{"class":1944},[1881,2355,2146],{"class":1944},[1881,2357,1948],{"class":1944},[1881,2359,2051],{"class":1887},[1881,2361,1948],{"class":1944},[1881,2363,1957],{"class":1944},[1881,2365,1948],{"class":1944},[1881,2367,2060],{"class":1890},[1881,2369,1948],{"class":1944},[1881,2371,1964],{"class":1944},[1881,2373,1948],{"class":1944},[1881,2375,1952],{"class":1887},[1881,2377,1948],{"class":1944},[1881,2379,1957],{"class":1944},[1881,2381,2382],{"class":1960},"45",[1881,2384,1964],{"class":1944},[1881,2386,1948],{"class":1944},[1881,2388,2328],{"class":1887},[1881,2390,1948],{"class":1944},[1881,2392,1957],{"class":1944},[1881,2394,1948],{"class":1944},[1881,2396,2397],{"class":1890},"9c41…",[1881,2399,1948],{"class":1944},[1881,2401,1964],{"class":1944},[1881,2403,1948],{"class":1944},[1881,2405,2406],{"class":1887},"base_seq",[1881,2408,1948],{"class":1944},[1881,2410,1957],{"class":1944},[1881,2412,2413],{"class":1960},"0",[1881,2415,1964],{"class":1944},[1881,2417,1948],{"class":1944},[1881,2419,2420],{"class":1887},"base_hash",[1881,2422,1948],{"class":1944},[1881,2424,1957],{"class":1944},[1881,2426,2427],{"class":1944},"\"\"",[1881,2429,1964],{"class":1944},[1881,2431,1948],{"class":1944},[1881,2433,2434],{"class":1887},"seal",[1881,2436,1948],{"class":1944},[1881,2438,2146],{"class":1944},[1881,2440,1948],{"class":1944},[1881,2442,2443],{"class":1960},"blinded",[1881,2445,1948],{"class":1944},[1881,2447,1957],{"class":1944},[1881,2449,2413],{"class":1960},[1881,2451,1964],{"class":1944},[1881,2453,1948],{"class":1944},[1881,2455,2456],{"class":1960},"lines_sha256",[1881,2458,1948],{"class":1944},[1881,2460,1957],{"class":1944},[1881,2462,1948],{"class":1944},[1881,2464,2465],{"class":1890},"7be0…",[1881,2467,1948],{"class":1944},[1881,2469,1964],{"class":1944},[1881,2471,1948],{"class":1944},[1881,2473,2474],{"class":1960},"key_id",[1881,2476,1948],{"class":1944},[1881,2478,1957],{"class":1944},[1881,2480,1948],{"class":1944},[1881,2482,2483],{"class":1890},"audit-3f9a…",[1881,2485,1948],{"class":1944},[1881,2487,1964],{"class":1944},[1881,2489,1948],{"class":1944},[1881,2491,2492],{"class":1960},"public_key",[1881,2494,1948],{"class":1944},[1881,2496,1957],{"class":1944},[1881,2498,1948],{"class":1944},[1881,2500,2501],{"class":1890},"mC4w…",[1881,2503,1948],{"class":1944},[1881,2505,1964],{"class":1944},[1881,2507,1948],{"class":1944},[1881,2509,2510],{"class":1960},"signature",[1881,2512,1948],{"class":1944},[1881,2514,1957],{"class":1944},[1881,2516,1948],{"class":1944},[1881,2518,2519],{"class":1890},"Q2hr…",[1881,2521,1948],{"class":1944},[1881,2523,2524],{"class":1944},"}}}\n",[1855,2526,2527,2530],{},[1878,2528,2529],{},"audit verify --file"," checks an export without the cluster, so an auditor can check what you handed over: every entry, that the entries end at the head line, that the first one links to the chain's base when the export starts there, and that every redacted entry is listed by the erasure or retention entry that redacted it. Lines cut from the end, or from the start of a whole export, break it.",[1855,2532,2533,2534,2537,2538,2543,2544,2547,2548,2551],{},"It prints the head; compare it with the one ",[1878,2535,2536],{},"audit verify"," shows on the cluster, or with a copy you kept elsewhere. For an export with ",[2539,2540,2542],"a",{"href":2541},"\u002Fgovern\u002Faudit-trail\u002Frecords#what-a-job-read-or-wrote","blinded entries"," that comparison is not enough, so such a file fails until ",[1878,2545,2546],{},"--key"," pins who signed it. ",[1878,2549,2550],{},"--complete"," also fails unless the file holds the whole chain, from its base to its head.",[1855,2553,2554,2556,2557,2559],{},[1878,2555,2546],{}," and ",[1878,2558,2550],{}," each fail unless every head in the file is signed and the signature verifies, and unless no entry comes after the last head: hashes alone show only that a file agrees with itself, since whoever edits one can work them out again, head included.",[1855,2561,2562,2563,2565],{},"With ",[1878,2564,2546],{}," the signature must be that key's.",[1855,2567,2568,2569,2571,2572,2574,2575,2578],{},"Anyone can sign, so ",[1878,2570,2550],{}," without ",[1878,2573,2546],{}," is refused unless ",[1878,2576,2577],{},"--unpinned"," says that showing the file is whole is enough, as for a file with blinded entries.",[1855,2580,2581,2582,2585,2586,2588,2589,2592],{},"The output calls a file ",[1878,2583,2584],{},"complete"," only when ",[1878,2587,2546],{}," pinned its signature; a whole file whose key was not pinned reads ",[1878,2590,2591],{},"reaches from the chain's base to the head it names",", followed by a line that says the key was not pinned.",[1855,2594,2595,2596,2598,2599,2601,2602,2556,2604,2571,2606,2609,2610,2613,2614,2617],{},"A ",[1878,2597,2546],{}," with nothing in it, as an unset variable in a script gives, is refused rather than read as no key, and so are ",[1878,2600,2546],{},", ",[1878,2603,2550],{},[1878,2605,2577],{},[1878,2607,2608],{},"--file",", and ",[1878,2611,2612],{},"--tenant"," or ",[1878,2615,2616],{},"--cluster"," with it: none of those could check what they say.",[1855,2619,2620,2621,2601,2624,2601,2627,2601,2630,2556,2633,2636,2637,2639,2640,2571,2642,2645],{},"The other commands that pin the audit key (",[1878,2622,2623],{},"evidence verify",[1878,2625,2626],{},"incident verify",[1878,2628,2629],{},"receipt verify",[1878,2631,2632],{},"tenant export --verify",[1878,2634,2635],{},"subject export --verify",") refuse an empty ",[1878,2638,2546],{}," too, and an export that is given a ",[1878,2641,2546],{},[1878,2643,2644],{},"--verify"," is refused.",[1855,2647,2648,2649,2652],{},"An export from a server that did not sign plain heads passes neither flag, and without them is checked as far as its hashes go: the command says ",[1878,2650,2651],{},"unsigned",", and does not call it complete. Export it again to get a signed head.",[1870,2654,2660],{"className":2655,"code":2657,"filename":2658,"language":2659,"meta":1876},[2656],"language-text","ok: entries 1 to 45 of chain default chain correctly (2 redacted, each listed by the erasure or retention entry that redacted it)\ncomplete: from the chain's base to its head, entry 45, hash 9c41…\ncompare the head with `oz0 audit verify` on the cluster, or with a copy kept elsewhere\nsigned by audit key 3f9a…\nthe audit key is the one given with --key\n","Output","text",[1878,2661,2657],{"__ignoreMap":1876},[1855,2663,2664,2665,2601,2667,2601,2669,2556,2671,2674,2675,2678,2679,2682],{},"To check an entry yourself: each part hash is the SHA-256 of the salt and the part, each written as its length in bytes, a colon and the bytes; the parts are ",[1878,2666,2069],{},[1878,2668,2105],{},[1878,2670,2141],{},[1878,2672,2673],{},"private"," as the JSON text in the line (empty when there is none), on a version 2 or 3 entry ",[1878,2676,2677],{},"starter"," too, and on a version 3 entry ",[1878,2680,2681],{},"granted_by",".",[1855,2684,2685,2686,2688,2689,2691,2692,2695,2696,2698],{},"The hash is the SHA-256 of ",[1878,2687,2292],{},", a colon and ",[1878,2690,2310],{},". A line marked ",[1878,2693,2694],{},"withheld"," left its private part out; its ",[1878,2697,2274],{}," is checked as it is.",[1855,2700,2701,2702,2704,2705,2707,2708,2711,2712,2714],{},"A line marked ",[1878,2703,2443],{}," has no salt, so only its ",[1878,2706,2310],{}," and links can be checked this way, and its export's signature covers the rest. On a line that also says ",[1878,2709,2710],{},"binding_keyed",", the call binding is keyed and the ",[1878,2713,2310],{}," cannot be worked out again, so only its link is checked this way.",[2716,2717,2719],"h3",{"id":2718},"a-time-range","A time range",[1855,2721,2722,2725,2726,2556,2729,2732,2733,2736,2737,2740],{},[1878,2723,2724],{},"oz0 audit"," lists the newest entries first, in the chain's order: one tenant's by sequence number, several tenants' by the time the database recorded them, then tenant and sequence number. ",[1878,2727,2728],{},"--since",[1878,2730,2731],{},"--until"," keep those recorded in a time range (RFC 3339, or how long ago such as ",[1878,2734,2735],{},"2h","), as ",[1878,2738,2739],{},"audit export"," does:",[1870,2742,2744],{"className":1872,"code":2743,"filename":1874,"language":1875,"meta":1876,"style":1876},"oz0 audit --tenant default --since 2026-10-12T08:00:00Z --until 2026-10-12T10:00:00Z --action egress.\noz0 audit --since 30m --target job-9eae…\n",[1878,2745,2746,2774],{"__ignoreMap":1876},[1881,2747,2748,2750,2752,2754,2756,2759,2762,2765,2768,2771],{"class":1883,"line":1884},[1881,2749,1714],{"class":1887},[1881,2751,1891],{"class":1890},[1881,2753,1897],{"class":1890},[1881,2755,1900],{"class":1890},[1881,2757,2758],{"class":1890}," --since",[1881,2760,2761],{"class":1890}," 2026-10-12T08:00:00Z",[1881,2763,2764],{"class":1890}," --until",[1881,2766,2767],{"class":1890}," 2026-10-12T10:00:00Z",[1881,2769,2770],{"class":1890}," --action",[1881,2772,2773],{"class":1890}," egress.\n",[1881,2775,2776,2778,2780,2782,2785,2788],{"class":1883,"line":1909},[1881,2777,1714],{"class":1887},[1881,2779,1891],{"class":1890},[1881,2781,2758],{"class":1890},[1881,2783,2784],{"class":1890}," 30m",[1881,2786,2787],{"class":1890}," --target",[1881,2789,2790],{"class":1890}," job-9eae…\n",[1855,2792,2793,2794,2796,2797,2799],{},"The list never orders by an entry's ",[1878,2795,1987],{},", which is when it happened by the clock of whoever wrote it: management, an edge or the job's history. Those clocks differ a little, an edge may hold entries for a while when management is away, and a clock can step back (NTP does that on servers, and WSL's clock steps back about a second every half minute), so two entries' ",[1878,2798,1987],{}," can disagree with the order they were recorded in.",[1855,2801,2802,2803,2805],{},"Each entry still shows its ",[1878,2804,1987],{},". The recorded time comes from the database's one clock and never goes back along a chain, so a time range is a whole piece of it. A page token from before this order (an older server's) is refused with \"ask for the first page again\".",[1855,2807,2808,2809,2812],{},"An ",[2539,2810,2811],{"href":1177},"incident"," links a range by time or by sequence numbers, and its timeline export carries the range as a whole piece of the chain, with a checkpoint signed by the audit key, so it verifies offline.",[2716,2814,2816],{"id":2815},"three-versions-of-an-entry","Three versions of an entry",[1855,2818,2819,2820,2822,2823,2825],{},"Entries come in three versions, and a chain holds them all: those written before the starter was recorded are version 1, those written until the authority envelope was recorded are version 2, and those written since are version 3. Each keeps its version, and ",[1878,2821,2536],{},", on the cluster and with ",[1878,2824,2608],{},", checks each by its own rules, so an export that crosses a change verifies in one pass, without a flag.",[2827,2828,2829,2845],"table",{},[2830,2831,2832],"thead",{},[2833,2834,2835,2839,2842],"tr",{},[2836,2837,2838],"th",{},"Version",[2836,2840,2841],{},"In the export",[2836,2843,2844],{},"Its content hash covers, in this order",[2846,2847,2848,2888,2932],"tbody",{},[2833,2849,2850,2854,2861],{},[2851,2852,2853],"td",{},"1",[2851,2855,2856,2857,2860],{},"no ",[1878,2858,2859],{},"\"v\""," field",[2851,2862,2863,2601,2865,2601,2867,2601,2869,2601,2871,2601,2873,2601,2875,2601,2878,2601,2880,2601,2882,2601,2884,2601,2886],{},[1878,2864,1952],{},[1878,2866,1969],{},[1878,2868,2005],{},[1878,2870,2037],{},[1878,2872,2051],{},[1878,2874,2087],{},[1878,2876,2877],{},"subject",[1878,2879,2123],{},[1878,2881,2220],{},[1878,2883,2238],{},[1878,2885,2256],{},[1878,2887,2274],{},[2833,2889,2890,2893,2913],{},[2851,2891,2892],{},"2",[2851,2894,2895,2609,2898,2601,2900,2601,2903,2601,2906,2556,2909,2912],{},[1878,2896,2897],{},"\"v\": 2",[1878,2899,2677],{},[1878,2901,2902],{},"starter_hash",[1878,2904,2905],{},"agent_version",[1878,2907,2908],{},"plugin",[1878,2910,2911],{},"tool"," when set",[2851,2914,2915,2916,2919,2920,2922,2923,2601,2925,2601,2927,2929,2930],{},"the text ",[1878,2917,2918],{},"v2",", then the fields of version 1 up to ",[1878,2921,2123],{},", then ",[1878,2924,2905],{},[1878,2926,2908],{},[1878,2928,2911],{},", then the four part hashes, then ",[1878,2931,2902],{},[2833,2933,2934,2937,2969],{},[2851,2935,2936],{},"3",[2851,2938,2939,2942,2943,2601,2946,2601,2949,2601,2952,2601,2954,2601,2957,2601,2960,2601,2963,2556,2966,2912],{},[1878,2940,2941],{},"\"v\": 3",", the fields of version 2, and ",[1878,2944,2945],{},"envelope",[1878,2947,2948],{},"binding",[1878,2950,2951],{},"level",[1878,2953,2681],{},[1878,2955,2956],{},"granted_by_hash",[1878,2958,2959],{},"granted_at_ms",[1878,2961,2962],{},"level_policy_version",[1878,2964,2965],{},"action_class",[1878,2967,2968],{},"labels",[2851,2970,2915,2971,2974,2975,2922,2977,2601,2979,2601,2981,2601,2983,2601,2985,2601,2987,2601,2989,2929,2991,2922,2993],{},[1878,2972,2973],{},"v3",", then the fields of version 2 up to ",[1878,2976,2911],{},[1878,2978,2945],{},[1878,2980,2948],{},[1878,2982,2951],{},[1878,2984,2959],{},[1878,2986,2962],{},[1878,2988,2965],{},[1878,2990,2968],{},[1878,2992,2902],{},[1878,2994,2956],{},[1855,2996,2997,2998,2613,3000,3002],{},"The leading ",[1878,2999,2918],{},[1878,3001,2973],{}," keeps an entry from verifying under another version: stripping an entry of its newer fields, or giving an older entry a starter or a level, breaks the chain there. A version 1 or 2 line is exported exactly as before.",[2827,3004,3005,3015],{},[2830,3006,3007],{},[2833,3008,3009,3012],{},[2836,3010,3011],{},"Flag",[2836,3013,3014],{},"What it does",[2846,3016,3017,3026,3036,3047],{},[2833,3018,3019,3023],{},[2851,3020,3021],{},[1878,3022,2612],{},[2851,3024,3025],{},"The tenant's chain; without it, cluster admins export the cluster's own",[2833,3027,3028,3033],{},[2851,3029,3030],{},[1878,3031,3032],{},"--after N",[2851,3034,3035],{},"Only entries after sequence number N, to go on from the last export",[2833,3037,3038,3044],{},[2851,3039,3040,2601,3042],{},[1878,3041,2728],{},[1878,3043,2731],{},[2851,3045,3046],{},"Only entries recorded in that time (RFC 3339): the piece of the chain from the first such entry to the last",[2833,3048,3049,3054],{},[2851,3050,3051],{},[1878,3052,3053],{},"--follow",[2851,3055,3056],{},"Keep running and write new entries as they are recorded",[2716,3058,3060],{"id":3059},"to-a-siem","To a SIEM",[1855,3062,3063,3065],{},[1878,3064,3053],{}," writes new entries as they come, every two seconds, each batch followed by a head line, so any log shipper that reads a command's output or a file sends them on:",[1870,3067,3069],{"className":1872,"code":3068,"filename":1874,"language":1875,"meta":1876,"style":1876},"oz0 audit export --tenant default --follow >> \u002Fvar\u002Flog\u002Foz0\u002Faudit.jsonl\n",[1878,3070,3071],{"__ignoreMap":1876},[1881,3072,3073,3075,3077,3079,3081,3083,3086,3089],{"class":1883,"line":1884},[1881,3074,1714],{"class":1887},[1881,3076,1891],{"class":1890},[1881,3078,1894],{"class":1890},[1881,3080,1897],{"class":1890},[1881,3082,1900],{"class":1890},[1881,3084,3085],{"class":1890}," --follow",[1881,3087,3088],{"class":1944}," >>",[1881,3090,3091],{"class":1890}," \u002Fvar\u002Flog\u002Foz0\u002Faudit.jsonl\n",[1855,3093,3094,3095,3098,3099,3102],{},"Every export is in the chain it exports (",[1878,3096,3097],{},"audit.export","). A follow is recorded once, as ",[1878,3100,3101],{},"audit.follow"," when it starts, not at every poll, so a SIEM that follows a chain does not fill it with its own reads.",[1855,3104,3105,3106,2556,3110,3112],{},"The console's audit page has ",[3107,3108,3109],"strong",{},"Verify",[3107,3111,1868],{}," buttons that do the same for the chain the page shows.",[1865,3114,3116],{"id":3115},"receipts-of-kills-and-revocations","Receipts of kills and revocations",[1855,3118,3119,3120,3124,3125,3128,3129,3132,3133,3136],{},"Each ",[2539,3121,3123],{"href":3122},"\u002Fgovern\u002Fkill-switches#receipts","kill switch and revocation"," ends in a receipt, which management signs with the audit key and records as an entry: ",[1878,3126,3127],{},"kill.receipt"," (a batch that holds a kill switch), ",[1878,3130,3131],{},"revoke.receipt"," (a grant narrowed, a plugin removed, an API key revoked, a person who can no longer start jobs) or ",[1878,3134,3135],{},"demotion.receipt"," (reserved for the autonomy levels' circuit breaker; nothing writes one yet).",[1855,3138,3139,3140,3143],{},"The entry's target is the receipt's ID (",[1878,3141,3142],{},"rcpt-\u003CUUIDv7>",", which an incident can link) and its detail has the epoch, what was revoked, the carriers by final state, the key and the SHA-256 of the signed document.",[1855,3145,3146,3147,3150,3151,2682],{},"The edges' refusals of a revoked job's calls are entries too (",[1878,3148,3149],{},"run.revoked_refused","), and an edge that stops a job a recent revocation reaches after the batch (one that started on an edge that had not loaded it yet) records ",[1878,3152,3153],{},"revoke.enforced",[1855,3155,3156,2556,3159,3162,3163,3167,3168,3171,3172,3175],{},[1878,3157,3158],{},"oz0 receipt show",[1878,3160,3161],{},"verify"," read them; an ",[2539,3164,3166],{"href":3165},"\u002Fgovern\u002Faudit-trail\u002Fevidence-bundles#evidence-bundles","evidence bundle"," carries the receipts its segment's receipt entries name in ",[1878,3169,3170],{},"receipts\u002Freceipts.jsonl"," (an entry is written when its receipt is signed, so a batch that opened before the period and was signed in it is there), and ",[1878,3173,3174],{},"oz0 evidence verify"," checks each one's signature and that every receipt entry in the segment names a receipt the bundle holds, with the same document.",[1865,3177,3179],{"id":3178},"reasons-and-governance-changes","Reasons and governance changes",[1855,3181,3182,3183,2601,3186,2601,3189,2556,3192,3195,3196,2601,3199,2613,3202,3205],{},"Every change of a governance setting (retention, legal holds, kill switches, the inventory's risk class, data rules, label settings and label policies, the AI label, the tool policy, the sandbox and egress settings, works-council mode, what notifications carry, CORS origins, four eyes, the erasure policy and agents' keep-for periods) carries the reason its admin gave and, when given, a decision reference: the entry's detail has ",[1878,3184,3185],{},"reason",[1878,3187,3188],{},"decision_ref",[1878,3190,3191],{},"setting",[1878,3193,3194],{},"direction"," (",[1878,3197,3198],{},"tighten",[1878,3200,3201],{},"loosen",[1878,3203,3204],{},"same",").",[1855,3207,3208,3209,2556,3212,3215,3216,2556,3219,3222,3223,3226,3227,3230,3231,3205],{},"Entries written before reasons were required stay as they were. A change that waited for a second admin lands as the approver's entry with ",[1878,3210,3211],{},"change",[1878,3213,3214],{},"requested_by",", after ",[1878,3217,3218],{},"governance.change_requested",[1878,3220,3221],{},"governance.change_approved"," (or ",[1878,3224,3225],{},"governance.change_rejected",") and before ",[1878,3228,3229],{},"governance.change_applied",", which hold the setting's value before and after, what loosens and the reason (for label policies, the people listed only as a count: the change request itself, which only admins read, keeps who) (",[2539,3232,3234],{"href":3233},"\u002Fgovern\u002Freviewed-changes#four-eyes-for-governance-changes","four eyes",[1855,3236,3237,3240,3241,3245],{},[1878,3238,3239],{},"toolpolicy.would_have"," records each call a ",[2539,3242,3244],{"href":3243},"\u002Fgovern\u002Ftool-policy\u002Freview-changes#shadow-mode-and-ends","shadow rule"," would have decided: the rule's ID, the agent, the tool, its action class, what the rule would have said and what happened.",[1865,3247,3249],{"id":3248},"related-tasks-and-reference","Related tasks and reference",[3251,3252,3253,3258,3262,3266],"ul",{},[3254,3255,3256],"li",{},[2539,3257,1192],{"href":1193},[3254,3259,3260],{},[2539,3261,1196],{"href":1197},[3254,3263,3264],{},[2539,3265,1200],{"href":1201},[3254,3267,3268],{},[2539,3269,1204],{"href":1205},[3271,3272,3273,3284,3293,3302,3311,3319,3328,3337,3346,3354,3363,3372,3381,3390,3399,3407,3416,3425],"legacy-sections",{},[1855,3274,3275,3279,3280,2682],{},[1881,3276,3278],{"id":3277},"a-bundle-made-without-the-content-permission","a bundle made without the content permission",": ",[2539,3281,3283],{"href":3282},"\u002Fgovern\u002Faudit-trail\u002Fevidence-bundles#a-bundle-made-without-the-content-permission","Read the section",[1855,3285,3286,3279,3290,2682],{},[1881,3287,3289],{"id":3288},"a-chain-that-shows-edits","a chain that shows edits",[2539,3291,3283],{"href":3292},"\u002Fgovern\u002Faudit-trail\u002Fverification#a-chain-that-shows-edits",[1855,3294,3295,3279,3299,2682],{},[1881,3296,3298],{"id":3297},"checking-a-bundle","checking a bundle",[2539,3300,3283],{"href":3301},"\u002Fgovern\u002Faudit-trail\u002Fevidence-bundles#checking-a-bundle",[1855,3303,3304,3279,3308,2682],{},[1881,3305,3307],{"id":3306},"erasures-in-the-audit-log","erasures in the audit log",[2539,3309,3283],{"href":3310},"\u002Fgovern\u002Faudit-trail\u002Fretention#erasures-in-the-audit-log",[1855,3312,3313,3279,3317,2682],{},[1881,3314,3316],{"id":3315},"evidence-bundles","evidence bundles",[2539,3318,3283],{"href":3165},[1855,3320,3321,3279,3325,2682],{},[1881,3322,3324],{"id":3323},"legal-hold","legal hold",[2539,3326,3283],{"href":3327},"\u002Fgovern\u002Faudit-trail\u002Fretention#legal-hold",[1855,3329,3330,3279,3334,2682],{},[1881,3331,3333],{"id":3332},"legal-holds-and-temporals-histories","legal holds and temporals histories",[2539,3335,3283],{"href":3336},"\u002Fgovern\u002Faudit-trail\u002Fretention#legal-holds-and-temporals-histories",[1855,3338,3339,3279,3343,2682],{},[1881,3340,3342],{"id":3341},"on-whose-authority-and-at-what-level","on whose authority and at what level",[2539,3344,3283],{"href":3345},"\u002Fgovern\u002Faudit-trail\u002Frecords#on-whose-authority-and-at-what-level",[1855,3347,3348,3279,3351,2682],{},[1881,3349,3350],{"id":3350},"retention",[2539,3352,3283],{"href":3353},"\u002Fgovern\u002Faudit-trail\u002Fretention#retention",[1855,3355,3356,3279,3360,2682],{},[1881,3357,3359],{"id":3358},"retention-holds-and-erasure","retention holds and erasure",[2539,3361,3283],{"href":3362},"\u002Fgovern\u002Faudit-trail\u002Fevidence-bundles#retention-holds-and-erasure",[1855,3364,3365,3279,3369,2682],{},[1881,3366,3368],{"id":3367},"searching-by-starter","searching by starter",[2539,3370,3283],{"href":3371},"\u002Fgovern\u002Faudit-trail\u002Frecords#searching-by-starter",[1855,3373,3374,3279,3378,2682],{},[1881,3375,3377],{"id":3376},"the-audit-key-and-the-gateway-keys","the audit key and the gateway keys",[2539,3379,3283],{"href":3380},"\u002Fgovern\u002Faudit-trail\u002Fevidence-bundles#the-audit-key-and-the-gateway-keys",[1855,3382,3383,3279,3387,2682],{},[1881,3384,3386],{"id":3385},"the-gateways-own-record","the gateways own record",[2539,3388,3283],{"href":3389},"\u002Fgovern\u002Faudit-trail\u002Fevidence-bundles#the-gateways-own-record",[1855,3391,3392,3279,3396,2682],{},[1881,3393,3395],{"id":3394},"the-two-way-check","the two way check",[2539,3397,3283],{"href":3398},"\u002Fgovern\u002Faudit-trail\u002Fevidence-bundles#the-two-way-check",[1855,3400,3401,3279,3405,2682],{},[1881,3402,3404],{"id":3403},"what-a-job-read-or-wrote","what a job read or wrote",[2539,3406,3283],{"href":2541},[1855,3408,3409,3279,3413,2682],{},[1881,3410,3412],{"id":3411},"what-a-run-leaves","what a run leaves",[2539,3414,3283],{"href":3415},"\u002Fgovern\u002Faudit-trail\u002Frecords#what-a-run-leaves",[1855,3417,3418,3279,3422,2682],{},[1881,3419,3421],{"id":3420},"when-an-entry-cannot-be-written","when an entry cannot be written",[2539,3423,3283],{"href":3424},"\u002Fgovern\u002Faudit-trail\u002Frecords#when-an-entry-cannot-be-written",[1855,3426,3427,3279,3431,2682],{},[1881,3428,3430],{"id":3429},"who-started-it","who started it",[2539,3432,3283],{"href":3433},"\u002Fgovern\u002Faudit-trail\u002Frecords#who-started-it",[3435,3436,3437],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}",{"title":1876,"searchDepth":1909,"depth":1909,"links":3439},[3440,3446,3447,3448],{"id":1867,"depth":1909,"text":1868,"children":3441},[3442,3444,3445],{"id":2718,"depth":3443,"text":2719},3,{"id":2815,"depth":3443,"text":2816},{"id":3059,"depth":3443,"text":3060},{"id":3115,"depth":1909,"text":3116},{"id":3178,"depth":1909,"text":3179},{"id":3248,"depth":1909,"text":3249},"What every run did and who changed what, in a log that cannot be edited unnoticed, kept as long as your rules say and exported as JSON lines.","md",null,{"audience":3453,"doc_type":3454},"tenant admins and governance reviewers","how-to",{"icon":1190},{"title":1185,"description":3449},"e3p9iMZ0-0tQ2eaCUWMEtmCoSAwJv02s91Ayqo3tZYo",[3459,3461],{"title":1181,"path":1182,"stem":1183,"description":3460,"icon":213,"children":-1},"Every agent and tool with its owner team and person, purpose, risk class, models and their regions, the data it handles, where its data goes, its DPIA and FRIA fields, a report export, and retired items.",{"title":1192,"path":1193,"stem":1194,"description":3462,"children":-1},"Audit records and run identity for tenant admins and governance reviewers.",1794442947856]