1
{
2
  "$schema": "http://json-schema.org/draft-07/schema#",
3
  "$id": "https://openagents.dev/schemas/agent-guardrails/audit-log-entry.json",
4
  "title": "Agent Guardrails Audit Log Entry",
5
  "description": "One JSON object per line (JSON Lines) appended to audit_log_path for every reversible-write or destructive action, and optionally sampled read-only actions.",
6
  "type": "object",
7
  "required": ["timestamp", "classification", "action", "target", "description", "outcome"],
8
  "properties": {
9
    "timestamp": {
10
      "type": "string",
11
      "format": "date-time",
12
      "description": "ISO 8601 UTC timestamp of when the action was attempted."
13
    },
14
    "classification": {
15
      "type": "string",
16
      "enum": ["read-only", "reversible-write", "destructive"],
17
      "description": "Risk classification per policies/destructive-actions.md."
18
    },
19
    "action": {
20
      "type": "string",
21
      "description": "Tool or action name, e.g. \"delete_file\", \"http_post\", \"git_push_force\"."
22
    },
23
    "target": {
24
      "type": "string",
25
      "description": "The resource acted on: file path, URL, database table, resource id, etc."
26
    },
27
    "description": {
28
      "type": "string",
29
      "description": "Short human-readable summary of what the action did or attempted to do."
30
    },
31
    "outcome": {
32
      "type": "string",
33
      "enum": ["executed", "declined", "failed"],
34
      "description": "Whether the action ran successfully, was declined at the confirmation gate, or failed."
35
    },
36
    "error": {
37
      "type": "string",
38
      "description": "Error message when outcome is \"failed\". Omitted otherwise."
39
    },
40
    "confirmation": {
41
      "type": "object",
42
      "description": "Required when classification is \"destructive\" and outcome is \"executed\" or \"declined\".",
43
      "properties": {
44
        "confirmed_by": {
45
          "type": "string",
46
          "description": "Identifier of the human operator who confirmed or declined the action."
47
        },
48
        "confirmed_at": {
49
          "type": "string",
50
          "format": "date-time"
51
        },
52
        "blast_radius": {
53
          "type": "string",
54
          "description": "Stated scope of impact shown to the operator at confirmation time, e.g. \"340 rows in orders table\"."
55
        }
56
      },
57
      "required": ["confirmed_by", "confirmed_at"]
58
    },
59
    "turn_number": {
60
      "type": "integer",
61
      "minimum": 1,
62
      "description": "The harness turn count at the time of this action, for correlating with max_turns."
63
    },
64
    "session_id": {
65
      "type": "string",
66
      "description": "Identifier for the agent session/run this entry belongs to."
67
    }
68
  },
69
  "additionalProperties": false
70
}
71