Audit log

Shipping in stages. What's live today: the run ledger is append-only and retained for the life of your account, and Enterprise customers can request a one-off CSV export by emailing enterprise@getmonroe.com. The dedicated audit browser, retention controls, and S3 / Splunk / syslog exports are on the public roadmap, not live.

The run ledger is the immutable system of record for every run Monroe executes in your workspace: the compliance ledger, not the day-to-day usage view. For live credit usage, billing, and where output lands, see the run log.

Why it's trustworthy

• Append-only. You cannot edit or delete history. Every run Monroe executes is written once and kept.
• Retained for the life of your account. Nothing ages out from under a compliance review.
• Exportable. Enterprise customers can request a one-off CSV export of the full run ledger today.

Each record captures who triggered the run, the channel or DM it ran in, the UTC timestamp, and the credits metered to your workspace, reconciled at workspace level.

On the roadmap

• Audit browser: filter runs by date, user, and channel; click into a run for its timeline
• Per-run detail: tools called and approval decisions per run
• Retention controls: tier-based retention windows with admin delete
• Exports (Enterprise): S3 (JSON.gz, batched), Splunk (HEC), syslog (RFC 5424)

If any of these gate a compliance requirement, email enterprise@getmonroe.com. One-off CSV exports of the run ledger are available on request today.

Next → data residency.