Audit and History

Audit and History

Business Summary: Audit & History records every significant platform event — agent actions, human interactions with agents, MCP reads and writes, agent runs, and approvals — so compliance teams can trace causality and query the same data from Perception at any time.

Open Audit & History from the sidebar (Governance section). Every event links to the Lifecycle Graph via View Lineage.

On this page

How this fits in Nimbus

flowchart LR
  Run[Agent run]
  Exec[Execution events]
  Gov[Governance events]
  Export[Export events]
  Conn[Connector events]
  Activity[Workstream Activity]
  Audit[Audit and History]
  LG[Lifecycle Graph]

  Run --> Exec
  Run --> Gov
  Run --> Export
  Run --> Conn
  Exec --> Activity
  Gov --> Activity
  Export --> Activity
  Conn --> Activity
  Activity --> Audit
  Audit -->|View Lineage| LG

Recording happens at every layer of governed work. You do not configure what gets logged for standard governed runs — the platform writes events as work progresses.

Start here {#start-here}

Goal Guide
Browse org-wide events Audit and History page

What gets recorded {#what-gets-recorded}

Nimbus treats accountability as a product feature, not an afterthought. When agents run inside a workstream, the platform records enough detail to reconstruct what happened, who was involved, and what was released — without asking you to keep separate notes.

Execution, governance, export, and connector events aggregate into Workstream Activity and org-wide Audit & History as shown in the diagram above.

Execution events

These record what ran and what it produced. When you confirm a run plan and the agent executes, Nimbus timestamps the start and completion, links the objective you approved, and records artifacts that land on the Outputs tab. NTU spend is attributed to the run so finance can reconcile usage later.

Typical execution events include run started and completed, plan confirmed, artifacts landed, and NTU spend tied to a run.

Governance events

These record who decided and what gates applied. When the agent pauses at a human-in-the-loop (HITL) checkpoint, Nimbus records the pause, your sign-off action, and the timestamp. Dual approver steps and spend or connector gates appear here too. See Checkpoints and approvals.

Export and commit events

These record what left Nimbus or what changed downstream — exporting an approved report, committing a decision to a CRM, or syncing documents into the Company Wiki.

Connector and integration events

These record data in and out of connected systems. Intelligence connector reads show what informed a recommendation. Action connector writes appear only after governance gates clear, with the approving actor attached.

Configuration changes

These record who changed workspace setup — connector connections, workstream creation, and governance preset updates. Some changes are visible today in workstream Activity and connector status on Connectors in the sidebar.

What is not recorded in user-facing history

Nimbus does not surface raw model prompts or full chat transcripts in standard audit views. The decision trace summarizes evidence, agents, and approvals in plain language.

Decision traces {#decision-traces}

A decision trace is run-level evidence written in plain language. It answers the questions executives and auditors ask most often: What did the AI actually do? What data did it rely on? Who signed off before anything went external?

flowchart TB
  Plan[Confirm and run]
  Run[Agent execution]
  HITL[HITL checkpoints]
  Trace[Decision trace]
  Artifact[Approved artifact]

  Plan --> Run
  Run --> HITL
  HITL --> Run
  Run --> Trace
  Run --> Artifact
  Trace --> Activity[Activity tab]
  Artifact --> Outputs[Outputs tab]

When a run completes HITL and outputs are committed, Nimbus records a durable entry in the operating ledger — analogous to a Git commit. The trace captures the evidence chain at commit time.

What a decision trace contains

Element What it tells you
Objective The goal you confirmed on the Run plan card
Evidence used Connectors read, wiki sources, uploads, and analysis steps
Contributors Which sub-agents in the agent map participated
Checkpoints Where the run paused for HITL review
Approvals Who approved, rejected, or requested changes — and when
Outputs Artifacts produced and their approval status
Executive summary A short narrative of the decision and outcome
Freshness Whether underlying data was current when the run executed

The trace is immutable once recorded. If you need a different outcome, start a new run with a refined objective rather than editing past evidence.

Where to find decision traces

  • Workstream Activity tab — expand run completed events to see trace summaries and linked artifacts.
  • Workstream chat — HITL interrupt cards and run completion messages reference the same run ID.
  • Overview — the Recent decisions table highlights committed outcomes; pending items appear under Pending approvals.
  • Full workstream studio — Open studio from the workstream header exposes the richest trace view.

Org-wide search across all traces will eventually live on Audit & History. Today, open the workstream where the run executed.

Decision traces vs chat history

Workstream chat Decision trace
Private to each user — teammates do not see message history Structured around a confirmed run — team-visible
Informal, may include abandoned ideas Designed for accountability
Not optimized for auditors Tied to one run ID and objective
Lives in the chat composer Lands in Activity, Outputs, and the collaboration rail

Perception Chat history (workspace-wide) is separate from workstream chat — sessions persist for your Perception queries; workstream chat threads stay scoped to you inside each workstream.

For compliance conversations, cite the trace and approved artifacts — not informal chat fragments or another user's private threads.

Integration audit {#integration-audit}

Connectors link Nimbus to CRMs, data warehouses, document stores, and messaging tools. Because agents can read sensitive data and, with approval, change downstream records, every integration action leaves an audit footprint.

flowchart LR
  Systems[External systems]
  Intel[Intelligence connector]
  Agent[Agent run]
  Action[Action connector]
  Activity[Workstream Activity]
  Trace[Decision trace]

  Systems --> Intel --> Agent
  Agent --> Action --> Systems
  Intel --> Activity
  Action --> Activity
  Agent --> Trace
Activity type When it happens Audit value
Connector read (pull) Analyze or Plan mode fetches data; scheduled syncs; wiki document pulls Proves which source informed a recommendation
Connector write (invoke) Action mode or approved commit pushes a change Proves who authorized an external update
Connection lifecycle Connect, disconnect, credential rotation on Connectors Shows who changed workspace access to a vendor
Health and errors Failed auth, quota exceeded, last successful pull Explains why a run could not access data

Intelligence connectors read data for analysis without changing the external system. Action connectors write or trigger operations only after governance gates clear — Critical HITL for external writes, spend thresholds, or dual approvers when configured. The audit record includes the approving actor, not just the agent.

Connections belong to your organization — one active link per connector ID, shared across workstreams. Audit entries still record which workstream and run used the connection so you can trace scope.

Workstream Activity tab {#workstream-activity-tab}

Every committed workstream keeps its own audit trail. While the org-wide Audit & History page is still coming online, the Activity tab is usually the best place to answer "what happened on this workstream?"

flowchart LR
  Chat[Workstream chat]
  Run[Governed run]
  Outputs[Outputs tab]
  Activity[Activity tab]
  Trace[Decision trace]

  Chat --> Run
  Run --> Outputs
  Run --> Activity
  Run --> Trace
  Activity --> Trace

Opening Activity

  1. Go to Workstreams in the sidebar.
  2. Open a workstream card.
  3. Select the Activity tab alongside workstream chat, Outputs, and Milestones.

Activity is a reverse-chronological log — newest events at the top.

Event What you learn
Run started / completed When execution began and finished, and whether it succeeded
Plan confirmed The objective you approved on the Confirm & run card
Checkpoint / Needs your approval The agent paused for sign-off
Approval resolved Who approved, rejected, or requested changes
Artifact landed A new output is on the Outputs tab
Connector read / write Data pulled in or an action sent to an external system
NTU spend Usage attributed to the run
Report exported or committed An approved output shared or pushed downstream

Activity vs Outputs vs Milestones

Outputs shows what was produced — artifacts you can open and export. Milestones shows progress toward the goal and approval gates along the way. Activity shows how it happened — chronological evidence. Approved artifacts on Outputs should have matching Artifact landed and Output approved events on Activity.

For the richest timeline — including decision traces — open Open studio from the workstream header. Team members with access to the workstream see the same Activity tab.

Example scenario

Your compliance team asks whether a quarterly board pack used live ERP data or a stale spreadsheet. You open the workstream Activity tab and find connector read events around the run date. You open the linked decision trace and confirm the evidence section lists the warehouse connector. You also see a Plan confirmed event with the objective your FP&A lead approved. That chain — plan, read, trace — answers the audit question without exporting raw chat.

FAQs {#faqs}

Q: Can I query audit data from Perception? A: Yes — ask about approvals, MCP writes, or run outcomes in natural language. The Perception orb queries the same operating memory as Audit & History. See Using the Perception console.

Q: How does Audit connect to the lifecycle graph? A: Click View Lineage on any event to jump to related graph nodes.

Q: Where do HITL approvals appear? A: As governance events with the approving actor — also visible in Teams HITL counts.

Q: Do I need to turn recording on? A: No. Recording is automatic for governed runs inside workstreams.

Q: Is Activity the same as a decision trace? A: Activity is the timeline you browse. A decision trace is the structured evidence behind a specific run — agents, evidence, approvals.

Q: Does disconnecting a connector erase audit history? A: No. Past run and Activity records remain. New runs cannot use the connector until you reconnect.

Q: Are informal chat messages part of the audit record? A: Workstream chat is private per user and not exported to org-wide audit views. The decision trace, Activity timeline, and approved artifacts capture governed execution for auditors.