id: F12.6 audit log and OpenTelemetry export #1063

Activity

1. dezren39

   added

   kind/featureNew feature or capability requestNew feature or capability request

   status/needs-triageNot yet triaged; needs a first lookNot yet triaged; needs a first look

   source/humanFiled directly by a humanFiled directly by a human

   on Oct 27, 2026
2. developing-today commented on Oct 27, 2026

   

   developing-todayBot

   on Oct 27, 2026 – with developing.today

   Contributor

   More actions

   CODE-207
3. dezren39

   added

   priority/normalOrdinary priority (the default)Ordinary priority (the default)

   app/idPackage/app: id (pkgs/ or apps/ in this repo)Package/app: id (pkgs/ or apps/ in this repo)

   nextOrg Project gate: queued next — orchestrator adds to the boardOrg Project gate: queued next — orchestrator adds to the board

   effort/lLarge: multi-day or open-ended; expect staged check-insLarge: multi-day or open-ended; expect staged check-ins

   on Oct 27, 2026
4. github-actions

   assigned

   dezren39

   on Oct 27, 2026
5. dezren39

   added

   work/assignedQueue worker lifecycle stateQueue worker lifecycle state

   queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

   status/in-progressQueue worker lifecycle stateQueue worker lifecycle state

   and removed

   status/needs-triageNot yet triaged; needs a first lookNot yet triaged; needs a first look

   on Nov 1, 2026
6. dezren39 commented on Nov 1, 2026

   

   dezren39

   on Nov 1, 2026

   MemberAuthor

   More actions

   🤖 Agent note · picked up

   • Agent: queue worker (repo-worker-code), lane B shift
   • Session / ID: queue task 2336 (triage)
   • Found via: queue claim
   • Task: Triage id: F12.6 audit log and OpenTelemetry export #1063 (F12.6 audit log + OpenTelemetry export) against current main: verify no structured audit log / OTEL export exists, check the F11.7 foundation (id(world): F11.7 host metrics, Prometheus endpoint and tracing spans #553), and route.
   • Expectation: s — verdict with fresh-HEAD citations, follow-up route recorded, labels synced.
   • Links: queue task 2336
7. dezren39 commented on Nov 1, 2026

   

   dezren39

   on Nov 1, 2026

   MemberAuthor

   More actions

   🤖 Agent note · done

   • Agent: queue worker (repo-worker-code), lane B shift
   • Session / ID: queue task 2336 (triage)
   • Found via: queue claim
   • Task: Triage verdict for id: F12.6 audit log and OpenTelemetry export #1063 (F12.6 audit log and OpenTelemetry export).
   • Expectation: Verdict with fresh-HEAD citations + follow-up route — both delivered below.
   • Links: slice-1 fix task 4885 (queued, ungated); packet: hidden_files/packet-1063-code-fix.json

   Triage verdict: CONFIRMED — no structured audit log, no OTEL export; foundation already landed, route is a sliced slice 1

   Evidence (fresh, current main b56ccda5c, 2026-10-31 21:06 CDT, laptop primary origin/main):

   • pkgs/id/Cargo.toml:86-87: tracing + tracing-subscriber (env-filter) only — no opentelemetry dependency, no OTLP exporter anywhere in pkgs/id.
   • "Audit" in pkgs/id/src is journal annotation only: world/handle.rs:576/736 and world/actor.rs:86/133 record a moderator/builder participant "for the audit journal"; world/core.rs:295/299 are audit-only journal comments. There is no audit record type, no sink, and nothing replayable.
   • The auditable surface is enumerable: the world actor's admin commands in pkgs/id/src/world/actor.rs (granted-set change ~L144, ceiling replace ~L150, runtime profile ~L155, AdminScheduleAt/AdminCancelSchedule, isolation, cross-world force), and provider-use accounting already exists as CapUsage in world_caps.rs.

   Dependency state: the foundation this builds on — #553 (F11.7 host metrics, Prometheus endpoint, tracing spans) — is CLOSED. Nothing gates slice 1.

   Route — sliced, because the full F12.6 is effort/l:

   • Slice 1 enqueued as queue task 4885 (kind small_fix, packet packet-1063-code-fix.json, ungated): one structured audit record (timestamp, world, authority/actor, action, outcome — never credentials) for every admin command, accepted or refused, through a single sink; provider-use records (grant / denial / first-use grant) from CapUsage in the same shape; and the issue's own exit test in miniature — replaying a scripted session's audit log reconstructs the final grants and ceiling exactly. The PR states the sink choice (reserved tracing target vs dedicated audit journal) and why.
   • Slice 2 (not yet enqueued): OpenTelemetry/OTLP export of these records. Enqueue it when slice 1 lands — exporting a log that does not exist yet is not a coherent packet.

   This issue stays open (tracker for both slices) with queue/queued for task 4885.
8. 39 remaining items

   Load more
9. dezren39

   added

   queue/queuedHas a queued task in the Supabase agent queueHas a queued task in the Supabase agent queue

   and removed

   work/assignedQueue worker lifecycle stateQueue worker lifecycle state

   on Nov 1, 2026
10. developing-today

    added

    status/needs-triageNot yet triaged; needs a first lookNot yet triaged; needs a first look

    task/triageQueue packet kind: verify, reproduce, and route this itemQueue packet kind: verify, reproduce, and route this item

    on Nov 3, 2026
11. developing-today commented on Nov 3, 2026

    

    developing-todayBot

    on Nov 3, 2026 – with developing.today

    Contributor

    More actions

    agent-note:v1
    state: reviewed (coverage loop-back)
    Coverage pass 2026-11-03, loop-back review: this issue was re-reviewed (drift / overlap / already-handled / stale / blockers / ordering) so every open issue in the four repos is reviewed and in the system. Verdict: still live; in the system as task 6819 (triage, queued, priority 50) in repo-health-code-pilot. Labels audited and synced. If it is already handled at current main, its triage closes it with evidence; if oversized, the triage files the split; blockers belong on this issue.
    Found via: coverage loop-back 2026-11-03
12. dezren39

    added

    work/assignedQueue worker lifecycle stateQueue worker lifecycle state

    queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

    status/in-progressQueue worker lifecycle stateQueue worker lifecycle state

    and removed

    status/needs-triageNot yet triaged; needs a first lookNot yet triaged; needs a first look

    queue/queuedHas a queued task in the Supabase agent queueHas a queued task in the Supabase agent queue

    on Nov 3, 2026
13. dezren39 commented on Nov 3, 2026

    

    dezren39

    on Nov 3, 2026

    MemberAuthor

    More actions

    🤖 Agent note · picked up

    • Agent: queue worker (repo-worker-code), OpenChamber scheduled lane
    • Session / ID: OpenCode session ses_e5e5c92c976ffecr0afyhIsazx; queue task 6819 (triage)
    • Found via: atomic queue claim
    • Task: Revalidate the existing F12.6 verdict against current main and PR feat(id): structured audit log of admin actions and provider use (#1063) #4017, then record whether the F12.14 dependency gate (id: F12.14 portals — cross-world messaging by mutual grant #1068 / task 4888) has moved.
    • Expectation: verified disposition with fresh evidence, dependent-issue status note, and labels synced; no parallel implementation.
    • Links: task 6819; id: F12.6 audit log and OpenTelemetry export #1063; id: F12.14 portals — cross-world messaging by mutual grant #1068; PR feat(id): structured audit log of admin actions and provider use (#1063) #4017
14. dezren39 commented on Nov 3, 2026

    

    dezren39

    on Nov 3, 2026

    MemberAuthor

    More actions

    🤖 Agent note · done

    • Agent: queue worker (repo-worker-code), OpenChamber scheduled lane
    • Session / ID: OpenCode session ses_e5e5c92c976ffecr0afyhIsazx; queue task 6819 (triage)
    • Found via: atomic queue claim
    • Task: Revalidated the F12.6 triage verdict against current main and PR feat(id): structured audit log of admin actions and provider use (#1063) #4017.
    • Expectation: Verified disposition with dependent-gate status recorded; no parallel implementation.
    • Verdict: CONFIRMED. Current origin/main e425b6af52c35067a452c0c4526fef47f00c7f01 has no structured id::audit implementation or OTLP exporter under pkgs/id; id(world): F11.7 host metrics, Prometheus endpoint and tracing spans #553 (F11.7 foundation) is closed. PR feat(id): structured audit log of admin actions and provider use (#1063) #4017 is the existing slice-1 implementation, still OPEN and unmerged. gh pr checks reports CodeRabbit skipped and no required CI results, so do not treat the slice as landed. id: F12.6 audit log and OpenTelemetry export #1063 remains open as tracker (including the later OTLP slice).
    • Dependent gate: id: F12.14 portals — cross-world messaging by mutual grant #1068 / task 4888 remains blocked pending the implementation prerequisites; status update posted on id: F12.14 portals — cross-world messaging by mutual grant #1068.
    • Links: task 6819; PR feat(id): structured audit log of admin actions and provider use (#1063) #4017; id: F12.14 portals — cross-world messaging by mutual grant #1068; task 4888
15. dezren39

    removed

    status/in-progressQueue worker lifecycle stateQueue worker lifecycle state

    queue/claimedQueue worker lifecycle stateQueue worker lifecycle state

    work/assignedQueue worker lifecycle stateQueue worker lifecycle state

    on Nov 3, 2026