Audit and replay

Tamper-evident events capture who ran which bash, path, MCP, or prompt action—under which policy, with what outcome—so audits and retros have a replay you can trust.

Why it matters

Incidents lack evidence when agent actions lived only in a local chat transcript. Relay records allow and deny outcomes for every control channel.

What gets recorded

• Requester / seat
• Control channel (bash, path, MCP, prompt)
• Action requested
• Policy rule that matched
• Allow or deny result and reason
• Timestamp

Retention

Audit log retention follows your Relay / Full Platform plan. See published limits on exemplar.dev/pricing —do not assume longer retention than your plan includes.