Skip to content
v0.3

read.control.platform_audit

The platform’s audit ledger (‘who did what to which tenant’) — forge_control.command_audit, filtered + keyset-paginated (newest first). Control; platform actors only.

  • Surface: GET /v1/control/read/platform_audit
  • Auth:Control read (platform) — a PLATFORM credential is REQUIRED: a tenant or extension actor is forbidden, an anonymous caller unauthorized. This face is the fleet operator’s and is never tenant-bound, so whatever tenant scoping this read has comes from an explicit parameter below, never from the caller’s identity.
{
"properties": {
"actor_id": {
"minLength": 1,
"type": "string"
},
"command": {
"minLength": 1,
"type": "string"
},
"cursor": {
"minLength": 1,
"type": "string"
},
"from": {
"format": "date-time",
"pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$",
"type": "string"
},
"limit": {
"default": 24,
"maximum": 100,
"minimum": 1,
"type": "integer"
},
"status": {
"minLength": 1,
"type": "string"
},
"tenant": {
"minLength": 1,
"type": "string"
},
"to": {
"format": "date-time",
"pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$",
"type": "string"
}
},
"type": "object"
}

Open (unknown) — this capability does not declare an output schema.

validation_failed (400) · not_found (404) · unauthorized (401) · forbidden (403)