Audit

Who did what, kept as a record: things created, changed, deleted, and changes to access.

Pattern

audit.*

Written with

log()

Intents

Levels

info

View as Markdown

Intents

audit.createdinfo

Someone created something that matters later: an account, a page, an API key

audit.changedinfo

Someone changed something that matters: settings, a role, a published page

audit.deletedinfo

Someone deleted something: a page, an account, content

audit.signedininfo

Someone signed in, the ordinary way

audit.signedoutinfo

Someone signed out

Recording one

Name what happened. The intent sets the level and whether it alerts.

// Someone created something that matters later: an account, a page, an API key
log('audit.created', 'Page created', { pageId: 'p_123', by: 'u_42' });

// Someone changed something that matters: settings, a role, a published page
log('audit.changed', 'Page settings saved', { pageId: 'p_123', fields: 'theme' });

// Someone deleted something: a page, an account, content
log('audit.deleted', 'Page deleted', { pageId: 'p_123', by: 'u_42' });

// Someone signed in, the ordinary way
log('audit.signedin', 'Something happened', {  });

// Someone signed out
log('audit.signedout', 'Something happened', {  });

Writes (audit.created)

{
  "intent": "audit.created",
  "level": "info",
  "alert": false,
  "message": "Page created",
  "data": {
    "pageId": "p_123",
    "by": "u_42"
  },
  "time": "2026-10-09T12:00:00.000Z"
}

Is it an audit entry?

Find the row that describes your case, and use the domain on the right.

If the problem is
Use
Who did what, kept as a record: things created, changed, deleted, and changes to access.
audit.* this page
Signals worth watching: failed sign-ins, bad tokens, rate limits, probing.
security.*
Something broke or degraded, and someone should look.
incident.*
Background work: syncs, backups, migrations, scheduled runs.
job.*
Detail for working on the code, dropped in production.
debug.*

For registry authors

Starter intents. These are the intents prongs add logs puts in your registry. Change levels through the level.* intents, and point log() at your logger.