How to see who accessed what, when, and for which client - useful for compliance, team oversight, and understanding how your Armbrain instance is being used.
Why It Matters
When you have team members accessing client data, you need visibility. Clients may ask "who has access to our data?" during contract negotiations. Your own operations benefit from knowing which clients are getting the most attention and which might be neglected.
The audit trail logs every significant action in Armbrain - searches, memory creation, client switches, and more. It is append-only, meaning entries cannot be edited or deleted.
Viewing the Audit Trail
You do not need to be switched to a specific client. The audit trail works at the account level:
"Show me the audit trail"This returns the most recent 50 entries across all clients.
Example output:
Recent audit entries:
1. 2026-04-04 15:30 - search_memory on Acme Corp (actor: you)
2. 2026-04-04 15:28 - switch_client to Acme Corp (actor: you)
3. 2026-04-04 14:15 - store_memory on BetaCorp (actor: team-sarah-123)
4. 2026-04-04 14:10 - briefing on BetaCorp (actor: team-sarah-123)
5. 2026-04-04 11:00 - switch_client to BetaCorp (actor: team-sarah-123)Filtering by Client
To see activity for a specific client:
"Show me the audit trail for Acme"This filters to only entries related to that client's client mind.
Filtering by Team Member
To see what a specific team member has been doing:
"Show me audit entries for Sarah"This is useful for:
- Verifying that team members are prepping before meetings
- Understanding which clients are getting the most team attention
- Reviewing activity after an incident or concern
What Gets Logged
Every tool call creates an audit entry with:
| Field | Description |
|---|---|
| Actor | Who performed the action (you or a team member) |
| Action | Which tool was used (e.g., search_memory, store_memory, switch_client) |
| Client Mind | Which client the action was scoped to |
| Resource type | What kind of data was accessed (memory, rock, issue, etc.) |
| Timestamp | When the action occurred |
| Details | Additional context about the action |
Common Use Cases
Client Compliance Questions
When a client asks about data access:
"Show me all access to Acme's data in the last 90 days"This gives you a clear answer for contract reviews and compliance conversations.
Team Activity Review
During your weekly team meeting:
"Show me the audit trail for the last 7 days"See which clients got attention and which might need it.
Investigating Issues
If something looks wrong with a client's data:
"Show me the last 20 audit entries for BetaCorp"Trace what happened and when.
Notes
- The audit trail is append-only. Entries are never modified or deleted. This is intentional for compliance.
- Audit logging is best-effort. If the logging system has an issue, it never blocks the actual operation. Your tools always work, even if a particular audit entry fails to record.
- The audit trail is scoped to your account. You cannot see other customers' audit logs.