Each entry is cryptographically linked to the previous one, so tampering is detectable. Verify integrity re-derives the chain and confirms nothing was altered; filter by actor and page through the full history; and export to CSV or JSON for compliance evidence.

Activity vs. the ledger: Activity is the operational feed of agent actions (with each decision trail); the ledger additionally records every configuration change, sign-in, approval, and billing event - the complete system-of-record.

The compliance panel on the Audit ledger page provides three tools:

• Signed export - a tamper-evident envelope of the full chain that an auditor verifies offline with verifyLedgerExport() from the SDK - no platform access needed.
• External anchoring - POST signed chain-head anchors (hashes and counts only, never entry contents) to your own WORM store or SIEM. Set the anchor sink URL and anchor on demand; recent anchors are listed with their head hashes so an export can be corroborated against them.
• Retention - hosted operational records and ledger entries follow the plan window. Ledger cuts run separately, are announced before they happen, and leave signed checkpoints. Self-hosted ledger capping is disabled by default and remains under the operator's control.

Governance & spend analytics over a window you choose (7 / 30 / 90 days): effect totals, spend by agent, spend trend, denial reasons, top denied resources, action mix, and approval response times. Use it for QBRs, cost reviews, and tuning your policies.