> ## Documentation Index
> Fetch the complete documentation index at: https://docs.frayme.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Audit trail

> The why behind every decision. What gets logged and what doesn't.

The audit trail is the **why** behind every decision. Append-only, hash-chained, and shipped to an offsite mirror within minutes. Compliance reads from it; engineers can't write to it after the fact.

## What gets logged

<AccordionGroup>
  <Accordion title="Every API call">
    The route, the actor, the status, and the elapsed time. PII fields are redacted to hashes; the full payload is referenced by hash for export.
  </Accordion>

  <Accordion title="Every workflow run">
    Full execution history — which nodes ran, what they read, what they wrote, how long they took, what they returned.
  </Accordion>

  <Accordion title="Every regulator submission">
    The submission code, narrative hash, approver identity, regulator-returned reference number, and the destination jurisdiction. Globally framed so the same record format covers COAF in Brazil, FinCEN in the US, MAS in Singapore, and any future destination.
  </Accordion>
</AccordionGroup>

## What is not in the log

* **Image binaries** (selfies, document scans) — stored at the identity vendor with a separate, longer retention.
* **PII payloads** beyond redacted hashes — to keep the log queryable without becoming a PII honeypot.
* **AI prompts and completions verbatim** — only the structured `outputFields` are persisted with the decision. The prompts are versioned with the workflow definition.