List the decision audit
Cursor-paginated audit of every permission decision ever taken on this host — by a human or by policy, including denials during unattended work. Every decision is recorded and reviewable afterwards.
Authorizations
Enforced on every transport, with no exempt operation. A person's request — over the default local unix socket exactly as over a TCP listener — must carry a JWT issued by the configured identity provider, which the host verifies itself against that issuer's key set: signature, issuer, expiry, and the person and organisation it names. Requests without a valid one receive 401 NRY-0011. The socket's file permissions are transport and are not an authorisation.
Query Parameters
Opaque pagination cursor from a previous page's nextCursor or prevCursor.
1024Maximum items per page.
1 <= x <= 100Filter to decisions taken in one session.
Filter to one outcome. deny is the audit's own question — what was refused, and why — and expired is the finding when somebody asks why an action did not happen and the answer is that nobody answered.
allow, deny, expired Only decisions whose requestedAt is at or after this instant. It is the half of "what was denied last week and why" that the decision filter alone cannot answer: without it an operator pages backwards from now until requestedAt drops out of the window they care about, which is a paging exercise rather than one call. Served off the same index as the cursor.
Only decisions whose requestedAt is at or before this instant. Combines with since to bound a window from both ends; either may be given alone. A window whose until precedes its since is a malformed request rather than an empty page, because an empty page reads as "nothing was denied".