Audit metadata
Scoped run metadata and known own-principal request links, separate from protected evidence; deployment-gated.
List Agent Audit Runs
Page safe retained Organization run metadata under current reporting authority and original ownership. Services require prospective runtime-start attribution; protected evidence is excluded. Requires `audit:read`.
Get Agent Audit Run
Read one authorized retained run metadata record inside a bounded time window. Recorded runtime status does not prove external success; no protected evidence or another principal request content is returned. Requires `audit:read`.