Architecture · Agent Fabric Audit
Emit async. Append once. Examine by correlation.
Emit async. Append once. Examine by correlation.
AFD, ADP, AR, and ACR emit audit events asynchronously to AADP. AADP appends to Postgres audit. AACP queries chains for ops. Observability is a separate ops path.
PRODUCERS
THIS BOX
EXAMINE
ASYNC
QUERY
AFD
ADP
AR
ACR
AADP
Audit Data Plane
:3012 · Postgres audit
append-only · idempotent
events table
correlation_id · session_id · payload
AACP
Audit Control Plane
:3013 · no database
Ops / risk UI
chains · workflows · search
OTel / LGTM — ops path, not evidence store
LEGEND
async emit (fail-open)
AADP