aios/aios

Files

T

openclaw 9dad8b57a7 feat(cmd): implement Agent Command Plane and Audit Plane (V1R3C1)

CMD-20260708-fix-git-actions-write-and-enable-audit-plane

- Fix: gitops.tokens gitops-write-bot SHA256 hash sync
- Add: agents/ command registry + directory structure
- Add: audit/ full execution audit plane
- Add: evidence/ CMD report files
- Add: docs/architecture/AIOS_AGENT_AUDIT_PLANE.md

Closes CMD-20260708. Next: CMD-20260709-autonomous-controller-enable

2026-07-08 15:38:18 +08:00

1.8 KiB

Raw Blame History

AIOS Agent Audit Plane Architecture

Overview

The AIOS Agent Audit Plane provides a complete traceability framework for all autonomous agent operations on the AIOS GitOps repository. Every agent action — from command discovery to execution to version promotion — is recorded, versioned, and auditable.

Architecture

Git Repository
    |
    v
Agent Command Plane (agents/commands/)
    |   active/  running/  completed/  failed/
    |   + registry.yaml
    v
[OpenClaw | Hermes | Codex]
    |
    +---> Execution
    |         |
    |         v
    |     evidence/<CMD-ID>/   (detection, execution, test, final)
    |
    +---> Audit
    |         |
    |         v
    |     audit/agent-runs/        (per-agent log)
    |     audit/command-history/   (per-command log)
    |     audit/version-history/   (per-baseline log)
    |
    +---> Git Commit
              |
              v
          Web UI Timeline
              /admin/ai-history

Data Flow

CMD file lands in agents/commands/active/
Agent picks it up, reads it
Agent executes, writes evidence to evidence/<CMD-ID>/
Agent writes audit record to audit/agent-runs/
Git commit locks the audit record
Web UI displays timeline from git history

Audit Record Schema

{
  "id": "",
  "command": "CMD-20260708-...",
  "agent": "openclaw",
  "version": "V1R3C1",
  "start_time": "",
  "end_time": "",
  "interaction_count": 0,
  "objective": "",
  "input_source": "git",
  "actions": [],
  "result": "",
  "evidence": "",
  "commit": "",
  "approval": ""
}

Ownership

All agent modifications must be bound to a version (e.g., V1R3C1)
Every code change must be traceable to who/what agent created it
No agent-created changes without audit trail

1.8 KiB Raw Blame History