Scrydon

Catalogue du journal d'événements

Ensemble des événements d'audit, de workflow et d'intégrité enregistrés par Scrydon.

Scrydon n'accepte que les actions et types de ressources de ce catalogue. Cette page utilise le même registre côté client que les émetteurs et la validation du serveur : une valeur acceptée apparaît donc toujours ici.

Consultez Journalisation d'audit pour la conservation, l'exportation, le transfert SIEM et les champs de chaque événement.

Actions d'audit

Les entrées d'autorisation couvrent chaque combinaison d'action (read, write, delete, execute, admin, retire) et de résultat (GRANTED, DENIED, INDETERMINATE). Une décision produit une seule entrée. Le sujet évalué est conservé dans la preuve bornée, tandis que producer identifie le workload Scrydon authentifié qui l'a soumise.

ActionClé du registre
SECRET_CREATESECRET_CREATE
SECRET_UPDATESECRET_UPDATE
SECRET_DELETESECRET_DELETE
SECRET_ACCESSSECRET_ACCESS
PROVIDER_CREATEPROVIDER_CREATE
PROVIDER_UPDATEPROVIDER_UPDATE
PROVIDER_DELETEPROVIDER_DELETE
PROVIDER_TESTPROVIDER_TEST
RESOURCE_CREATERESOURCE_CREATE
RESOURCE_UPDATERESOURCE_UPDATE
RESOURCE_DELETERESOURCE_DELETE
RESOURCE_ACCESSRESOURCE_ACCESS
ontology.entity.changedONTOLOGY_ENTITY_CHANGED
ontology.effect.requestedONTOLOGY_EFFECT_REQUESTED
ontology.materialization-cursor.resumedONTOLOGY_MATERIALIZATION_CURSOR_RESUMED
AUTH_READ_DENIEDAUTH_READ_DENIED
AUTH_WRITE_DENIEDAUTH_WRITE_DENIED
AUTH_DELETE_DENIEDAUTH_DELETE_DENIED
AUTH_EXECUTE_DENIEDAUTH_EXECUTE_DENIED
AUTH_ADMIN_DENIEDAUTH_ADMIN_DENIED
AUTH_RETIRE_DENIEDAUTH_RETIRE_DENIED
AUTH_READ_GRANTEDAUTH_READ_GRANTED
AUTH_WRITE_GRANTEDAUTH_WRITE_GRANTED
AUTH_DELETE_GRANTEDAUTH_DELETE_GRANTED
AUTH_EXECUTE_GRANTEDAUTH_EXECUTE_GRANTED
AUTH_ADMIN_GRANTEDAUTH_ADMIN_GRANTED
AUTH_RETIRE_GRANTEDAUTH_RETIRE_GRANTED
AUTH_READ_INDETERMINATEAUTH_READ_INDETERMINATE
AUTH_WRITE_INDETERMINATEAUTH_WRITE_INDETERMINATE
AUTH_DELETE_INDETERMINATEAUTH_DELETE_INDETERMINATE
AUTH_EXECUTE_INDETERMINATEAUTH_EXECUTE_INDETERMINATE
AUTH_ADMIN_INDETERMINATEAUTH_ADMIN_INDETERMINATE
AUTH_RETIRE_INDETERMINATEAUTH_RETIRE_INDETERMINATE
EXECUTION_GRANT_CREATEDEXECUTION_GRANT_CREATED
EXECUTION_GRANT_REJECTEDEXECUTION_GRANT_REJECTED
EXECUTION_GRANT_BOUNDEXECUTION_GRANT_BOUND
EXECUTION_GRANT_DERIVEDEXECUTION_GRANT_DERIVED
EXECUTION_GRANT_VALIDATEDEXECUTION_GRANT_VALIDATED
EXECUTION_GRANT_REVOKEDEXECUTION_GRANT_REVOKED
EXECUTION_GRANT_EXPIREDEXECUTION_GRANT_EXPIRED
AUTHORIZATION_CONTEXT_CREATEDAUTHORIZATION_CONTEXT_CREATED
AUTHORIZATION_CONTEXT_REAUTHORIZEDAUTHORIZATION_CONTEXT_REAUTHORIZED
AUTHORIZATION_CONTEXT_RESOLVEDAUTHORIZATION_CONTEXT_RESOLVED
AUTHORIZATION_CONTEXT_REJECTEDAUTHORIZATION_CONTEXT_REJECTED
AUTHORIZATION_CONTEXT_REVOKEDAUTHORIZATION_CONTEXT_REVOKED
AUTHORIZATION_CONTEXT_EXPIREDAUTHORIZATION_CONTEXT_EXPIRED
authz.audit.policy.updatedAUTHZ_AUDIT_POLICY_UPDATED
isolation.policy.updatedISOLATION_POLICY_UPDATED
llm_router.routes.updatedLLM_ROUTER_ROUTES_POLICY_UPDATED
voice.on_device_speakers.updatedVOICE_ON_DEVICE_SPEAKERS_POLICY_UPDATED
credential_policy.updatedCREDENTIAL_POLICY_UPDATED
AGENT_EXECUTION_ISOLATION_RELAXEDAGENT_EXECUTION_ISOLATION_RELAXED
EXTENSION_ENTITLEMENT_MODE_CHANGEEXTENSION_ENTITLEMENT_MODE_CHANGE
EXTENSION_ENTITLEMENT_GRANTEXTENSION_ENTITLEMENT_GRANT
EXTENSION_ENTITLEMENT_REVOKEEXTENSION_ENTITLEMENT_REVOKE
EXTENSION_ENTITLEMENT_UPDATEEXTENSION_ENTITLEMENT_UPDATE
EXTENSION_ACCESS_DENIEDEXTENSION_ACCESS_DENIED
EXTENSION_CREDENTIAL_RESOLVEDEXTENSION_CREDENTIAL_RESOLVED
EXTENSION_UPGRADEDEXTENSION_UPGRADED
EXTENSION_ROLLED_BACKEXTENSION_ROLLED_BACK
EXTENSION_ENABLEEXTENSION_ENABLE
EXTENSION_DISABLEEXTENSION_DISABLE
EXTENSION_DEPRECATEEXTENSION_DEPRECATE
EXTENSION_CANCEL_DEPRECATIONEXTENSION_CANCEL_DEPRECATION
acs.decision.recordedACS_DECISION_RECORDED
acs.decision.deniedACS_DECISION_DENIED
extension.execution.startedEXTENSION_EXECUTION_STARTED
extension.execution.succeededEXTENSION_EXECUTION_SUCCEEDED
extension.execution.failedEXTENSION_EXECUTION_FAILED
MCP_TOOL_EXECUTEDMCP_TOOL_EXECUTED
MCP_SERVER_AVAILABILITY_CHANGEDMCP_SERVER_AVAILABILITY_CHANGED
EXTENSION_DYNAMIC_TOOLS_AUTHORIZEDEXTENSION_DYNAMIC_TOOLS_AUTHORIZED
EXTENSION_DYNAMIC_TOOLS_REVOKEDEXTENSION_DYNAMIC_TOOLS_REVOKED
EXTENSION_DYNAMIC_TOOLS_SYNCEDEXTENSION_DYNAMIC_TOOLS_SYNCED
EXTENSION_DYNAMIC_TOOLS_WITHHELDEXTENSION_DYNAMIC_TOOLS_WITHHELD
EXTENSION_DYNAMIC_TOOLS_REJECTEDEXTENSION_DYNAMIC_TOOLS_REJECTED
a2a.publication.createdA2A_PUBLICATION_CREATED
a2a.publication.updatedA2A_PUBLICATION_UPDATED
a2a.publication.republishedA2A_PUBLICATION_REPUBLISHED
a2a.publication.unpublishedA2A_PUBLICATION_UNPUBLISHED
a2a.task.createdA2A_TASK_CREATED
a2a.task.canceledA2A_TASK_CANCELED
a2a.push_config.createdA2A_PUSH_CONFIG_CREATED
a2a.push_config.deletedA2A_PUSH_CONFIG_DELETED
a2a.push_delivery.dead_letteredA2A_PUSH_DELIVERY_DEAD_LETTERED
extension.catalog.uploadedEXTENSION_CATALOG_UPLOADED
extension.catalog.retiredEXTENSION_CATALOG_RETIRED
extension.environment.enabledEXTENSION_ENVIRONMENT_ENABLED
extension.environment.disabledEXTENSION_ENVIRONMENT_DISABLED
extension.upgrade.proposedEXTENSION_UPGRADE_PROPOSED
extension.upgrade.publishedEXTENSION_UPGRADE_PUBLISHED
extension_source.createdEXTENSION_SOURCE_CREATED
extension_source.updatedEXTENSION_SOURCE_UPDATED
extension_source.deletedEXTENSION_SOURCE_DELETED
extension_source.signature_policy_changedEXTENSION_SOURCE_SIGNATURE_POLICY_CHANGED
extension_source.sync_triggeredEXTENSION_SOURCE_SYNC_TRIGGERED
extension_source.sync_failedEXTENSION_SOURCE_SYNC_FAILED
extension_source.unsigned_policy_usedEXTENSION_SOURCE_UNSIGNED_POLICY_USED
environment.createWORKSPACE_ENVIRONMENT_CREATED
environment.updateWORKSPACE_ENVIRONMENT_UPDATED
environment.deleteWORKSPACE_ENVIRONMENT_DELETED
SUBSCRIPTION_CREATEAUDIT_SUBSCRIPTION_CREATE
audit.testAUDIT_TEST
audit.exportAUDIT_EXPORT
audit.retention.updatedAUDIT_RETENTION_UPDATED
audit.chain.checkpointAUDIT_CHAIN_CHECKPOINT
audit.chain.verifyAUDIT_CHAIN_VERIFY
dlp.policy.activatedDLP_POLICY_ACTIVATED
dlp.policy.updatedDLP_POLICY_UPDATED
dlp.policy.reviewedDLP_POLICY_REVIEWED
dlp.policy.review_overdueDLP_POLICY_REVIEW_OVERDUE
dlp.scan.inputDLP_SCAN_INPUT
dlp.scan.outputDLP_SCAN_OUTPUT
dlp.violationDLP_VIOLATION
dlp.action_takenDLP_ACTION_TAKEN
dlp.override.grantedDLP_OVERRIDE_GRANTED
dlp.override.rejectedDLP_OVERRIDE_REJECTED
dlp.classifier.degradedDLP_CLASSIFIER_DEGRADED
dlp.prompt_injection.detectedDLP_PROMPT_INJECTION_DETECTED
dlp.hits.acknowledgedDLP_HITS_ACKNOWLEDGED
dlp.exception.activatedDLP_EXCEPTION_ACTIVATED
dlp.exception.expiredDLP_EXCEPTION_EXPIRED
dlp.pre_action.blockedDLP_PRE_ACTION_BLOCKED
company_context.ensuredCOMPANY_CONTEXT_ENSURED
company_context.page.createCOMPANY_CONTEXT_PAGE_CREATE
company_context.page.updateCOMPANY_CONTEXT_PAGE_UPDATE
company_context.page.deleteCOMPANY_CONTEXT_PAGE_DELETE
company_context.page.reclassifyCOMPANY_CONTEXT_PAGE_RECLASSIFY
company_context.source.ingestCOMPANY_CONTEXT_SOURCE_INGEST
company_context.source.retryCOMPANY_CONTEXT_SOURCE_RETRY
company_context.source.bulk-deleteCOMPANY_CONTEXT_SOURCE_BULK_DELETE
company_context.folder.deleteCOMPANY_CONTEXT_FOLDER_DELETE
moderation.policy.updatedMODERATION_POLICY_UPDATED
moderation.policy.hitMODERATION_POLICY_HIT
classification.scheme_updatedCLASSIFICATION_SCHEME_UPDATED
classification.document_labelledCLASSIFICATION_DOCUMENT_LABELLED
classification.endpoint_ratedCLASSIFICATION_ENDPOINT_RATED
classification.aggregation_cappedCLASSIFICATION_AGGREGATION_CAPPED
security.clearance_grantedCLEARANCE_GRANTED
security.clearance_override_createdCLEARANCE_OVERRIDE_CREATED
security.clearance_baseline_setCLEARANCE_BASELINE_SET
security.clearance_revokedCLEARANCE_REVOKED
security.sessions_terminatedSESSIONS_TERMINATED
security.spillage_detectedSPILLAGE_DETECTED
security.clearance_egress_blockedCLEARANCE_EGRESS_BLOCKED
impersonation.session.createdIMPERSONATION_SESSION_CREATED
scim.user.provisionedSCIM_USER_PROVISIONED
scim.user.updatedSCIM_USER_UPDATED
scim.user.deactivatedSCIM_USER_DEACTIVATED
scim.user.reactivatedSCIM_USER_REACTIVATED
scim.user.linkedSCIM_USER_LINKED
scim.group.createdSCIM_GROUP_CREATED
scim.group.updatedSCIM_GROUP_UPDATED
scim.group.deletedSCIM_GROUP_DELETED
scim.group.member_addedSCIM_GROUP_MEMBER_ADDED
scim.group.member_removedSCIM_GROUP_MEMBER_REMOVED
scim.token.generatedSCIM_TOKEN_GENERATED
scim.token.revokedSCIM_TOKEN_REVOKED
sso.provider.registeredSSO_PROVIDER_REGISTERED
sso.provider.updatedSSO_PROVIDER_UPDATED
sso.provider.deletedSSO_PROVIDER_DELETED
sso.enforcement.changedSSO_ENFORCEMENT_CHANGED
sso.idp_initiated.changedSSO_IDP_INITIATED_CHANGED
sso.domain_verification.requestedSSO_DOMAIN_VERIFICATION_REQUESTED
sso.domain.verifiedSSO_DOMAIN_VERIFIED
sso.domain_verification.bypassedSSO_DOMAIN_VERIFICATION_BYPASSED
sso.domain_verification.requiredSSO_DOMAIN_VERIFICATION_REQUIRED
sso.signing_key.changedSSO_SIGNING_KEY_CHANGED
sso.assurance.changedSSO_ASSURANCE_CHANGED
sso.metadata_anchors.changedSSO_METADATA_ANCHORS_CHANGED
sso.assurance.refusedSSO_ASSURANCE_REFUSED
sso.change.requestedSSO_CHANGE_REQUESTED
sso.change.approvedSSO_CHANGE_APPROVED
sso.change.rejectedSSO_CHANGE_REJECTED
sso.dual_control.changedSSO_DUAL_CONTROL_CHANGED
table.createTABLE_CREATE
table.updateTABLE_UPDATE
table.deleteTABLE_DELETE
table.archiveTABLE_ARCHIVE
table.restoreTABLE_RESTORE
table.writeTABLE_WRITE
table.external_commit_reconciledTABLE_EXTERNAL_COMMIT_RECONCILED
table.maintenance_snapshots_expiredTABLE_MAINTENANCE_SNAPSHOTS_EXPIRED
table.maintenance_completedTABLE_MAINTENANCE_COMPLETED
table.orphan_reclaimedTABLE_ORPHAN_RECLAIMED
table.warehouse_drift_detectedTABLE_WAREHOUSE_DRIFT_DETECTED
table.warehouse_profile_reconciledTABLE_WAREHOUSE_PROFILE_RECONCILED
table.orphan_detectedTABLE_ORPHAN_DETECTED
table.cutover_startedTABLE_CUTOVER_STARTED
table.cutover_completedTABLE_CUTOVER_COMPLETED
table.cutover_failedTABLE_CUTOVER_FAILED
policy.compilePOLICY_COMPILE
data_source.appliedDATA_SOURCE_APPLIED
data-source.resolve-conflictDATA_SOURCE_RESOLVE_CONFLICT
data-source.pauseDATA_SOURCE_PAUSE
data-source.resumeDATA_SOURCE_RESUME
data-source.removeDATA_SOURCE_REMOVE
policy.createPOLICY_CREATE
policy.updatePOLICY_UPDATE
policy.deletePOLICY_DELETE
iceberg.configICEBERG_CONFIG
iceberg.catalogICEBERG_CATALOG
egress.blockedEGRESS_BLOCKED
egress.allowedEGRESS_ALLOWED
extension.connection.createdEXTENSION_CONNECTION_CREATED
extension.connection.updatedEXTENSION_CONNECTION_UPDATED
extension.connection.deletedEXTENSION_CONNECTION_DELETED
chat.admin.accessCHAT_ADMIN_ACCESS
chat.message.truncatedCHAT_MESSAGE_TRUNCATED
chat.history.searchCHAT_HISTORY_SEARCH
chat.conversation.archivedCHAT_CONVERSATION_ARCHIVED
chat.conversation.deletedCHAT_CONVERSATION_DELETED
chat.conversation.createdCHAT_CONVERSATION_CREATED
chat.message.sentCHAT_MESSAGE_SENT
chat.message.receivedCHAT_MESSAGE_RECEIVED
chat.message.abortedCHAT_MESSAGE_ABORTED
cortex.plan.builtCORTEX_PLAN_BUILT
cortex.plan.failedCORTEX_PLAN_FAILED
cortex.plan.messageCORTEX_PLAN_MESSAGE
SIGNIN_FAILEDSIGNIN_FAILED
SIGNIN_RATE_LIMITEDSIGNIN_RATE_LIMITED
2FA_FAILEDTWO_FACTOR_FAILED
SESSION_CREATESESSION_CREATE
SESSION_REVOKESESSION_REVOKE
super_admin.role.grantedSUPER_ADMIN_ROLE_GRANTED
super_admin.org_membership.grantedSUPER_ADMIN_ORG_MEMBERSHIP_GRANTED
super_admin.org_membership.elevatedSUPER_ADMIN_ORG_MEMBERSHIP_ELEVATED
service_account.permissions.updatedSERVICE_ACCOUNT_PERMISSIONS_UPDATED
service_account.credential.connectedSERVICE_ACCOUNT_CREDENTIAL_CONNECTED
service_account.credential.disconnectedSERVICE_ACCOUNT_CREDENTIAL_DISCONNECTED
extension.account.owner_reassignedEXTENSION_ACCOUNT_OWNER_REASSIGNED
peer.registeredPEER_REGISTERED
peer.revokedPEER_REVOKED
trusted_issuer.registeredTRUSTED_ISSUER_REGISTERED
federated_credential.attachedFEDERATED_CREDENTIAL_ATTACHED
trusted_issuer.removedTRUSTED_ISSUER_REMOVED
federated_credential.revokedFEDERATED_CREDENTIAL_REVOKED
api_key.revokedAPI_KEY_REVOKED

Types de ressources d'audit

Type de ressourceClé du registre
acsStepACS_STEP
secretSECRET
secretProviderSECRET_PROVIDER
ssoProviderSSO_PROVIDER
userUSER
organizationORGANIZATION
organizationMemberORGANIZATION_MEMBER
workspaceWORKSPACE
workspaceEnvironmentWORKSPACE_ENVIRONMENT
fileFILE
workflowWORKFLOW
knowledgeBaseKNOWLEDGE_BASE
kb_pageKB_PAGE
documentDOCUMENT
folderFOLDER
templateTEMPLATE
processFlowPROCESS_FLOW
processTemplateprocess_flow
scheduleSCHEDULE
memoryMEMORY
chatCHAT
webhookWEBHOOK
copilotToolCOPILOT_TOOL
extensionEXTENSION
extensionEntitlementEXTENSION_ENTITLEMENT
mcpServerMCP_SERVER
a2aAgentA2A_AGENT
a2aTaskA2A_TASK
a2aPushConfigA2A_PUSH_CONFIG
extension_sourceEXTENSION_SOURCE
eventLogReceiverAUDIT_LOG_SUBSCRIPTION
eventLogAUDIT_LOG
eventLogRetentionConfigAUDIT_LOG_RETENTION_CONFIG
auditChainAUDIT_CHAIN
sessionSESSION
userClearanceUSER_CLEARANCE
organizationPolicyORGANIZATION_POLICY
extension_connectionEXTENSION_CONNECTION
dlpHitsDLP_HITS
organizationExtensionAccountORGANIZATION_EXTENSION_ACCOUNT
dlpPolicyDLP_POLICY
moderationPolicyMODERATION_POLICY
UserSCIM_USER
GroupSCIM_GROUP
TokenSCIM_TOKEN
sandbox-egressSANDBOX_EGRESS
managed_tableMANAGED_TABLE
managed-tableMANAGED_TABLE_HYPHENATED
policy-bundlePOLICY_BUNDLE
data_sourceDATA_SOURCE
data-sourceDATA_SOURCE_HYPHENATED
data-access-policyDATA_ACCESS_POLICY
iceberg_catalogICEBERG_CATALOG
chat_conversationCHAT_CONVERSATION
chat_message_embeddingCHAT_MESSAGE_EMBEDDING
chat_messageCHAT_MESSAGE
workflow_planWORKFLOW_PLAN
extensionInstallEXTENSION_INSTALL
policyExecutionGrantPOLICY_EXECUTION_GRANT
authorizationContextAUTHORIZATION_CONTEXT
objectTypeOBJECT_TYPE
linkTypeLINK_TYPE
actionTypeACTION_TYPE
objectInstanceOBJECT_INSTANCE
linkInstanceLINK_INSTANCE
ontologyEffectONTOLOGY_EFFECT
ontologyBranchONTOLOGY_BRANCH
extensionCatalogEXTENSION_CATALOG
serviceAccountSERVICE_ACCOUNT
serviceAccountCredentialSERVICE_ACCOUNT_CREDENTIAL
trustedIssuerTRUSTED_ISSUER
serviceAccountFederatedCredentialSERVICE_ACCOUNT_FEDERATED_CREDENTIAL
apikeyAPI_KEY
peerClientPEER_CLIENT

Événements de workflow

ActionClé du registre
workflow.scheduledSCHEDULED
workflow.startedSTARTED
workflow.pausedPAUSED
workflow.resumedRESUMED
workflow.completedCOMPLETED
workflow.failedFAILED
workflow.terminatedTERMINATED
workflow.cancelledCANCELLED
workflow.purgedPURGED

Ressources : workflowworkflow-executionworkflow-schedule

Événements d'intégrité

ActionClé du registre
integrity.event-log.verification-failedAUDIT_LOG_VERIFICATION_FAILED
integrity.event-log.checkpoint-failedAUDIT_LOG_CHECKPOINT_FAILED
integrity.event-log.telemetry-droppedAUDIT_LOG_TELEMETRY_DROPPED
integrity.dapr-history.verification-failedDAPR_HISTORY_VERIFICATION_FAILED
integrity.dapr-history.configuration-mismatchDAPR_SIGNING_CONFIGURATION_MISMATCH
integrity.incident.acknowledgedINCIDENT_ACKNOWLEDGED
integrity.incident.recoveredINCIDENT_RECOVERED

Ressources : event-log-chainevent-log-checkpointevent-log-telemetrydapr-workflow-historyintegrity-incident

Événements classifiés

La liste, la liste filtrée et l'exportation NDJSON appliquent la même règle d'habilitation. Si un événement dépasse le rang du lecteur ou utilise un autre schéma de classification, Scrydon conserve l'action, l'acteur, l'organisation, l'horodatage, les éléments de décision et la chaîne d'intégrité, mais remplace l'identifiant de ressource et le contexte sensible par null. La ligne contient redacted: true et l'interface affiche un cadenas.

Les organisations sans données d'habilitation conservent le comportement antérieur. Les lignes historiques ne sont pas reclassifiées.

Intégrité

Chaque nouvel événement rejoint une chaîne SHA-256 obligatoire propre à son organisation ou au périmètre global. Les points de contrôle signés avec ML-DSA-65 sont vérifiables depuis le journal d'événements ou par l'API. La chaîne ne s'applique qu'aux nouvelles lignes ; les anciennes conservent des champs de chaîne nuls.

La preuve des décisions d'autorisation est toujours complète par politique ; il n'existe aucun niveau de journalisation à l'exécution. Une mise en file locale dégradée déclenche une alerte et ne peut être réconciliée qu'avec l'identifiant et le payload exacts de la décision d'origine.

Sur cette page

Sur cette page