8
Recorded events
Shows who changed what, when, and why across an incident and its approval and escalation path.
The audit history surface is now route-native in `apps/web`, making human actions, automation, approvals, escalation, and communication traceability part of the real app shell.
Recorded events
State or owner changes
Automated actions
External escalation
Short, scannable history showing the key actions an executive, auditor, or IT manager would care about.
| Time | Actor | Action | Why It Matters |
|---|---|---|---|
| 09:02 AM | System | Created `INC-2041` from service alert | Shows how incidents enter the platform automatically when a threshold is crossed. |
| 09:03 AM | Automation | SMS alert sent to on-call infrastructure team; John Doe notified | Shows AI / automation can trigger governed response actions immediately. |
| 09:11 AM | John Doe | Accepted ownership and began diagnosis | Shows human confirmation and accountable ownership. |
| 09:26 AM | AI Assist | Suggested runbook `NT-22053-123` attached | Shows AI as a support tool, not as the final decision-maker. |
| 09:44 AM | Infrastructure lead | Escalated to vendor with structured diagnostics pack | Shows when work left internal control and why the ticket may remain open. |
| 10:07 AM | Service desk lead | Posted stakeholder-facing update | Shows communication history, not just technical history. |