Audit Skill

Query and review audit trail logs for transparency and decision tracing

Commands

MCP Integration

This skill uses the bkit_audit_query MCP tool to retrieve audit data.

How to Execute

1. Show Recent Logs
   • Call bkit_audit_query with action list
   • Display results in a table format with timestamp, type, and summary
2. Search Logs
   • Call bkit_audit_query with action search and the user's query
   • Filter by date range if --from and --to are provided
   • Filter by type if --type is provided (e.g., decision, action, error)
3. Generate Summary
   • Call bkit_audit_query with action summary
   • Aggregate entries by type and provide counts
   • Highlight key decisions and their outcomes

Audit Entry Types

Output Format

## Audit Log Report

### Period: {from} to {to}

| Timestamp | Type | Summary |
|-----------|------|---------|
| 2026-04-09 14:23 | decision | Selected gap-detector agent for verification |
| 2026-04-09 14:24 | action | Modified src/api/auth.js (lines 45-67) |

### Statistics
- Total entries: N
- Decisions: N | Actions: N | Errors: N

Data Location

Audit logs are stored in .bkit/audit/ directory:

• .bkit/audit/sessions/ - Per-session audit trails
• .bkit/audit/decisions/ - Decision trace records

Integration with PDCA

Audit is part of the Check phase:

1. Use /audit summary to review what happened during Do phase
2. Cross-reference with /pdca analyze results
3. Verify all decisions align with the Design document