Audit Evidence

Anchor makes privileged activity easier to review by recording the context around important operations.

Evidence dimensions

• Actor: who requested or performed the action.
• Target: which resource or account was involved.
• Policy: what rules governed the action.
• Operation: what was requested.
• Result: whether it succeeded, failed, or requires review.
• Time: when the event occurred.

Review value

Auditors and security reviewers do not need to reconstruct privileged activity from unrelated systems. Anchor organizes evidence around the operational object being reviewed.

Sensitive data handling

Audit records preserve useful context without exposing secrets.