Audit Logs

Per-call audit rows for the org with filters + pagination.

Always reachable (no audit_detailed gate on the endpoint itself). The audit_detailed toggle acts as a hard privacy gate on the payload fields: when FALSE, the API masks request_args and response_data to None even for older rows captured while it was TRUE — so flipping the toggle off is a real "I don't want these payloads readable" action, not just a UI hide (SOC2 posture). The audit_wrapper also never writes those fields while the toggle is off, so the strip here is for historical rows. Viewers are auto-restricted to their own user_id.

Filters (all optional, AND'd together):

• user_id — admin-only; viewer is force-scoped to themselves.
• tool_name — exact match.
• success — 'true' / 'false'.
• date_from / date_to — inclusive day boundaries. Format YYYY-MM-DD (interpreted in server local time).