---
title: "Policy change audit log for the location (own organization only)"
method: GET
path: "/api/rightos/locations/{locationId}/policy/history"
tags: ["locations"]
---

# Policy change audit log for the location (own organization only)

`GET /api/rightos/locations/{locationId}/policy/history`

## Request

- Base URL: `https://rightos.i-s3.com`
- URL: `https://rightos.i-s3.com/api/rightos/locations/{locationId}/policy/history`
- Auth: one of:
  - HTTP bearer
  - API key in header `x-rightos-key`

Returns policy override changes (before/after, timestamp) in reverse chronological order. Provides accountability for which rules were in effect at verification time (ADR-0014). Records are append-only; no delete/update API exists.

## Path parameters

- `locationId` string, required

## Response `200`

Audit records, newest first

- object
  - `locationId` string
  - `changes` PolicyChange[]
    - `id` string
    - `locationId` string
    - `organizationId` string
    - `before` object, nullable: Override in effect before the change (null = preset/overlay only)
    - `after` object, nullable: Override in effect after the change (null = reset to preset)
    - `createdAt` string, date-time

## Other responses

- `401`: Missing or invalid API key (error: missing_api_key | invalid_api_key)
- `403`: Location belongs to another organization
- `404`: Location not found

---

[API](https://skmtc.dev/i-s3/apis/rightos-right-api.md) · [All operations](https://skmtc.dev/i-s3/apis/rightos-right-api/llms.txt) · [OpenAPI document](https://skmtc.dev/i-s3/apis/rightos-right-api/revisions/10020536e345?raw)