Product · owlaudit

OwlAudit

OwlAudit provides Hash Chain audit ledgers and policy-driven HITL / HOTL / HOOL three-tier interventions. Human review tickets support pending states, escalations, timeout fallbacks, and decision provenance. Synchronous evaluation runs on connected NodalOS hooks; generic ingest logs records without blocking past executions.

OwlAudit (Compliance Audit & HITL) architecture diagram for enterprise digital workforce infrastructure
OwlAudit logo

OwlAudit

Compliance Audit & HITLAI Agent compliance audit and human-in-the-loop (HITL) governance

Committed actions are verifiable and traceable; on connected NodalOS hooks, policy-triggered high-risk actions await human sign-off.

Verifiable
Recompute hashes and detect gaps on committed chains
Real-Time Blocking
Synchronously rejects actions matching HITL policies on NodalOS hooks
Three Tiers
HITL · HOTL · HOOL

Typical pains

  1. Agents call production APIs directly without human oversight or guardrails
  2. Post-incident forensics lack complete, tamper-evident audit trails
  3. Compliance policies fail to translate into concrete Agent behaviors

Core value

Gate high-risk actions behind human approval

Critical agent actions need a human check. On connected NodalOS hooks, actions matching HITL policies are rejected and opened as review tickets, proceeding only after approval. Sign-off happens in AULO and is written back upstream; timed-out tickets escalate to the next approver.

Human-in-the-Loop (HITL) Review: High-risk operation inspection and override gate

Track review workload and human coverage by project

Without project-level metrics, teams cannot gauge human review bottlenecks or audit rigor. OwlAudit tracks approval rates, resolution times, event-based human coverage, and escalation rates per project, listing ticket categories and outcomes on the AULO audit page.

Project audit tab: approval rate, resolution time, coverage and review history

Inspect compliance posture and configure audit policies in AULO

Compliance teams need continuous visibility into audit postures and the ability to adjust audit policies as needed without touching agent code. AULO displays compliance summaries and HITL metrics and exports reports; create, edit, toggle, or delete event policies in AULO with trigger records and revision history, evaluated by OwlAudit.

Admin audit settings: compliance summary and audit policies

Capabilities

Audit ledger

Hash Chain AuditEntries are verifiable with checkpoints, new hashes covering protected fields; does not verify source veracity or remote WORM, and history is not recomputed
Multi-Chain ArchitectureMain chain is mandatory; HITL, financial, and compliance events split by topic, with optional program and group sub-chains
Node Delivery IntegrityReports gaps in landed records by NodalOS instance sequence; does not distinguish a silent node from normal idle, and does not cover source-side drops that never received a sequence number
Offline Audit Chain VerificationVerifies exported audit chains offline, detecting tail truncation with an independently stored chain tip; without the tip, it only proves consistency, not completeness
Sealed Decision RecordsNEWSeals decision details into the audit chain, flagged on server query if tampered; offline checks exclude decision details, and earlier decisions are not retroactively sealed

Does / does not

Does
  • Verifiable Hash Chain audit ledger: recompute, verify, and detect chain gaps
  • Three-tier HITL / HOTL / HOOL intervention: policy-driven human-in-the-loop gates
  • Policy dual-version provenance: policy changes and audit records increment versions in the same transaction
  • Human review ticket lifecycle: pending, escalation, timeout fallback, and decision provenance
  • Compliance freeze and real-time blocking: synchronous deny and freeze on connected NodalOS hooks
  • Objective audit reporting and veto metrics: compliance summaries and objective stats for AULO
Does not
  • Does not replace professional legal and compliance advisory
  • Does not perform subjective black-box scoring (records facts and human veto rates, not unexplained scores)
  • Does not replace existing enterprise GRC / SIEM suites (focuses on Agent runtime control and in-product compliance reports)
  • Does not perform physical off-chain real-world investigation (verifies integrity of records already written to the ledger)

By role

Technology leaders

Works with NodalOS hook policy evaluation to reject and log high-risk actions

Compliance & risk

Provides a complete loop across reviews, escalations, and audit trails rather than mere pre-call blocking; tracks review veto frequency for governance

Business leaders

On connected hooks, policy-triggered HITL actions are blocked synchronously pending sign-off

Integrations

NodalOS synchronous evaluation on connected hooks (optional)AULO consumes HITL review tickets and pending actions (optional)PathPilot escalation event ingestion and limited writeback (optional)Ingests audit-related telemetry exports from HeronSentry (optional)

Related products

Next steps

SYSTEM READYproduct/owlaudit