Tenant: 11111111-1111-1111-1111-111111111111Organization: org-runtime-smokeUser: smoke-userMode: Default
Open Accounts
Technical details
Role
platform_admin
Tenant ID
11111111-1111-1111-1111-111111111111
Organization ID
org-runtime-smoke
User ID
smoke-user
Claims Version
v1
Source
baseline

Security Event Stream

Audit-friendly event stream with tenant/org/team/user scope filters and explicit time window filtering.

Scope source: env

Filter Contract

  • Scope filter: tenant, organization, team, user
  • Time filter (window_hours): 24
  • Event stream source: /v1/security/events
  • By-scope aggregation source: /v1/security/events/by-scope

Control Mode

This page is read-only and non-operational for remediation actions; operator response controls are not yet implemented and remain a no-op from this surface.

Event Stream

{
  "items": [],
  "limit": 50,
  "mode": "operational",
  "scope": {
    "TenantID": "11111111-1111-1111-1111-111111111111",
    "OrgID": "org-runtime-smoke",
    "ActorSub": "smoke-user",
    "ClaimsVersion": "v1"
  },
  "source": "proxy_security_runtime",
  "window_hours": 24
}

Events by Scope

{
  "group_by": [
    "org_id",
    "actor_sub"
  ],
  "items": [],
  "limit": 50,
  "mode": "operational",
  "scope": {
    "TenantID": "11111111-1111-1111-1111-111111111111",
    "OrgID": "org-runtime-smoke",
    "ActorSub": "smoke-user",
    "ClaimsVersion": "v1"
  },
  "source": "proxy_security_runtime",
  "window_hours": 24
}