Registry API
Audit log and advisory review
Read the organization’s audit events and run an advisory review.
Audit events are immutable records of one actor’s action on one resource. The review route runs an advisory review synchronously for organizations that opted in; findings never gate publishing.
Operations
| Request | What it does |
|---|---|
| GET /api/audit | List audit events |
| POST /api/review | Run an advisory review |
Operations are exactly those in the committed OpenAPI document (packages/workloom-api/openapi.json), which matches the route definitions; this site checks its list against both. Paths are under the API host. Public, approved packages and profiles can be read without a token; everything else needs one.