Product
Every step Brigham.ai takes, on the record.
No tool runs outside one pipeline. Each call is validated, checked, executed, verified, redacted and logged.
One pipeline. No side doors.
Registry lookup
The tool must exist and be enabled for this workspace and agent.
Validation
Inputs are checked against a strict schema.
Policy
Actor, role, action class and scope are checked.
Approval
Required for sensitive actions.
Execute
Runs with a timeout.
Verify and redact
Output is validated and secrets are removed.
Audit
The call is written to the record.
Search what happened.
Find any run, tool call or refusal. Arguments are stored redacted, and credentials never enter the log at all.
- Searchable by run, tool and person.
- Refusals are logged too.
- Each run shows tokens and cost.
Admins see that finance happened. Not what.
Rows labelled finance are hidden from anyone without a finance grant. Admin views show counts only.
Questions, answered.
Can the log be edited?
It is an append-only record of what ran.
Does the log contain my secrets?
No. Arguments are redacted and credentials are referenced by id.
Keep reading.
Know what your AI did.
Get started today.