Foresight emits an audit log entry for every:Documentation Index
Fetch the complete documentation index at: https://docs.have-foresight.app/llms.txt
Use this file to discover all available pages before exploring further.
- PHI read or write (patient, encounter, claim, prior auth, denial, insurance policy, etc.).
- Administrative action (key creation, scope change, webhook subscription change).
- Authentication event (key used, session created, MFA event).
What’s captured
| Field | Description |
|---|---|
actor | API key id (or user id for dashboard sessions). |
actorType | api_key | user_session. |
action | One of READ, CREATE, UPDATE, DELETE. |
entityType | Resource kind (e.g. patient, claim). |
entityId | Resource ID. |
changedFields | (UPDATE) keys that changed. |
requestId | Per-request correlation ID. |
ipAddress | Caller IP (X-Forwarded-For honored). |
userAgent | Caller User-Agent. |
containsPhi | Whether PHI was accessed. |
accessReason | Optional caller-supplied reason for break-glass. |
timestamp | UTC ISO 8601. |