What Substrait records
- Every governed read of company data: which tool read what, and the person behind it
- Every deploy, promotion, approval and rollback
- Every grant, its approver and its expiry
- Every action an agent takes, as “this agent, acting for this person”
- Every change to people, groups and roles
Where the trail lives
The trail and the reports Substrait produces are written to storage your organisation controls. Substrait’s control plane keeps references and fingerprints, not the contents, so it can prove what existed and that nothing changed.
What you can do with it
Query it in the console. Export it to your security monitoring system. Hand it to an auditor, with a software bill of materials and licence scan for each release.