> ## Documentation Index
> Fetch the complete documentation index at: https://docs.orbit.devotel.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Get a conversation's AI-turn audit log

> Return the immutable per-turn audit trail for one agent conversation, the chain of decisions the AI made, oldest first. Each row carries the verbatim system and user prompt, the model, the response, token counts, and any human-override stamp. Cursor-paginated and optionally bounded by a `from`/`to` date range. This is a supervisor-level compliance surface (the full prompt text is included verbatim) and requires an owner, admin, or developer role.



## OpenAPI

````yaml /openapi.yaml get /api/v1/agents/conversations/{conversationId}/ai-turn-audit
openapi: 3.1.0
info:
  title: Devotel CPaaS API
  description: Orbit by Devotel — Communications Platform as a Service API
  version: 1.0.0
  contact:
    name: Devotel
    url: https://devotel.io
    email: support@devotel.io
  license:
    name: Proprietary
servers:
  - url: https://api.orbit.devotel.io
    description: Production
security:
  - Bearer: []
  - ApiKey: []
tags:
  - name: Messages
    description: >-
      Send and manage messages across all channels (SMS, WhatsApp, RCS, Email,
      Viber, etc.)
  - name: Fax
    description: >-
      List and track fax (MMS/T.38) transmissions on Telnyx-backed fax numbers
      (sending flows through the Messaging API)
  - name: Agents
    description: AI agent creation, configuration, and execution
  - name: Voice
    description: Voice calls, IVR, conferencing, and SIP trunking
  - name: OnCall
    description: On-call rotations and escalation policy planning for incident alerting
  - name: Webhooks
    description: Webhook endpoint management and delivery logs
  - name: Numbers
    description: Phone number search, provisioning, and configuration
  - name: Brand Identity
    description: >-
      Unified cross-channel brand trust posture (10DLC, toll-free, WhatsApp,
      RCS, branded calling, number KYC)
  - name: Contacts
    description: Contact management, segmentation, and lifecycle tracking
  - name: Campaigns
    description: Marketing campaign orchestration and analytics
  - name: Flows
    description: Automation flow builder and execution engine
  - name: Templates
    description: Message template management and approval workflows
  - name: Settings
    description: Organization, channel, and user preference settings
  - name: Verify
    description: OTP generation and verification across channels
  - name: Push
    description: Push notification delivery via FCM and APNs
  - name: Integrations
    description: Third-party service connections and OAuth management
  - name: CDP
    description: >-
      Customer Data Platform — activation surface (CRM object sync, streaming
      destinations, ad-audience activation)
  - name: Files
    description: >-
      Server-to-server media upload, listing, retrieval, and deletion
      (signed-URL backed)
  - name: Commerce
    description: >-
      Omnichannel conversational-commerce — persistent cart + checkout state
      machine, channel-agnostic hosted pay-by-link, native WhatsApp checkout,
      and AP2-style agent payment mandates.
  - name: Sync
    description: >-
      Real-time shared-state primitive (Twilio Sync parity) — Documents, Maps,
      Lists, and ephemeral Streams, with change events relayed over the
      /api/v1/ws/sync WebSocket gateway
  - name: Risk
    description: >-
      Unified cross-channel Trust & Fraud risk scoring — fuses SMS-pumping,
      URL-reputation, Verify Fraud Guard, and Voice Biometrics signals into one
      composite verdict queryable before a send or a call.
  - name: Orby
    description: >-
      In-dashboard Orby operator assistant: streamed assistant turns,
      conversation threads, product knowledge-base search, and the tool-action
      approval gate. Available to signed-in operators only (dashboard session
      auth — API-key requests are rejected).
paths:
  /api/v1/agents/conversations/{conversationId}/ai-turn-audit:
    get:
      tags:
        - Agents
      summary: Get a conversation's AI-turn audit log
      description: >-
        Return the immutable per-turn audit trail for one agent conversation,
        the chain of decisions the AI made, oldest first. Each row carries the
        verbatim system and user prompt, the model, the response, token counts,
        and any human-override stamp. Cursor-paginated and optionally bounded by
        a `from`/`to` date range. This is a supervisor-level compliance surface
        (the full prompt text is included verbatim) and requires an owner,
        admin, or developer role.
      parameters:
        - schema:
            type: string
          in: path
          name: conversationId
          required: true
          description: Identifier of the agent conversation to export the audit trail for.
        - schema:
            type: integer
            minimum: 1
            maximum: 200
          in: query
          name: limit
          required: false
          description: Maximum number of audit rows to return (1–200, default 50).
        - schema:
            type: string
          in: query
          name: cursor
          required: false
          description: Opaque pagination cursor from a previous response.
        - schema:
            type: string
            format: date-time
          in: query
          name: from
          required: false
          description: ISO-8601 lower bound (inclusive) on the row timestamp.
        - schema:
            type: string
            format: date-time
          in: query
          name: to
          required: false
          description: ISO-8601 upper bound (exclusive) on the row timestamp.
      responses:
        '200':
          description: A page of AI-turn audit rows for the conversation.
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    type: object
                    properties:
                      rows:
                        type: array
                        items:
                          $ref: '#/components/schemas/AiTurnAuditRow'
                      next_cursor:
                        type: string
                        nullable: true
                      count:
                        type: integer
                  meta:
                    $ref: '#/components/schemas/ResponseMeta'
components:
  schemas:
    AiTurnAuditRow:
      type: object
      description: >-
        One immutable per-AI-turn audit record — the verbatim decision context
        (system and user prompt, model, response, token counts) plus any
        human-override stamp. This is the compliance evidence log used for SOC2,
        HIPAA, FINRA, and GDPR Art-22 reviews.
      additionalProperties: true
      properties:
        id:
          type: string
        conversation_id:
          type: string
        agent_id:
          type: string
        model:
          type: string
        model_version:
          type: string
          nullable: true
        system_prompt:
          type: string
        user_prompt:
          type: string
        assistant_response:
          type: string
          nullable: true
        prompt_tokens:
          type: integer
        request_id:
          type: string
          nullable: true
        human_override_user_id:
          type: string
          nullable: true
        human_override_reason:
          type: string
          nullable: true
        human_override_at:
          type: string
          format: date-time
          nullable: true
        created_at:
          type: string
          format: date-time
    ResponseMeta:
      type: object
      required:
        - request_id
        - timestamp
      additionalProperties: false
      properties:
        request_id:
          type: string
          description: Unique request identifier (also returned as X-Request-Id header)
        timestamp:
          type: string
          format: date-time
        docs_url:
          type: string
          format: uri
          nullable: true
  securitySchemes:
    Bearer:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: Dashboard JWT token from Clerk
    ApiKey:
      type: apiKey
      name: X-API-Key
      in: header
      description: Server-to-server API key (dv_live_sk_*)

````