Stream AI audit events to external destinations (Beta)
## Overview GitLab Duo will support streaming AI audit events to external destinations through GitLab's existing audit event streaming infrastructure, giving security and compliance teams real-time visibility into AI agent activity. ## Problem As AI agents become active participants in the development lifecycle, organizations need visibility into what those agents are doing — which tools they invoked, what prompts were sent, and how the AI responded. Without the ability to forward these events to external systems such as a SIEM, security and compliance teams cannot monitor AI activity in real time or demonstrate compliance with regulations such as the EU AI Act. ## What will be built - An ingest API to receive AI audit events from the Duo Workflow Service - Storage of AI audit events in ClickHouse, with PostgreSQL as a fallback - A streaming worker that forwards AI audit events to any configured external streaming destination, alongside other audit events - A circuit breaker to protect against destination outages - An admin setting to enable AI audit event streaming, available in **Admin > GitLab Duo** - Event type filters, custom HTTP headers, and verification tokens work the same way as existing audit event streaming ## AI audit events covered in Beta The following 11 event types are captured from the Duo Workflow Service: | Event | |---| | `ai_agent_session_started` | | `ai_agent_session_ended` | | `ai_llm_input_sent` | | `ai_llm_response_received` | | `ai_llm_request_failed` | | `ai_tool_invoked` | | `ai_tool_response_received` | | `ai_tool_execution_failed` | | `ai_tool_execution_retried` | | `ai_user_input_received` | | `ai_user_output_displayed` | Coverage will expand to Code Suggestions, Duo Chat, and AI Gateway events in future releases. ## Availability - **Tier**: GitLab Self-Managed and GitLab Dedicated — Ultimate - **Offering**: GitLab Self-Managed, GitLab Dedicated ## Documentation https://docs.gitlab.com/administration/compliance/audit_event_streaming/#ai-audit-event-streaming > [!important] > This page may contain information related to upcoming products, features and functionality. > It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. > Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.
epic