> For the complete documentation index, see [llms.txt](https://docs.unitlab.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.unitlab.ai/api-sdk-cli/sdks/automation-observability-and-audit.md).

# Automation observability and audit

{% hint style="info" %}
**Outcome:** Record enough context to diagnose outcomes without logging secrets or sensitive source data.
{% endhint %}

### Minimum structured fields

* SDK version and application version.
* Workspace-safe service identity reference.
* Operation name and correlation or run ID.
* Project, dataset, version, folder, Batch Queue, task, ontology, embedding-space, and release IDs as applicable.
* Start, completion, duration, counts, and final state.
* Exception class, server error code, and redacted message.
* Retry count and the state check used before retry.

Do not log API keys, signed download URLs, cloud credentials, raw regulated media, or unrestricted annotation payloads. Use resource IDs to correlate with Unitlab’s own history and retain logs according to the organization’s security and audit policy.

### Operating contract

| Concern           | Required behavior                                                                |
| ----------------- | -------------------------------------------------------------------------------- |
| Execution surface | Pinned `unitlab==3.0.0` application environment on Python 3.10+.                 |
| Identity          | Least-privilege API key supplied through approved configuration.                 |
| Target resolution | Stable resource IDs and an explicitly bounded target set.                        |
| Success evidence  | Typed return fields, server-side state, and downstream acceptance of the result. |

### Failure and recovery boundary

| Condition                                       | Response                                                                                                     |
| ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------ |
| Authentication or authorization fails           | Stop, correct the service identity or access model, rotate exposed credentials, and rerun a read-only check. |
| Validation or entitlement rejects the operation | Correct the input or entitlement; do not retry an unchanged request.                                         |
| A request times out                             | Inspect remote state before repeating a mutation because the server may have accepted it.                    |
| Asynchronous processing exceeds its deadline    | Preserve the Batch Queue or release ID, continue bounded monitoring, and inspect item-level failures.        |
| Only part of a batch succeeds                   | Keep successful identifiers, isolate failed rows, and retry only the corrected subset.                       |

{% hint style="warning" %}
Pin and test the production SDK version. Use stable IDs, keep secrets out of logs and command history, and record the correlation ID, target IDs, counts, final state, and redacted error details for material state changes.
{% endhint %}