{"wiki":{"id":2969,"slug":"tyr-session-audit-01","entity_type":"droid","entity_id":"tyr-session-audit-01","title":"Session Auditor","prose_md":"## About\n\nThe Session Auditor is a scheduled droid owned by [[agt_039]]. It runs every hour on the hour to review the privileged-session log and its recordings, watching for anomalies. It exists so that sessions with elevated access get a regular, automated check for anything unusual, giving [[agt_039]] a dependable second pair of eyes over sensitive activity.\n\nMechanically, it follows a fixed hourly schedule and compares what happened in privileged sessions against what's expected; anything that looks off is flagged for follow-up. Its execution engine isn't recorded yet, so it's not currently possible to say whether it is pure software or calls Claude — no model or Claude purpose is on file.\n\n\"Session Auditor\" is a unique name, but this is not a one-off droid: it is one of 222 droids in a family recorded as \"(none)\" that run across nearly all of Carol's agents, from [[agt_001]] and [[agt_002]] through [[agt_038]] and [[agt_044]] and many others. So while no other droid shares this exact name, the same family of scheduled workers is used widely across the ecosystem. Related areas include the [[audit]] and [[security]] services and the [[droid-families]] catalogue.","namesake_json":"{\"engine\": \"unknown\", \"model\": null, \"claude_purpose\": null, \"family\": \"(none)\", \"family_size\": 222, \"is_unique\": true}","profile_pic_path":"","source_hash":"0a340741ea57f23346c92f0117a141a163eab5ca8af5d481b67c095fef0b81e6","status":"active","last_generated_at":"2026-08-05 02:47:16","created_at":"2026-08-05 02:47:16","updated_at":"2026-08-05 02:47:16"},"facts":{"id":"tyr-session-audit-01","name":"Session Auditor","machine_name":"","owner":"agt_039","function":"Review privileged-session log + recordings for anomalies","process_type":"scheduled","schedule":"0 * * * *","process_name":"tyr_session_audit_01","avatar_color":"#94a3b8","created_for":"CAROL-INI-1912","purpose":"Review privileged-session log + recordings for anomalies","duties":"","constraints":"","status":"running","gender":"","archetype":"","building_block":"sec_operations","service_override":null,"enabled":1,"task_key":"security.session_audited","model_free":0},"page":{"type":"droid","page_class":"main","class_label":"Main page","kind_label":"Droid","kind_gloss":"","listed":true}}