Carolopedia

A friendly guide to Carol, her ecosystem, and the agents who built her.

๐Ÿ“– Carolopedia โ€บ Droids โ€บ Session AuditorMain page
Session Auditor

Session Auditor

Droid Review privileged-session log + recordings for anomalies
Go to droid โ†’

๐Ÿ“–About & Usage

About

The Session Auditor is a scheduled droid owned by Tyr. It runs every hour on the hour to review the privileged-session log and its recordings, watching for anomalies. It exists so that sessions with elevated access get a regular, automated check for anything unusual, giving Tyr a dependable second pair of eyes over sensitive activity.

Mechanically, it follows a fixed hourly schedule and compares what happened in privileged sessions against what's expected; anything that looks off is flagged for follow-up. Its execution engine isn't recorded yet, so it's not currently possible to say whether it is pure software or calls Claude โ€” no model or Claude purpose is on file.

"Session Auditor" is a unique name, but this is not a one-off droid: it is one of 222 droids in a family recorded as "(none)" that run across nearly all of Carol's agents, from Albus and Archon through Heimdall and Scriber and many others. So while no other droid shares this exact name, the same family of scheduled workers is used widely across the ecosystem. Related areas include the Audit & Compliance and Security services and the Droid Families catalogue.

๐Ÿ‘คOwner

Tyr ยท Head of Security Operations & Resilience

๐Ÿ“šRecent initiatives

Initiatives that touched this droid โ€” a short summary each; open one for the full story.

CAROL-INI-1957-00: Auto-detected coverage gap: 84 scheduled/ongoing droids emit no run-audit
Hermione (Process Monitor) found 84 registered scheduled/ongoing droids that write no run-audit row, so their liveness cannot be judged (silent observability blind spot). Instrume\u2026
Hermione · 2026-06-24 15:43
Browse all initiatives →