Docker AI Governance: Audit Logs, Now Where Your Security Team Already Works | Docker

What this post added

This post introduces audit logs for Docker AI Governance. These logs capture every policy decision made by AI agents, including allowed, denied, and held actions. The logs can be streamed directly to SIEM tools (e.g., Splunk, Dynatrace) via HTTPS and are also available in Docker Cloud with a 90-day retention and CSV export. The audit logs cover Docker Sandboxes policy decisions and sandbox session events, with plans to expand coverage to other sources like MCP Gateway enforcement decisions. The logs are metadata-only and do not contain sensitive prompt content or agent output.