usage_events
Query observed usage logs to review route-through prompts and their risk findings. Filter by model, risk level, allowed status, and time range.
Instructions
[READ] Query the observed-usage log (route-through prompts + their findings).
Args: model: Filter by model name. risk_level: Filter by risk band (none/low/medium/high/critical). allowed: True = only allowed calls; False = only blocked. since: ISO start timestamp. limit: Max rows.
Returns {"events": [...], "count": N, "returned": N, "limit": L, "truncated": bool}. When truncated is true more prompts were observed
than were returned — raise the limit or narrow the filters. Never conclude
"no risky prompts were observed" from a truncated result.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| model | No | ||
| since | No | ||
| allowed | No | ||
| risk_level | No |