Read the workspace's activity log, newest first: who changed what and when, and how (in the web app, with an API key, or by nopaque staff). Covers API keys, members and roles, billing, tests and their schedules, load tests, batches, sweeps, mapping jobs, imports, phone numbers and caller ID, alert rules and destinations. Filters: category (access, keys, billing, workspace, testing, numbers, assistant), action (e.g. api_key.created), actor (a user id or API key id), target (type:id, e.g. test:<id>), from/to (dates), limit (at most 100) and cursor (nextCursor from the previous page, sent with from = the previous window.from). Use cases: "who changed our API keys last week" (category keys), "who deleted that test" (target test:<id>), "what did this key do" (actor <key id>). Entries hold ids, not names: name a test with getTestConfig or getMissionTestConfig. nopaque staff show with no id. Only entries inside the plan's window (window in the response) are returned. Needs an Enterprise workspace and an API key created by an owner or admin with the audit:read scope by name; a key with full access (*) or with no scopes is refused (403), and a key made by a billing admin reads only the billing category. Every call through this server counts as a call with an API key. Read-only.