[waleedlatif1]

Summary

• Audit rollup writes now go through one process-wide queue, so ROLLUP_WRITE_CONCURRENCY caps every insert in flight. Before, each window timer, size flush, and scope end started its own batch, so a burst of distinct rollups could insert all at once
• credential.accessed entries from a workflow run now record metadata.workflowId and metadata.executionId (tool calls and Vertex AI credentials in Agent, Router, and Evaluator), so a merged entry says which run used the credential
• Audit log docs say where to find them

Type of Change

• Bug fix

Testing

• lib/oauth/token-resolution, selector, personal-token, and executor/utils tests (369) and the @sim/audit suite pass
• Throwaway check (not committed): 200 distinct rollups whose windows close together peaked at 10 concurrent inserts with the fix and 200 without it
• Biome and comment hygiene on the changed files; full lint, type-check, and audits run in CI

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Oct 28, 2026 4:29am UTC

[cubic-dev-ai]

All reported issues were addressed across 9 files

<sub>Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic</sub>

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge, with no new blocking findings.

Summary

This PR caps rollup inserts at ten across the process and adds workflow and execution IDs to credential-access entries.

• Audit rollup inserts share one process-wide limit.
• Credential access entries identify the workflow run that used them.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  Timer[Window closes] --> Queue[Shared write queue]
  Size[Size limit reached] --> Queue
  Scope[Run ends] --> Queue
  Queue --> Writes[Up to ten inserts at once]
  Writes --> Database[(Audit logs)]

Loading

_{Reviews (3) · Last reviewed commit: "fix(audit): record Vertex service-accoun..." · Reviewed by Greptile}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 9 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 9 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}