Reports and support
Prebuilt evidence views for operators
Reports are designed for real operating questions: what happened this week, where policy is stopping work, and what an auditor needs. Local diagnostics provide context you can review before sharing.
How reports work
Open Reports, choose a report card, accept the default range or use a shortcut, choose a machine scope when needed. The report loads automatically and renders a formatted view in the dashboard. Export JSON contains the report id, generated time, selected range, machine scope, summary fields, findings, and grouped rows. Exports use the authenticated local dashboard session, and every export is recorded in the governance chain. Reports use the unified multi-machine readout for governance records.
Governance and audit reports
Governance Summary
Default range: last 7 days. Shows total records, ALLOW/DENY mix, most active actions, and activity categories.
Denial Patterns
Default range: last 30 days. Shows most denied actions, most denied rules, and users associated with denials.
User Comparison
Default range: last 30 days. Compares activity by user or agent identity, decision balance, and action distribution.
Audit Evidence Export
Default range: all time. Packages selected chain records into a concise evidence summary for external review.
Unusual Activity Detection
Default range: last 7 days. Highlights high-denial signals, low-frequency activity, and hourly concentration.
Machine scope
Governance and audit reports can cover all machines, only the primary, one machine, or selected machines. Remote records display both the event timestamp from the originating machine and the primary import timestamp. Report ordering is based on chain/import sequence, not on remote clocks.
Evidence exports include the selected machine scope, a machine registry snapshot, relevant import envelopes, and sidecar hashes so exported remote records remain tied to the material the primary verified.
Local diagnostics
The Trouble button downloads a local JSON diagnostic containing the current path, open window stack, breadcrumb, active element summary, and selected report or activity context when available. Review the file on your device before choosing whether to share it through the contact form.
Diagnostic files are downloaded to the operator's device and are not sent to Atested automatically. They are not telemetry records or governance chain records.