feat(security): wire AuditLogger into shell tool execution

src/openhuman/agent/harness/session/builder.rs

@@ -768,6 +768,11 @@ impl Agent {
             &config.autonomy,
             &config.workspace_dir,
         ));
+        // Phase 1 of #1401: see comment in channels/runtime/startup.rs.
+        let audit = Arc::new(crate::openhuman::security::AuditLogger::new(
+            crate::openhuman::config::AuditConfig::default(),
+            config.workspace_dir.clone(),
+        )?);
 
         let local_embedding = config.workload_local_model("embeddings");
         let memory: Arc<dyn Memory> = Arc::from(memory::create_memory_with_local_ai(
@@ -782,6 +787,7 @@ impl Agent {
             Arc::new(config.clone()),
             &security,
             runtime,
+            audit,
             memory.clone(),
             &config.browser,
             &config.http_request,

src/openhuman/channels/runtime/startup.rs

@@ -180,6 +180,14 @@ pub async fn start_channels(config: Config) -> Result<()> {
         &config.autonomy,
         &config.workspace_dir,
     ));
+    // Phase 1 of #1401: audit logger is wired with defaults so emission paths
+    // are exercised at runtime. A follow-up promotes `SecurityConfig` (and
+    // therefore the `audit` knob) onto the runtime `Config` schema so users
+    // can override `enabled`, `log_path`, and `max_size_mb` via TOML.
+    let audit = Arc::new(crate::openhuman::security::AuditLogger::new(
+        crate::openhuman::config::AuditConfig::default(),
+        config.workspace_dir.clone(),
+    )?);
     let model = config
         .default_model
         .clone()
@@ -199,6 +207,7 @@ pub async fn start_channels(config: Config) -> Result<()> {
         Arc::new(config.clone()),
         &security,
         runtime,
+        audit,
         Arc::clone(&mem),
         &config.browser,
         &config.http_request,

src/openhuman/runtime_node/ops.rs

@@ -39,6 +39,14 @@ fn build_runtime_tools(config: &Config) -> Result<Vec<Box<dyn Tool>>, String> {
         &config.autonomy,
         &config.workspace_dir,
     ));
+    // Phase 1 of #1401: see comment in channels/runtime/startup.rs.
+    let audit = Arc::new(
+        crate::openhuman::security::AuditLogger::new(
+            crate::openhuman::config::AuditConfig::default(),
+            config.workspace_dir.clone(),
+        )
+        .map_err(|e| e.to_string())?,
+    );
     let runtime: Arc<dyn RuntimeAdapter> = Arc::new(NativeRuntime::new());
     let local_embedding = config.workload_local_model("embeddings");
     trace!("[runtime_node::ops] build_runtime_tools: create_memory_with_local_ai");
@@ -63,6 +71,7 @@ fn build_runtime_tools(config: &Config) -> Result<Vec<Box<dyn Tool>>, String> {
         Arc::new(config.clone()),
         &security,
         runtime,
+        audit,
         memory,
         &config.browser,
         &config.http_request,

src/openhuman/security/audit.rs

@@ -8,6 +8,7 @@ use serde::{Deserialize, Serialize};
 use std::fs::OpenOptions;
 use std::io::Write;
 use std::path::PathBuf;
+use std::sync::Arc;
 use uuid::Uuid;
 
 /// Audit event types
@@ -163,6 +164,22 @@ pub struct CommandExecutionLog<'a> {
 }
 
 impl AuditLogger {
+    /// Build a disabled `Arc<AuditLogger>` for tests and contexts that need a
+    /// handle but should not write to disk. The `enabled = false` flag
+    /// short-circuits `log()` before any filesystem I/O, so the sentinel
+    /// `log_path` is never touched.
+    pub fn disabled() -> Arc<Self> {
+        Arc::new(Self {
+            log_path: PathBuf::new(),
+            config: AuditConfig {
+                enabled: false,
+                log_path: String::new(),
+                max_size_mb: 0,
+            },
+            buffer: Mutex::new(Vec::new()),
+        })
+    }
+
     /// Create a new audit logger
     pub fn new(config: AuditConfig, openhuman_dir: PathBuf) -> Result<Self> {
         let log_path = openhuman_dir.join(&config.log_path);
@@ -331,6 +348,15 @@ mod tests {
         assert!(parsed.result.is_some());
     }
 
+    #[test]
+    fn audit_logger_disabled_helper_is_noop() -> Result<()> {
+        let logger = AuditLogger::disabled();
+        let event = AuditEvent::new(AuditEventType::CommandExecution);
+        logger.log(&event)?;
+        assert!(!logger.config.enabled);
+        Ok(())
+    }
+
     #[test]
     fn audit_logger_disabled_does_not_create_file() -> Result<()> {
         let tmp = TempDir::new()?;

src/openhuman/security/mod.rs

@@ -14,7 +14,7 @@ pub mod secrets;
 pub mod traits;
 
 #[allow(unused_imports)]
-pub use audit::{AuditEvent, AuditEventType, AuditLogger};
+pub use audit::{AuditEvent, AuditEventType, AuditLogger, CommandExecutionLog};
 pub use core::*;
 #[allow(unused_imports)]
 pub use detect::create_sandbox;