The OSS-version does not have audit logging, correct? Currently exploring options of various Zanzibar-based frameworks and this is one of the requirements set by our company as we work with finances (sensitive data): Knowing when X performed Y on Z. I presume I could implement something with the existing logging, but there is nothing out of the box?

what do you mean with "when x performed y on z"? - if you mean when relationships were written, you can use the Watch API - if you mean when any API request was sent to SpiceDB, no there isnt - if you mean "why does user have access to resource", you can use the new Debug option in

Check

API

Thanks for the quick response. I guess the second option. Essentially I want to know when a user accessed a resource.

and I assume that you "user accessed a resource" is inferred from "client application performed a check request for a user,resource pair"

Correct, yes. Ok, thank you.