RBAC & audit logs

Role-based access control

Admin users — the people managing projects, keys, providers, and limits from the dashboard — are governed by an RBAC system. Not everyone who can view the dashboard needs to be able to add provider credentials or approve a new virtual key; roles scope what each admin account can do.

Audit logs

llmBreakr keeps two kinds of trail:

• Chat request logs — a record of requests through the data plane: which project, which model, which provider, and outcome.
• Administrative action logs — a record of control-plane changes: who created a project, issued or revoked a key, changed a limit, or added a provider credential.

Together, these answer the two questions that matter most when something goes wrong or a spend spike shows up: who called what, and who changed what.