Sessions

A session represents a single agent work period. Every time an agent starts, Bulwark creates a new session to track its activity.

Session Information

Each session displays:

Field	Description
Session ID	Unique identifier
Started	When the session began
Device	The device running the agent
Status	Active, Completed, or Disconnected
Tool Calls	Number of tool calls made

Session States

Active

The agent is currently running. Tool calls may still be occurring.

Completed

The agent ended normally. All tool calls have finished.

Disconnected

The agent lost connection or was terminated unexpectedly.

Viewing Session Details

Click on any session to see:

Timeline

A chronological list of all tool calls made during the session:

10:32:15  Read(/src/index.ts)              ✓ Allowed
10:32:18  Bash(npm install)                ✓ Allowed
10:32:45  Write(/src/config.ts)            ⏳ Pending → ✓ Approved
10:33:02  Bash(rm -rf ./dist)              ✗ Denied by policy

Tool Call Details

For each tool call, you can see:

Tool name: Which tool was invoked
Input: Full input parameters
Policy: Which policy matched (if any)
Result: Allow, Deny, or the approval decision
Timestamp: Exact time of the call

Filtering Sessions

Use the filter controls to find specific sessions:

Date range: Filter by when sessions occurred
Device: Show sessions from a specific device
Status: Show only active, completed, or all sessions

Note

Sessions are retained for 30 days by default. Contact support if you need longer retention.