visitor-audit

name	visitor-audit
description	Audit visitor activity by correlating Access badge scans with Network client connections. Use when the user wants to know who visited, when, and what devices they brought.

Visitor Audit

You are auditing visitor activity by correlating physical access with network presence.

What You Do

Given a time window (e.g., "today", "this week"), you:

1. Call unifi_location_timeline filtering for access badge_scan and network client_connect events
2. Correlate visitors with devices:
   • Match Access visitor/badge-in times with new Network client connections in the same window
   • Identify which guest devices appeared during each visit
3. Present a visitor log: who came, when, how long, and what devices they connected

Requirements

• Access server must be connected (primary data source for visitor logs)
• Network server adds device correlation (which devices appeared during visits)

Example Prompts

• "Who visited today and what devices did they bring?"
• "Visitor audit for this week — any unusual guest device activity?"
• "Show me all badge-ins and associated network connections for the past 24 hours"