Rubric Protocol produces court-grade evidence of AI system activity: every AI decision is signed with ML-DSA-65 (FIPS 204) post-quantum cryptography and anchored to Hedera Consensus Service, making it independently verifiable years later — without trusting application logs. This add-on parses Rubric attestation events delivered via HTTP Event Collector so SOC and GRC teams can monitor AI activity alongside the rest of their telemetry: which agents acted, what was attested, which federation node handled it, and whether each attestation is anchored. Every event carries a one-click verify_url to Rubric's public verifier for independent confirmation. Built for teams facing AI audit and compliance requirements (EU AI Act, SR 26-2, Illinois SB 315) who need AI activity visible in Splunk today.