Fix links

Author: steve-fenton-octopus

src/pages/docs/octopus-ai/claude-agent-step/index.md

@@ -39,6 +39,6 @@ Every run records its token usage and cost against the task, so you can see what
 
 ## Risks
 
-AI, by design, is non-deterministic. You may find that it "completes" tasks in unexpected or dangerous ways. As an example, it may decide that to fix the database migration failing, it should *delete your database entirely*. Though we have built a [variety of safety nets](./security-and-compliance.md) into the Claude Agent Step, you should review the risks associated with non-deterministic behavior in your deployment pipeline to ensure that you have sufficient mitigations.
+AI, by design, is non-deterministic. You may find that it "completes" tasks in unexpected or dangerous ways. As an example, it may decide that to fix the database migration failing, it should *delete your database entirely*. Though we have built a [variety of safety nets](/docs/octopus-ai/claude-agent-step/security-and-compliance) into the Claude Agent Step, you should review the risks associated with non-deterministic behavior in your deployment pipeline to ensure that you have sufficient mitigations.
 
 We'd love to hear how you use the step, what worked, and what you need next. Feedback during the alpha directly shapes what we build, so send it through your account team or [Octopus support](https://octopus.com/support).

src/pages/docs/octopus-ai/claude-agent-step/security-and-compliance.md

@@ -160,7 +160,7 @@ Every execution produces an audit trail, so you can review after the fact exactl
 - **Audit events.** Recording, and any deletion, of a transcript raises an audit event tied to the space, project, environment, tenant, target, and task, so the transcript's own lifecycle is auditable.
 - **Token and cost reporting.** Usage and cost are recorded per model and shown as a **Claude Usage Summary** on the task page.
 
-The session transcripts are stored on Octopus Server for 6 months. The retention of the audit logs vary with instance configuration. To learn more about audit log streaming and retention, see the [audit log documentation](docs/security/users-and-teams/auditing).
+The session transcripts are stored on Octopus Server for 6 months. The retention of the audit logs vary with instance configuration. To learn more about audit log streaming and retention, see the [audit log documentation](/docs/security/users-and-teams/auditing).
 
 :::figure
 ![The AiAgentTranscriptView permission in the Octopus role editor](/docs/img/octopus-ai/claude-agent-step/transcript-permission.png)