Designing an audit trail an auditor will accept
A log is written for the engineer who will debug the system next week. An audit record is written for a stranger who arrives two years later and does not trust you. Five fields decide whether an autonomous action can still be reconstructed: what acted, on whose authority, on what input, producing what output, and reversible how.
- In this post
- The five anchors of a replayable action, and the record shape that holds them.
- Why it matters
- Autonomous execution is only permitted where the execution can be reconstructed.
- Written for
- Compliance leads, security engineers, and revenue cycle operators.