forked from EduCraft/curriculum-project-hub
17 lines
717 B
Markdown
17 lines
717 B
Markdown
# Reconcile the audit and run-history contract
|
|
|
|
Type: grilling
|
|
Status: open
|
|
Blocked by: 04
|
|
|
|
## Question
|
|
|
|
Separate or unify run-bound audit entries, pre-run security/permission events,
|
|
structured messages, and operational recovery events without weakening
|
|
`Spec.System.Audit`'s pinned AuditEntry-to-run relation. Decide durability,
|
|
failure, retention, and query semantics; then enforce referential integrity and
|
|
observable/recoverable writes instead of silently swallowing lost evidence.
|
|
Do not merge these customer Project/Run records with ADR-0023's already-decided
|
|
separate, append-only, fail-closed Platform Audit; decide only any shared
|
|
retention/export infrastructure without weakening either semantic boundary.
|