forked from EduCraft/curriculum-project-hub
487 B
487 B
Reconcile the audit and run-history contract
Type: grilling Status: open Blocked by: 04
Question
Separate or unify run-bound audit entries, pre-run security/permission events,
structured messages, and operational recovery events without weakening
Spec.System.Audit's pinned AuditEntry-to-run relation. Decide durability,
failure, retention, and query semantics; then enforce referential integrity and
observable/recoverable writes instead of silently swallowing lost evidence.