curriculum-project-hub/.scratch/saas-production-readiness/issues/27-reconcile-audit-history-contract.md

Reconcile the audit and run-history contract

Type: grilling Status: open Blocked by: 04

Question

Separate or unify run-bound audit entries, pre-run security/permission events, structured messages, and operational recovery events without weakening Spec.System.Audit's pinned AuditEntry-to-run relation. Decide durability, failure, retention, and query semantics; then enforce referential integrity and observable/recoverable writes instead of silently swallowing lost evidence. Do not merge these customer Project/Run records with ADR-0023's already-decided separate, append-only, fail-closed Platform Audit; decide only any shared retention/export infrastructure without weakening either semantic boundary.