audit-log

Add append-only, module-owned business audit events.

audit-log is an installable business infrastructure module. It is separate from runtime observation, telemetry, Provider call history, and platform execution logs.

lenso module install audit-log
cargo run --bin migrate
lenso serve

It provides:

• append-only event storage in audit_log.events;
• actor, scope, resource, outcome, severity, reason, metadata, and runtime correlation fields;
• linked Rust writer APIs for application modules;
• a read surface protected by audit_log.events.read.

The module has no dependency on organization. Any module can use generic scope_module, scope_type, and scope_id values for its own business scope. Install it when the product needs durable audit history that remains meaningful outside a single runtime execution.