---
title: audit-log
description: Add append-only, module-owned business audit events.
---

`audit-log` is an installable business infrastructure module. It is separate
from runtime observation, telemetry, Provider call history, and platform
execution logs.

```sh
lenso module install audit-log
cargo run --bin migrate
lenso serve
```

It provides:

- append-only event storage in `audit_log.events`;
- actor, scope, resource, outcome, severity, reason, metadata, and runtime
  correlation fields;
- linked Rust writer APIs for application modules;
- a read surface protected by `audit_log.events.read`.

The module has no dependency on `organization`. Any module can use generic
`scope_module`, `scope_type`, and `scope_id` values for its own business scope.
Install it when the product needs durable audit history that remains meaningful
outside a single runtime execution.