Одит, traceability и compliance

Какво обхваща

• Audit записва admin actions/denials, policy decisions, software, services, modules, remote commands, security changes, hardware cases и worker findings.
• Actor може да е user, WEB session, dctl operation, worker или system component; details distinguish observation/recommendation/apply.
• Operation/journal/server/module/case IDs link begin/plan/apply/complete/failure/recovery events.
• Exports са immutable packages със scope, filters, time и checksums; retention е policy-controlled.

Как се работи

1. Filter by ID/object.
2. Check event chain.
3. Expand technical details.
4. Export for investigation/compliance.

Важни правила

• Worker event не означава human change.
• Selective deletion за hiding problem е prohibited.
• Archive пази sequence proof.