audit-log-architect

What problem does it solve?

This Skill designs durable, tenant-scoped audit logging for systems that need provable accountability, compliance evidence, and safe cross-tenant isolation.

Core Features & Use Cases

• Audit Taxonomy Design: Defines which authentication, access-control, data access, admin, security, billing, and tenant lifecycle actions must be recorded.
• Schema and Integrity Rules: Specifies a versioned audit record schema, append-only storage behavior, tamper-evidence expectations, and explicit write-failure policies.
• Tenant-Safe Access and Validation: Establishes scoped audit reads, retention and redaction rules, negative tests, and a rollout path for adding auditing to a live system.
• Use Case: A SOC 2-ready SaaS platform needs to prove who changed permissions, who exported data, and whether audit events can be altered or hidden.

Quick Start

Ask for an audit logging design for your product that defines the event taxonomy, record schema, append-only integrity, tenant-scoped access, retention rules, and negative tests.