build-audit-logs

Design, implement, and review audit logging systems using evlog.

Updated Apr 15, 2026
One-click install
npx skills add https://github.com/zhcndoc/evlog --skill build-audit-logs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: build-audit-logs
Source: https://github.com/zhcndoc/evlog/tree/main/apps/docs/skills/build-audit-logs
Command: npx skills add https://github.com/zhcndoc/evlog --skill build-audit-logs

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Enables teams to design, implement, and review an audit logging system within their application, ensuring traceability and policy enforcement.

Core Features & Use Cases

  • Define a centralized audit action vocabulary and enrichers to capture context (actor, target, outcome) for every mutation.
  • Build end-to-end audit pipelines with on-disk tamper-evident sinks and queryable sinks, plus a governance review checklist for existing setups.
  • Use the provided patterns to wrap mutating actions with withAudit or log.audit(), including denials, tests, and redaction.

Quick Start

Create or inspect your app's audit wiring with evlog to ensure every mutating action is captured and verifiable.

Frequently Asked Questions about build-audit-logs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design an audit logging system for a multi-tenant application?

Design an audit logging system by defining a centralized action vocabulary and using enrichers to capture actor, target, and outcome context for every mutation. This ensures traceability and policy enforcement across tenants.

What is tamper-evident audit logging and how does it work?

Tamper-evident audit logging uses on-disk sinks to record mutations verifiably, preventing undetected alterations. It captures every mutating action, including denials, to maintain strict governance and compliance.

Can I use evlog to review and check an existing audit logging setup?

Yes, you can use evlog to review existing setups with a provided governance checklist. It assesses multi-sink integrity, test coverage, redaction patterns, and action vocabulary to ensure your audit pipeline is compliant.

What is the best way to capture denied actions in application audit logs?

Capture denied actions in audit logs by wrapping mutating actions with withAudit or log.audit() patterns. This explicitly records denials alongside successful mutations to provide complete traceability and context.

How do I redact sensitive information from application audit logs?

Redact sensitive information from audit logs using provided patterns within the audit pipeline. This ensures compliance while maintaining the verifiable integrity of the actor, target, and outcome context.

When do I need a centralized audit action vocabulary for logging?

You need a centralized audit action vocabulary when your application requires strict governance and compliance. It standardizes the context captured for every mutation, ensuring traceability and consistent policy enforcement across the system.