Audit Log
Problem
Someone changed a production permission yesterday.
Today you need to know:
Who changed it?
When?
What changed?
Normal application logs may not reliably preserve this security history.
Solution — Audit Logging
Record security- and governance-relevant actions with actor, action and time.
09:41 Alice changed role: Reader → Contributor
Core idea: audit logs preserve accountability for important actions.