# Auditability

Record: `arch:auditability`
Kind: quality-attribute
Layer: [Observability](https://banes-lab.com/records/layer/observability.md)
Severity: mandatory for regulated/sensitive systems
Scope: system, data, security
Canonical: https://banes-lab.com/ontology#arch-auditability

## Repair

- Refactored by: Add Audit Log, Add Actor/Reason Metadata
- Detected by: missing audit event for sensitive operation
- Violated by: critical action without audit record
- Measured by: audit event coverage
- Enforced by: compliance gates

## requires

- [Audit Logging](https://banes-lab.com/records/arch/audit-logging.md)
- [Traceability](https://banes-lab.com/records/arch/traceability.md)

## reinforces

- [Compliance](https://banes-lab.com/records/arch/compliance.md)

## enables

- [Accountability](https://banes-lab.com/records/lex/accountability.md)

## conflicts-with

- [Opaque Mutation](https://banes-lab.com/records/lex/opaque-mutation.md)

## tensions-with

- [Storage/Privacy](https://banes-lab.com/records/lex/storage-privacy.md)

## tensions

- [Auditability Storage/Privacy](https://banes-lab.com/records/tension/auditability-storage-privacy.md)

## referenced-by

- [Centralized Logging](https://banes-lab.com/records/arch/centralized-logging.md)
- [Reproducibility](https://banes-lab.com/records/arch/reproducibility.md)
- [Event Sourcing](https://banes-lab.com/records/arch/event-sourcing.md)
- [Append-Only Log](https://banes-lab.com/records/arch/append-only-log.md)
- [Audit Logging](https://banes-lab.com/records/arch/audit-logging.md)
- [Traceability](https://banes-lab.com/records/arch/traceability.md)
- [Compliance](https://banes-lab.com/records/arch/compliance.md)
- [Continuous Compliance](https://banes-lab.com/records/arch/continuous-compliance.md)