Auditability

Kind: quality-attribute

Layer: Observability

Record: architecture:auditability

Severity: contextual

Scope: system, data, security

Canonical: Ontology

The degree to which each sensitive action can be traced afterwards to its actor, target, time and reason.

Listed in Architecture principles, after Alerting and before Audit Logging.

Requires

• Audit Logging
• Traceability

Reinforces

• Compliance

Enables

• Accountability

Conflicts with

• Opaque Mutation

In tension with

• Storage/Privacy

Tensions

• Auditability / Storage/Privacy

Contracts

• Governed Autonomous Plan Loop

Violated by

• Untracked Mutation

Refactored by

• Audit Logging
• Data Change Audit

Severity

• contextual

Category

• Observability / Auditability / Traceability

Reinforced by

• Centralized Logging
• Reproducibility
• Event Sourcing
• Append-Only Log
• Continuous Compliance

Linked from

• Debt and leverage
• Control / Coordination / Centralization
• Correctness / Determinism / Verification
• Event / Messaging / Asynchronous Architecture
• Observability / Auditability / Traceability
• Security / Privacy / Compliance / Governance
• Observability / Auditability / Traceability
• Quality Attributes
• Governed plan loop
• Severity levels
• The resolutions