# Auditability

> The degree to which each sensitive action can be traced afterwards to its actor, target, time and reason.

Record: `architecture:auditability`
Kind: quality-attribute
Layer: [Observability](https://banes-lab.com/records/layer/observability.md)
Severity: contextual
Scope: system, data, security
Canonical: https://banes-lab.com/ontology#architecture-auditability

Listed in [Architecture principles](https://banes-lab.com/api/records/architecture.md), after [Alerting](https://banes-lab.com/records/architecture/alerting.md) and before [Audit Logging](https://banes-lab.com/records/architecture/audit-logging.md).

## Repair

- Refactored by: Add Audit Log, Add Actor/Reason Metadata
- Detected by: missing audit event for sensitive operation
- Violated by: critical action without audit record
- Measured by: audit event coverage
- Enforced by: compliance gates

## Requires

- [Audit Logging](https://banes-lab.com/records/architecture/audit-logging.md)
- [Traceability](https://banes-lab.com/records/architecture/traceability.md)

## Reinforces

- [Compliance](https://banes-lab.com/records/architecture/compliance.md)

## Enables

- [Accountability](https://banes-lab.com/records/lexicon/accountability.md)

## Conflicts with

- [Opaque Mutation](https://banes-lab.com/records/lexicon/opaque-mutation.md)

## In tension with

- [Storage/Privacy](https://banes-lab.com/records/lexicon/storage-privacy.md)

## Tensions

- [Auditability / Storage/Privacy](https://banes-lab.com/records/tension/auditability-storage-privacy.md)

## Contracts

- [Governed Autonomous Plan Loop](https://banes-lab.com/records/algorithms/governed-autonomous-plan-loop.md)

## Severity

- [contextual](https://banes-lab.com/records/vocabulary/severity-contextual.md)

## Category

- [Observability / Auditability / Traceability](https://banes-lab.com/records/architecture-category/observability-auditability-traceability.md)

## Reinforced by

- [Centralized Logging](https://banes-lab.com/records/architecture/centralized-logging.md)
- [Reproducibility](https://banes-lab.com/records/architecture/reproducibility.md)
- [Event Sourcing](https://banes-lab.com/records/architecture/event-sourcing.md)
- [Append-Only Log](https://banes-lab.com/records/architecture/append-only-log.md)
- [Continuous Compliance](https://banes-lab.com/records/architecture/continuous-compliance.md)

## Linked from

- [Debt and leverage](https://banes-lab.com/software-architecture/decay/debt-and-leverage.md)
- [Control / Coordination / Centralization](https://banes-lab.com/ontology/principles/architecture-category-control-coordination-centralization.md)
- [Correctness / Determinism / Verification](https://banes-lab.com/ontology/principles/architecture-category-correctness-determinism-verification.md)
- [Event / Messaging / Asynchronous Architecture](https://banes-lab.com/ontology/principles/architecture-category-event-messaging-asynchronous-architecture.md)
- [Observability / Auditability / Traceability](https://banes-lab.com/ontology/principles/architecture-category-observability-auditability-traceability.md)
- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)
- [Observability / Auditability / Traceability](https://banes-lab.com/ontology/lexicon/lexicon-category-observability-auditability-traceability.md)
- [Quality Attributes](https://banes-lab.com/ontology/lexicon/lexicon-category-quality-attributes.md)
- [Governed plan loop](https://banes-lab.com/ontology/algorithms/algorithms-domain-governed-plan-loop.md)
- [Severity levels](https://banes-lab.com/ontology/schema/the-vocabulary-severity.md)
- [The resolutions](https://banes-lab.com/ontology/schema/the-resolutions.md)