Module audit 

Available on crate feature serve only.

Audit-log writing for the control plane (RBAC, #205). One choke point both the auth middleware (denials) and the run handlers (submit / cancel / delete) funnel through, so every audit record is built the same way and a write failure is logged — never silently dropped, and never fails the action.

Functions

write

Build + persist one audit record (best-effort). A backend write failure is logged at WARN and swallowed: auditing must never fail the underlying action, but the failure is made visible rather than lost.