Struct AuditEvent 

pub struct AuditEvent {
    pub timestamp: DateTime<Utc>,
    pub actor: ActorRef,
    pub namespace: String,
    pub verb: String,
    pub decision: AuditDecision,
    pub deny_reason: Option<String>,
    pub obligations: Vec<Obligation>,
    pub gate_impl: String,
    pub session_id: Option<String>,
    pub op_index: Option<u32>,
    pub ref_resolution: Option<RefResolution>,
}

Structured audit record emitted once per gate consultation.

JSON field names are stable; events reach tracing and the configured event store. See crates/khive-gate/docs/api/audit-events.md.

Fields

timestamp: DateTime<Utc>

Wall-clock timestamp of the gate check (UTC, RFC3339 in JSON).

actor: ActorRef

Caller identity as given to the gate.

namespace: String

Namespace in which the verb was invoked.

verb: String

Verb being dispatched.

decision: AuditDecision

Gate outcome — "allow", "deny", or "gate_unavailable".

deny_reason: Option<String>

Deny reason, present only when decision == "deny".

obligations: Vec<Obligation>

Obligations on allow; always serialized and empty on deny or outage.

gate_impl: String

Name of the gate implementation that produced this decision.

session_id: Option<String>

Correlation token — GateContext::session_id when present, else None.

op_index: Option<u32>

Original request parser position, not completion order. Unknown outside a composed-request scope and in historical envelopes.

ref_resolution: Option<RefResolution>

Reference provenance; absent together with op_index when unknown.

Implementations

impl AuditEvent

pub fn with_operation_attribution( self, operation: Option<OperationAttribution>, ) -> Self

Attach provenance established by a request runner. A direct gate consultation without that scope explicitly remains unattributed.

pub fn from_check( req: &GateRequest, decision: &GateDecision, gate_impl: &str, ) -> Self

Project one request/decision pair into a timestamped stable audit envelope.

See crates/khive-gate/docs/api/audit-events.md.

pub fn gate_unavailable(req: &GateRequest, gate_impl: &str) -> Self

Project a gate infrastructure failure into the stable audit envelope.

Trait Implementations

impl Clone for AuditEvent

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuditEvent

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuditEvent

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.