Struct AuditRecord 

pub struct AuditRecord {

    pub timestamp: DateTime<Utc>,
    pub kind: AuditRecordKind,
    pub originator: Option<UserId>,
    pub session_id: Option<SessionId>,
    pub invocation_chain: Vec<Principal>,
    pub roles: Vec<RoleName>,
    pub method: MethodPath,
    pub scope_required: Vec<Scope>,
    pub decision: AuditDecision,
    pub latency_us: u64,
    pub origin: Option<Origin>,
    pub client_ip: Option<IpAddr>,
    pub correlation_id: Uuid,
    pub policy_name: Option<ForwardPolicyName>,
    pub derivation: Option<ForwardDerivation>,
    pub caller_ns: Option<String>,
}

One audit observation: a scope check or a forward-policy application.

Shape is pinned by:

• AUTHZ-S01-output §1: base fields (timestamp, roles, method, scope_required, decision, latency_us, origin, client_ip, correlation_id).
• AUTHZ-S01-output §“AUTHZ-0 ratification revisions” §2: typed originator: Option<UserId>, session_id: Option<SessionId>, and the forensic invocation_chain: Vec<Principal> for confused-deputy reconstruction.
• AUTHLANG-S01-output §4: the kind discriminant (default ScopeCheck for serde) plus three optional fields populated only by ForwardPolicyApplied records: policy_name, derivation, caller_ns.

Defaults

kind defaults to AuditRecordKind::ScopeCheck when omitted from a deserialize payload — existing AUTHZ-side producers don’t need to set it. policy_name, derivation, caller_ns default to None — they are populated only by AUTHLANG-3’s forward-policy producer.

Sealing

Not sealed. The record is observational; constructibility is the point. See module-level docs.

Fields

timestamp: DateTime<Utc>

When the check ran (UTC).

kind: AuditRecordKind

Which kind of record this is — drives field-presence expectations. Defaults to ScopeCheck for legacy / AUTHZ-side producers that omit the field on deserialize.

originator: Option<UserId>

IdP-verified originator (the sub claim). None for anonymous / unauthenticated checks.

session_id: Option<SessionId>

IdP-issued session ID. None for anonymous / sessionless checks.

invocation_chain: Vec<Principal>

The chain of immediate-callers leading to this dispatch. Empty for a direct (originator-to-backend) call. Forensic reconstruction of confused-deputy escalations reads this field.

Deserialize routes via the crate-private mint paths (Principal::*_sealed) — see the module-level comment on the PrincipalWire types. The wire shape matches Principal’s derived Serialize.

roles: Vec<RoleName>

The roles the principal carried at decision time.

method: MethodPath

The method being invoked at decision time.

scope_required: Vec<Scope>

The scope set required by method. Empty if no scope is gated.

decision: AuditDecision

Allow or Deny { reason }.

latency_us: u64

Dispatch latency in microseconds.

origin: Option<Origin>

The backend Origin (URL-shaped, per CLIENTS-S01).

client_ip: Option<IpAddr>

Network-layer source IP, when knowable.

correlation_id: Uuid

Per-call correlation ID; ties this record to traces and metrics.

policy_name: Option<ForwardPolicyName>

ForwardPolicyApplied only: name of the policy that ran.

ForwardPolicyName wraps &'static str per AUTHLANG-2; the deserializer interns the JSON value into a 'static slot — see the module-level deserialize_policy_name doc.

derivation: Option<ForwardDerivation>

ForwardPolicyApplied only: the derivation the policy returned.

caller_ns: Option<String>

ForwardPolicyApplied only: the calling activation namespace.

Trait Implementations

impl Clone for AuditRecord

fn clone(&self) -> AuditRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuditRecord

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuditRecord

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.