RecordsAudit
Immutable records and audit trails — see SYSTEM_DESIGN_ALIGNMENT.md section 10.4.
Why we need this / what value this brings
Some records (who approved a refund, who accessed sensitive data) need to be provably unaltered after the fact — application logs alone don't guarantee that.
When to use this
Wherever an action needs to be provably attributable later — disputes, admin actions, compliance requests.
How to use or implement this
Treat audit logging as a distinct concern from application logging, with stricter guarantees (append-only, retained on a defined schedule).
Subtopics
Empty folder — drop notes, links, and findings here as you research.