Secure logging: Control specification

Defines append-only audit recording with a hash chain or WORM store, required actor-object-reason fields, a store separate from the application database, and retention that outlives ordinary erasure except where a lawful exception is documented.

Published Sep 12, 2026