MOBILE-ID · TRUSTED LTANS
Audit & Evidence
Distinguish audit records, cryptographic evidence and verification reports; trace and export under authorization.
Three records with different purposes
| Type | Content | Does not replace |
|---|---|---|
| AuditRecord | Actor, action, object, tenant, outcome and time with minimized sensitive data. | Does not replace ERS/XMLERS or establish truth. |
EvidenceRecord | Cryptographic binding, tokens and syntax-specific history. | Does not explain every approver/access decision by itself. |
VerificationReport | Context, evaluation time and step outcomes. | Not independent product certification. |
From action to reconciliation
| Element | Handling |
|---|---|
| Decision | Link actorId, tenantId, relevant archiveId/jobId and correlationId; retain policy revision. |
| Log preservation | Close/reconcile source windows before preservation; mutable logs are not immutable evidence. |
| Reporting | Projections retain provenance, watermarks and adjustments; replay never recounts usage. |
| Audit export | Separate audit:read, billing:read and byte access; manifests identify scope/components. |