Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

ADR 0031: Audit log: append-only, hash-chained, optionally copied to S3/R2 with object lock; MCP uses the same path

  • Status: Accepted
  • Date: 2026-11-02
  • Ledger id: D-0031
  • Tags: agents, audit, security
  • Supersedes: none
  • Superseded by: none
  • Related: none

Context

Everything must be auditable and loggable; tampering must be evident.

Decision

Audit log: append-only, hash-chained, optionally copied to S3/R2 with object lock; MCP uses the same path.

Entry: who, on behalf of whom, triggering event, tool/endpoint, parameters, result, agent’s stated justification. Off-site copy out of reach of whoever operates the server. MCP has no separate path: same service layer, same log.

Consequences

  • This decision is binding for all contributors and agents. Changing it requires a new ADR approved by the maintainer (see ADR 0036).

Generated from decision D-0031 in the project decision ledger. Do not edit by hand; changes go through a new decision.