Attributable actions
Actor, tenant, action, resource, and request context travel together in one event.
Audit Log records who did what, to which resource, inside which tenant, and what changed—so support, operations, and security teams can investigate from structured product history.
Inspect the published API contractAudit Log domain
Structured event investigation
Operational workspace
Role changed
Actor, tenant, resource, and action captured together
Change set attached
Previous and new values retained as structured context
Tenant filter applied
Investigation remains inside the customer boundary
History inspected
Support or security reviews the attributable timeline
Product outcome
Important account, access, and workflow changes need durable actor and resource context. Audit Log gives those events a queryable domain model instead of leaving investigators to reconstruct business actions from infrastructure logs.
Actor, tenant, action, resource, and request context travel together in one event.
Structured before-and-after values make consequential updates easier to understand.
Operations can filter product history without beginning every question in raw service logs.
01 / Domain capabilities
Record business actions with explicit actor, tenant, action, resource, request, and metadata fields.
Keep the person or system responsible for an action tied to the product object that changed.
Attach structured change sets so reviewers can see what moved without comparing opaque payloads.
Filter events by tenant, actor, action, resource, and time through a documented cursor-based interface.
02 / Product workflow
The producing service identifies the business action, actor, tenant, resource, and relevant request context.
Audit Log accepts the event and any before-and-after fields through its published contract.
The event becomes part of the chronological product trail for the customer boundary.
Authorized operational workflows filter and inspect the event history when a question arises.
03 / Technical depth
POST /audit.v1.AuditService/RecordEvent
Authorization: Bearer $TOKEN
Content-Type: application/json
{
"tenant_id": "company_72",
"action": "ROLE_UPDATED",
"actor": { "type": "USER", "id": "user_19" },
"resource": { "type": "MEMBERSHIP", "id": "member_44" },
"changeset": {
"changed_fields": ["role"]
}
}Structured audit records remain separate from transient application and infrastructure logs.
Identity, Authz, Notifications, and product services can publish relevant domain actions.
Cursor-based queries support operational timelines, filters, and resource-level history.
04 / Where it fits
Review role, membership, and authorization changes with the actor and changed resource attached.
Give authorized operators an attributable timeline when a customer asks who changed a setting or workflow.
Use structured product history as one input to your own security and compliance program; no certification is implied.
Ownership model
The source license, update term, support boundary, and customer-cloud responsibilities remain explicit. Missing domain work can be scoped as a custom module instead of hidden in a roadmap promise.
Licensed Go source for the audit-history domain
Published REST and Connect/gRPC contract
Customer-controlled event data and retention decisions
Optional event types and investigation views scoped as custom work
Audit Log architecture review
Everything you need to know about integrating and hosting this Launch Rail service.