Audit Trail

What Is Logged

The SDLC workflow automatically produces audit evidence at each stage:

Event	Evidence	Location
Requirement created	PREQ issue	Platform issues
Requirement approved	Issue comment + label change	Platform issues
Plan approved	Issue comment + label change	Platform issues
Code implemented	Git commits with conventional messages	Git history
Code reviewed	Code review report	Wiki: features/<id>/review-report.md
E2E validated	E2E report	Wiki: features/<id>/e2e-report.md
UAT approved	Issue comment	Platform issues
Feature released	Release page + tag	Wiki: releases/ + Git tags
Documentation updated	Wiki git history + governance issue	Wiki history + Platform projects

Documentation Changes

All wiki changes are tracked in the wiki's git history. Changes to sensitive sections (security/, development/architecture) are additionally tracked through the documentation governance process with explicit approval records.

See Documentation Governance for the review policy.

Retention

Define how long audit records are retained.

---

Last reviewed: Not yet reviewed