15. Audit

Every mutating operation writes an audit row.

curl "$BASE/v1/audit?limit=50" -H "Authorization: Bearer $KEY"
curl "$BASE/v1/audit/export" -H "Authorization: Bearer $KEY"   # CSV

Rows carry actor, action, resource, request id, status and payload. Cursor paginated via next_cursor / has_more.