Audit Logging

Owner: Security
Reviewers: Backend, Operations
Status: Draft
Version: 0.1
Last Updated: 2026-09-16
Review Cycle: Per audit requirement change

Current State

The backend includes an activity logs module. Full audit coverage, retention and review process are not yet confirmed.

Events To Audit

• Login and session/security events.
• User creation, update, status and scope changes.
• Farm/pond/crop ownership or state changes.
• Report exports.
• Device commands.
• Security-sensitive settings changes.

Open Items

• Define immutable audit requirements.
• Define retention and access controls.
• Add audit coverage tests for critical actions.