muono
ReferenceSecurity specification
Revision AStatus Current

Audit trail

For your IT and OT reviewers
Purpose

Every action attributable to a person.

An agent that acts without a record is not supervised, whatever the interface claims. This page states what Muono records, how far back the record reaches, and what can be reconstructed after the fact.

Attribution

Every agent action is recorded against the person whose authority it ran under, not against a service account. If nobody authorised it, it does not run.

Person, not service account

Evidence

Each action carries the readings, records and documents it relied on, as they stood at the time. An answer that cannot show its inputs is not an answer you can defend to an auditor.

Inputs kept with the action

Replay

A run can be replayed after the fact to see what it saw and why it decided as it did. Side-effects in your systems are reversible, and reversal is itself recorded.

Replayable and reversible

Point-in-time model

The model can be read as it stood at any past date. This is what makes a submission reconstructable months later, when the plant has moved on and the original figure is being questioned.

Any past date

Access records

Who read what, and when, on the same footing as who changed what. Read access matters in an industrial record because commercially sensitive figures sit next to routine ones.

Reads and writes

Export

The trail exports for your own audit and retention systems. It is your record of your plant, and it should not be trapped in ours.

Exportable

Audit is where a pilot either convinces or does not.

If your assurance team wants to test the trail during a pilot, that is the right time and we will scope it in.