_audit-export

Audit Export Protocol

CORE FRAMEWORK MODULE Writes structured audit entries after each feature commit and gate decision. Entries are append-only. Optional webhook exports to external systems. Referenced by: feature-lifecycle (Stage 5), forge (Phase 6), gate-keeper, hotfix

---

Purpose

Override logs in logs/overrides.md and evaluator verdicts in commit bodies live inside the git repo and can be destroyed by force-push, branch deletion, or repo migration. This protocol writes a parallel logs/audit-trail.jsonl (newline-delimited JSON, append-only) and optionally POSTs entries to a webhook for external durability.

---

Entry Types

feature_commit

Written by feature-lifecycle at Stage 5 completion:

{
  "ts": "ISO8601",
  "type": "feature_commit",
  "story_id": "STORY-001",
  "feature": "JWT login flow",
  "commit_hash": "abc1234",
  "commit_message": "feat(auth): JWT login flow [STORY-001]",
  "execution_mode": "REAL",
  "stages": {
    "implement": "done",
    "testloop": {"status": "done", "iterations": 2, "tests_passed": 89, "tests_failed": 0, "coverage_lines": 91.2},
    "semgrep": {"status": "done", "hard_blocks": 0, "warnings": 1},
    "challenge": {"status": "done", "cycles": 2, "final_verdict": "✅"},
    "document": "done",
    "commit": "done"
  },
  "overrides_used": 0,
  "files_committed": 7,
  "complexity_tier": "MEDIUM"
}

override_decision

Written by any agent when --override is used:

{
  "ts": "ISO8601",
  "type": "override_decision",
  "stage": "testloop",
  "reason": "accepting 1 flaky E2E test — tracked in STORY-045",
  "commit_context": "abc1234",
  "user": "git-config-user-name",
  "verdict_at_override": "🔴"
}

gate_blocked

Written by gate-keeper when a gate is locked (even if later resolved):

{
  "ts": "ISO8601",
  "type": "gate_blocked",
  "stage": "STORY-001",
  "violations": ["Missing unit tests in auth.service.ts", "Security headers not configured"],
  "resolution": "auto-fixed | manually-fixed | overridden | unresolved",
  "resolved_at": "ISO8601"
}