What problem does it solve? Teams in regulated environments struggle to prove what changed, who approved it, and how a risk was resolved. This Skill provides engineering guidance for building machine-verifiable audit trails, change records, and remediation evidence directly into the development workflow. ## Core Features & Use Cases - Audit Log Design: Enforces a schema where every audit event carries actor, resource, action, timestamp, result, and context, validated by automated tests. - Traceability & Evidence Linking: Connects PRs to alerts, tickets, decisions, and deployments with stable links that survive retention policies. - Risk Acceptance Governance: Requires owner, rationale, expiry, and compensating controls before any risk acceptance is recorded. - Use Case: When closing a vulnerability remediation, use this Skill to ensure the PR links the advisory ID, affected and fixed versions, scanner results, and regression tests so an auditor can reconstruct the full chain. ## Quick Start Ask the agent to review your change workflow and design audit evidence for a sensitive action, including the log schema, traceability links, and risk-acceptance fields.
