Immutable Audit Log

An immutable audit log provides non-repudiation. It proves that an event happened, which control acted, and what the system state was—without relying on mutable logs.

• Events are signed and timestamped; critical events are anchored to an immutable ledger.
• Validator health checks confirm anchoring integrity and replication status.
• Evidence objects include pointers to source telemetry and policy decisions.

1. 1
   Use “Recent Activity”

   to verify that critical policy updates and logins are recorded.
2. 2
   Export evidence packages

   for audits or incidents (includes chain-of-custody).
3. 3
   Set retention policy

   aligned to your regulatory window (e.g., 180+ days).
4. 4
   Monitor validator status

   to ensure anchoring SLAs are being met.