# Audit Logging

```yaml
Format: <timestamp>|<operation>|<risk>|<user>|<status>|<details>
Location: .claudedocs/audit/YYYY-MM-DD.log | Daily rotate | 10MB max | 30d retention

Risk: CRIT[10] | HIGH[7-9] | MED[4-6] | LOW[1-3]

Required:
  - File deletions/overwrites
  - Git operations (push,force,rebase)
  - Database operations
  - Deployments
  - Security modifications
  - Checkpoints/rollbacks

Integration:
  Start: audit_log("start",op,risk)
  Success: audit_log("success",op,risk)
  Failure: audit_log("fail",op,risk,error)
```