Add confirmed audit reversals

2026-07-25 03:57:15 -04:00
parent 6be31de986
commit 99fe6043ff
7 changed files with 193 additions and 5 deletions
@@ -88,6 +88,12 @@ Follow these rules:
 10. Tests and handoff verification for an ISAC mutation must include confirming
    that its audit event contains the correct actor, category, action, target,
    and change evidence.
+11. Audit reversion is a separately authorized compensating action, never a
+    history rewrite. Require `audit.revert`, an explicit confirmation
+    interaction, current-state comparison against the original after-snapshot,
+    relationship validation, and a new `audit.reverted` event referencing the
+    original event. Block stale, already-reverted, unsupported, destructive
+    identity, and incomplete-snapshot events rather than guessing.

 ## Database preservation