Logging and Audit

Status: TODO

State-changing control actions should record at least:

• timestamp
• device ID
• authenticated actor/service
• command ID
• semantic operation
• previous state if available
• requested new state
• validation result
• execution result
• firmware version

Audit records must not contain private keys, JWT seeds or VPN secrets.

TODO: define retention, integrity protection and backend access permissions.