Audit Log Event Pipeline

{
  "schemaVersion": "1.0",
  "capabilityId": "00000000-0000-4000-8000-000000000008",
  "name": "Audit Log Event Pipeline",
  "slug": "audit-log-event-pipeline",
  "summary": "Captures immutable-style security events with integrity chains, tenant isolation, retention rules, and export formats.",
  "granularity": "system",
  "purposes": [
    "audit logs",
    "compliance",
    "security events"
  ],
  "features": [
    "hash chains",
    "tenant isolation",
    "retention",
    "SIEM export"
  ],
  "functionalDescription": "Captures immutable-style security events with integrity chains, tenant isolation, retention rules, and export formats. The versioned contract documents deterministic behavior, failure modes, configuration, and integration boundaries for production teams.",
  "inputs": [
    {
      "name": "request",
      "contentType": "application/json",
      "description": "Validated application/json request payload",
      "required": true
    }
  ],
  "outputs": [
    {
      "name": "result",
      "contentType": "application/x-ndjson",
      "description": "Typed application/x-ndjson response with trace metadata",
      "required": true
    }
  ],
  "runtimes": [
    {
      "language": "TypeScript",
      "runtime": "node",
      "versions": [
        "20",
        "22"
      ]
    }
  ],
  "frameworks": [
    "PostgreSQL",
    "OpenTelemetry"
  ],
  "deploymentTargets": [
    "container",
    "kubernetes"
  ],
  "dependencies": [
    {
      "name": "zod",
      "version": ">=2",
      "optional": false
    }
  ],
  "permissions": [
    {
      "resource": "temporary-storage",
      "access": "read-write",
      "reason": "Bounded request processing"
    }
  ],
  "dataClassifications": [
    "internal"
  ],
  "complianceClaims": [
    "SBOM available",
    "Dependency scan recorded"
  ],
  "testEvidence": {
    "coveragePercent": 94,
    "tests": 254,
    "lastRun": "2026-07-20T14:00:00.000Z",
    "status": "passing"
  },
  "securityEvidence": {
    "criticalFindings": 0,
    "highFindings": 0,
    "score": 95,
    "scannedAt": "2026-07-19T09:30:00.000Z",
    "scanner": "FixtureScan 1.4"
  },
  "benchmarks": [
    {
      "name": "p95 latency",
      "value": 133,
      "unit": "ms",
      "environment": "2 vCPU / 2 GB fixture runner"
    }
  ],
  "buildBenchmark": {
    "basis": "fixture-directional",
    "sampleSize": 0,
    "referenceTask": "Reimplement the declared audit-log-event-pipeline contract in a compatible greenfield repository",
    "tokenEstimate": {
      "low": 174000,
      "high": 433000
    },
    "agentTimeMinutes": {
      "low": 128,
      "high": 363
    },
    "humanReviewHours": {
      "low": 2.3,
      "high": 8.2
    },
    "observedAt": null,
    "methodology": "Directional fixture derived from declared granularity and integration effort; no coding-agent replay was run.",
    "confidence": "low",
    "disclosure": "Prototype estimate only. It is not an empirical benchmark and must not be presented as measured savings."
  },
  "integration": {
    "estimatedHours": 4,
    "packageManager": "pnpm",
    "configurationNotes": [
      "Pin the immutable artifact digest",
      "Configure scoped service credentials"
    ]
  },
  "composition": {
    "composable": true,
    "interface": "event-consumer",
    "compatibleWith": [
      "audit-hash-chain-ledger",
      "tenant-context-propagation-guard",
      "multi-tenant-authorization-middleware"
    ],
    "requires": [],
    "contractStability": "stable",
    "evidence": "fixture-declared",
    "notes": [
      "Compatibility links are declared fixture metadata and have not been independently integration-tested"
    ]
  },
  "commercialModels": [
    "licensed-artifact",
    "source-license"
  ],
  "licenseOptions": [
    {
      "id": "evaluation",
      "name": "Private evaluation",
      "scope": "evaluation",
      "priceCents": 5,
      "unit": "evaluation",
      "rights": [
        "evaluation"
      ],
      "developerSeats": null,
      "restrictions": [
        "Non-production use only",
        "Results retained for 30 days"
      ]
    },
    {
      "id": "developer",
      "name": "Developer artifact",
      "scope": "individual",
      "priceCents": 19900,
      "unit": "one-time",
      "rights": [
        "artifact-access",
        "commercial-use"
      ],
      "developerSeats": 1,
      "restrictions": [
        "No redistribution",
        "One named developer"
      ]
    },
    {
      "id": "organization-source",
      "name": "Organization source",
      "scope": "organization",
      "priceCents": 250000,
      "unit": "one-time",
      "rights": [
        "artifact-access",
        "source-access",
        "modification",
        "commercial-use"
      ],
      "developerSeats": 100,
      "restrictions": [
        "No standalone redistribution",
        "Single purchasing organization"
      ]
    }
  ],
  "artifactDigests": [
    {
      "algorithm": "sha256",
      "digest": "2c32ab9ab59e48dbae1498b5cb8642d26401a49f6264072167e75c3dee6ed7fc",
      "artifactType": "source"
    }
  ],
  "provenance": {
    "builder": "FunctionFoundry demo build service",
    "sourceRevision": "fixture-audit-log-event-pipeline-v1",
    "builtAt": "2026-07-18T12:00:00.000Z",
    "signed": true
  },
  "maintenanceStatus": "active",
  "version": "1.8.0",
  "seller": {
    "name": "Boundary Logic",
    "verified": true,
    "reputation": 5
  },
  "verificationBadges": [
    "Security reviewed",
    "Provenance signed"
  ]
}