Description:

Log sensitive actions (login, logout, remittance build, split update, etc.) for security and compliance.

Requirements

• Define audit event shape: { timestamp, action, address?, ip?, resource?, result }
• For each sensitive route: log after success or failure (e.g. login success/fail, remittance build, split update)
• Log to stdout (structured JSON) or to a file/DB table; do not log full request body with secrets
• Optional: store in DB for audit trail UI later
• Document what is logged and retention

Acceptance Criteria

• Audit log helper and events implemented
• Sensitive routes log key actions
• No secrets in logs