Audit Module
Source document: modules/en/audit/README.md / Propose an edit
Purpose
Section titled “Purpose”The Audit Module handles transparency, audit logs, decision history, accounting transparency, authority changes, and conflict-of-interest records.
Audit is not a tool for creating surveillance. It must separate transparency from privacy.
Problem
Section titled “Problem”Cooperation infrastructure becomes corrupt or untrusted when decisions, accounting, authority changes, support judgments, reputation evaluations, or arbitration decisions become opaque.
At the same time, recording everything can become surveillance and expose participants unnecessarily.
- Decision logs
- Authority change history
- Accounting transparency
- Proposal and Decision tracking
- Auditable change history
- Conflict-of-interest records
- Misuse detection
- Definition of audit scope
- Separation of public and protected information
- Appeals against audit findings
Out of Scope
Section titled “Out of Scope”- Surveillance of private life
- Monitoring all communications
- Belief monitoring
- Centralization of audit authority
- Privacy violations in the name of transparency
- Rule by auditors
- Unnecessary exposure of participants who need anonymity or safety
Relationship to Other Modules
Section titled “Relationship to Other Modules”- Governance: records decisions and authority changes
- Economy: checks accounting, donations, expenses, and point designs
- Welfare: handles transparency of support conditions and decisions
- Arbitration: connects to evidence, rationale, and appeals
- Infrastructure: connects to logs, backups, and tamper resistance
- Reputation: verifies evaluation evidence and changes
Initial Notes
Section titled “Initial Notes”Audit should mean making necessary scopes verifiable, not granting a universal right to observe everything.
Early work should focus on Decision Logs, Pull Request history, financial transparency, authority changes, and conflict-of-interest records.
Open Questions
Section titled “Open Questions”- What should be public and what should be protected?
- Who audits the auditors?
- How can privacy and transparency be balanced?
- How can audit logs resist tampering?
- How much accounting or point history should be public?
- How should different legal systems be handled?