Audit & Telemetry

Audit & Recording

Establish the recording requirements that make governed QR activity reconstructable.

Protocol Family: Audit
Status: Published
Version: 1.0
Effective Date: 2026-08-12
Related Department: QRCodex.us
Scope: Meaningful transmissions and state-changing events.
Purpose: Establish the recording requirements that make governed QR activity reconstructable.
Dependencies: operating-sequence

Every meaningful action leaves a record.

Accountability requires reconstruction. Where required by the applicable Protocol, meaningful transmissions and state-changing events create records sufficient to determine:

Who / What

Acted during the interaction.

What

Occurred during the transmission.

When

It occurred on the infrastructure timeline.

Which

Protocol governed the action.

Conditions

Were evaluated prior to activation.

Outcome

Resulted from execution.

Important Distinction

Protocol establishes the recording requirements. QRCodex maintains the applicable operational records and evidence within its jurisdiction.

Recording is what makes governed activity reviewable. Without an event record, an outcome cannot be attributed, reconstructed or evidenced, and the governance applied to it cannot be demonstrated after the fact.

What a record supports

•Attribution — which object, actor and action were involved
•History — the sequence of events affecting the object over time
•Evidence — material sufficient to demonstrate what occurred
•Audit — later review of whether the applicable rules were followed

Division of responsibility

QRProtocol establishes the recording requirement. QRCodex maintains the applicable operational records and evidence within its jurisdiction. Protocol does not duplicate the Codex record.

Definition

Every meaningful action leaves a record.

Governing Rule

Protocol establishes the recording requirements. QRCodex maintains the applicable operational records and evidence within its jurisdiction.

What it governs

— Which events require a record
— What a record must be sufficient to establish
— Reviewability of governed system behavior

Permitted

— Recording of issuance, registration, certification, activation, validation, verification, scan, routing, transfer, metadata change, compliance event, revocation, expiration, reissuance, archive and completion events where applicable

Not permitted

— An independent QRProtocol event ledger
— A Protocol-operated audit database
— Claims of absolute immutability or tamper-proof guarantees

When the condition passes: The event is recorded so it can be audited later.
When the condition fails: Missing or invalid evidence is treated as a failure class under Failures & Exceptions.
Department performing the operation: QRProtocol.us establishes recording requirements. QRCodex.us maintains the operational records and evidence.
Record / evidence required: Who or what acted, what occurred, when, which Protocol governed it, which conditions were evaluated, and the outcome.
Where the operational record lives: QRCodex.us.

Direct Answers

Does QRProtocol store the records?

No. QRProtocol establishes the applicable recording requirements. QRCodex maintains the operational record, dossier and evidence.

What must an audit record establish?

Who or what acted, what occurred, when it occurred, which Protocol governed it, which conditions were evaluated, and the outcome — sufficient to reconstruct the interaction later.

Are QR Protocol records immutable?

No claim of absolute immutability or tamper-proofing is made. Protocol establishes what must be recorded; QRCodex maintains the operational record and evidence.