[Audit] Re: Updates on the proposed Audit charter - Please review and comment!

[Sumit Ahuja <[e-mail]>]

Mirja,

Right. The missing record could mean the task was never executed, or that the record was never created. Those are different facts, and a verifier holding the records cannot tell them apart. That was the point I was trying to make.

Where I would differ slightly is when the record is not complete and further investigation is needed, it is available to an operator inside the domain. It is often not available to the party the audit exists for, who holds the records and can reach nobody. For that party the two cases stay indistinguishable permanently.

On the transparency log: it detects a record that existed and was later removed.

So yes to your closing point. If the charter says explicitly that an absent record is ambiguous between not-performed and not-recorded, and that resolving it is outside what the data models can do alone, the data model work inherits the right limit instead having discovered later.

Sumit P. Ahuja
Main Labs