[Audit] Re: Updates on the proposed Audit charter - Please review and comment!

[Naveed Ihsanullah <[e-mail]>]

Mirja, Henk,

Support for chartering this work. The problem statement matches what we
see: attribution across administrative domains fails at the
who-is-responsible step.

One suggestion on the scope text, on this sentence:

> while the entities of a complex agents or workload system need to be
> identifiable, this group will not work on new identity primitives but
> rely on work in other groups or fora.

The reliance seems right. The charter could also state what audit
requires of it: an audit record should reference a binding between the
agent and an identified responsible party that a later reader can still
verify, across administrative domains and after the interaction has
ended.

Stating that requirement keeps the reliance actionable without taking
on the primitive itself.

Naveed