Module audit 

Audit configuration.

The [audit] section controls the audit trail that satisfies NIAP CA PP FAU family requirements:

• FAU_GEN.1 — the server generates audit records for all security-relevant events (enrollment, authentication, key operations, admin actions).
• FAU_STG.1 — the audit trail is append-only at the application level.
• FAU_STG.4 — when overflow_policy = "halt", EST operations are rejected if the audit trail storage is exhausted.
• FAU_ARP.1 — when the alarm threshold is reached, the configured alarm action is triggered.

Structs

AuditConfig

[audit] section — audit trail configuration.

Enums

OverflowPolicy

What to do when audit storage is exhausted (FAU_STG.4).

RotationPolicy

Audit log rotation policy.