You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There is no standardized audit trail for contract invocation activity. Applications cannot easily reconstruct which account invoked a contract method, when the invocation occurred, which parameters were supplied, or whether the call succeeded.
This limits debugging, security investigations, and compliance workflows.
Solution
Create a structured contract audit subsystem that records invocation metadata without exposing sensitive values.
Audit entries should include caller identity, contract ID, function name, transaction ID, timestamp, execution status, duration, and sanitized argument metadata.
Provide filtering, pagination, and export capabilities.
Acceptance Criteria
Contract invocations generate structured audit records.
Records include caller, contract, function, transaction ID, timestamp, duration, and result status.
Description
Problem
There is no standardized audit trail for contract invocation activity. Applications cannot easily reconstruct which account invoked a contract method, when the invocation occurred, which parameters were supplied, or whether the call succeeded.
This limits debugging, security investigations, and compliance workflows.
Solution
Create a structured contract audit subsystem that records invocation metadata without exposing sensitive values.
Audit entries should include caller identity, contract ID, function name, transaction ID, timestamp, execution status, duration, and sanitized argument metadata.
Provide filtering, pagination, and export capabilities.
Acceptance Criteria
queryContractAuditLog(filters)supports filtering.src/soroban/index.tsandsrc/index.ts.Note for Contributors
Audit logging should not materially change contract invocation latency. Avoid logging private keys, secrets, or complete sensitive payloads.