Audit events record actor, tenant, action, resource, old values, new values, metadata, IP address, user agent, request ID, and timestamp.
Events should be emitted for create, update, delete, login, failed login, logout, export, import, custom action, permission denied, file upload, and settings changes.