Module audit_tag 

Audit tagging for K2K messages (multi-tenant cost/audit accounting).

This module defines AuditTag — a two-level hierarchy used to attribute GPU work to a specific organization (audit firm) and engagement (audit project). Every K2K message envelope carries an AuditTag alongside its TenantId, enabling per-engagement cost tracking and audit trails without affecting the primary security boundary (which is TenantId).

Two-tier model

• TenantId = security boundary (routing, isolation, quotas)
• AuditTag { org_id, engagement_id } = observability / billing

A single tenant may run many concurrent engagements (e.g. one audit firm conducting audits of several unrelated clients). Cross-engagement sends inside the same tenant are allowed (they are not a security boundary), but the envelope’s AuditTag is preserved so cost is accounted correctly.

Example

use ringkernel_core::k2k::audit_tag::AuditTag;

// Audit firm 42 running engagement 7 for client Acme Corp
let tag = AuditTag::new(42, 7);
println!("{}", tag); // "org=42 engagement=7"

Structs

ArchivedAuditTag

An archived AuditTag

AuditTag

Two-level hierarchy for audit firm workload accounting.

AuditTagResolver

The resolver for an archived AuditTag