audit.proto

syntax = "proto3";

message AuditEvent {
        // Who (what are the semantics of this - needs to be clarified as things settle down)
        string user_id = 1;
        
        // Which application. eg., CRM, Equinox-bill, 
        
        // Origin of the event
        string origin_ip = 3;
        
        // When - managed by event envelope (applies_at)
        Timestamp when = 4;
        
        // Metadata about which screen, which customer's data, etc
        Map = 5; // sub-document in es
}

        enum Application{
                APPLICATION_NONE = 0;
                APPLICATION_WILLIAM = 1;
                APPLICATION_EQUINOX_BILL = 2;
        }
~