Auditing 合规审计模块架构概览：不可篡改事实与多引擎冷热分层

using BitzOrcas.Domain.Entities;
using BitzOrcas.Persistence.Metadata;

namespace BitzOrcas.Auditing.Domain;

// 审计主表按月分表存储（如 SysAuditLog_202608），杜绝单表过大
[BitzTable("SysAuditLog", IsTenant = true, IsSoftDelete = false, Description = "平台不可篡改审计主表")]
[BitzIndex("IX_SysAuditLog_TraceId", nameof(TraceId))]
[BitzIndex("IX_SysAuditLog_Tenant_Time", nameof(TenantId), nameof(OccurredAt))]
public sealed class SysAuditRecord : Entity<string>
{
    [BitzColumn(Length = 64, IsRequired = true)]
    public string TraceId { get; set; } = string.Empty;

    [BitzColumn(Length = 64, IsRequired = true)]
    public string ActionName { get; set; } = string.Empty;

    [BitzColumn(Length = 64, IsRequired = true)]
    public string OperatorId { get; set; } = string.Empty;

    [BitzColumn(Length = 120)]
    public string OperatorName { get; set; } = string.Empty;

    [BitzColumn(Length = 50)]
    public string ClientIp { get; set; } = string.Empty;

    [BitzColumn(IsRequired = true)]
    public DateTimeOffset OccurredAt { get; set; }

    [BitzColumn(IsRequired = true)]
    public long DurationMs { get; set; }

    // JSON 差异快照（记录变更前与变更后字段对比）
    [BitzColumn(IsJson = true)]
    public string? DiffSnapshot { get; set; }
}

using BitzOrcas.Application.Abstractions.Queries;
using BitzOrcas.Domain.Results;
using BitzOrcas.Endpoint.Attributes;
using Mediator;

namespace BitzOrcas.Auditing.Application.Queries;

// 1. 声明式查询端点：编译期生成 Minimal API 路由映射
[GenerateEndpoint(HttpRoute.Query, "/api/auditing/logs", Tag = "Auditing")]
// 2. 游标分页契约：基于 CursorTime 与 CursorId 实现深分页零性能抖动
public sealed record QueryAuditLogsQuery(
    DateTimeOffset? StartTime,
    DateTimeOffset? EndTime,
    string? CursorTime,
    string? CursorId,
    int PageSize = 50) : IQuery<Result<PagedList<AuditLogDto>>>;