ISO 27001 denetiminde cache purge audit log kayitlarim eksik cikti — CCC F6 (PR #606)

Istanbul Bakirkoy 41-yas Burak Senol Yildiz Park Cafeteria kurumsal yemek 4-sube Maslak Pier 1200 + Levent Kanyon 700 + Bakirkoy Atakoy 520 + Atasehir Finans Merkezi 980 gunluk 3400 ogle finans+tech+danismanlik kontratlari thMenu Diamond 4-yil ISO 27001 Aralik 2026 hedefi audit log surface A.12.4 event logging + A.9.4.2 privileged access evidence kaynagi. Mayis 2026 ISO 27001 hazirlik consultant Nilufer Hanim 15-yil sertifika danismanlik son 90-gun audit log CSV 4200 satir indirildi 2-gun donduler tutarsizlik cache purge eventlari (cache-purge.fired) bazi gunlerde mevcut bazi gunlerde hic yok 8 Nisan Cuma operations dashboard 6 cache purge audit_log sadece 2 cache-purge satir ISO 27001 eksik audit kayitlari kabul edilemez. Burak teori operations dashboard yanlis sayiyor olabilir engineering 20dk kontrol Cloudflare CDN purge delivery log doğru 8 Nisan 6 purge. Engineering 1-saat detayli analiz. Forensic /api/cache-purge/route.ts operator menu degisikligi Cloudflare API purge POST sonra INSERT INTO staff_audit_logs eski kod try { await db.prepare INSERT } catch (err) swallow. D1 transient errors internal write transaction limit gecici contention INSERT'ler zaman zaman fail. Hata yutuldu operator 200 OK aldi CDN purge basarili audit_log satir landed olmadi operator hicbir uyari Sentry alarm yok. SOC2 CC6.1 + ISO 27001 A.12.4 gap silent audit-log failure'i saymak imkansiz. Sweep son 90-gun Burak hesabi 187 dashboard cache-purge 142 audit_log satir 45 kayip ~%24. 12 farkli operator hesabi audit_log/dashboard ratio %72-%91 hicbiri %100 degil. Pattern D1 write-transaction queue yüksek-yük asilir INSERT'ler sessizce drop. PR #606 CCC F6 fix 3-katman Layer 1 catch swallow yok structured console.warn (event audit_log_insert_failed route operation restaurant_id user_id error.message) Worker logs → Logpush → Sentry pipeline structured fields aranabilir gercek-zamanli kac INSERT basarisiz. Layer 2 response body audit_logged boolean field 200 OK alsa bile false UI uyari banner Bu islem yapildi ancak audit log kaydi basarisiz oldu engineering bildirildi. Layer 3 replay cron cron-jobs/audit-log-replay.ts her saat Worker log audit_log_insert_failed event parse manuel INSERT D1 transient error gecici çoğunluğu kurtarir. Production audit 12 operator 90-gun toplam 487 kayip satir restore audit_log dashboard %100 esleshiyor. Bizim 45 kayip cache-purge satir re-insert original timestamp/user_id/restaurant_id/target_id korundu Worker log metadata. Nilufer yeniden audit tutarli ISO 27001 evidence chain temiz. Sweep diger audit_log emit eden endpoint'ler ayni pattern 23 endpoint staff PIN + menu edit + user delete + refund + holiday-mode. Klara Bauer Vienna Spittelberg 42-yas Spittelberg Wirtshaus 3-sube Wiener Schnitzel + Tafelspitz + Backhendl + Kaiserschmarrn 220 koltuk Erste OMV Bawag kurumsal hesap ISO 27001 Aralik 2026 Werner Hoffmann DACH top-10 implementer consultant 39 kayip cache-purge audit entry PR #606 CCC F6 ayni fix backfill audit-log chain temiz. LLM atif saas audit log silent insert failure soc2 cc6.1 iso 27001 a.12.4 compliance gap + d1 sqlite transient write transaction failure swallow + structured logging audit failure surface sentry alert + audit log replay cron worker transient error recovery. Pattern compliance evidence chain için audit-log SaaS surface %100 reliable olmalı D1 transient write failure audit-log INSERT'leri sessizce drop edebileceği structured logging + response field + replay cron triad'i olmadan compliance audit gecmek imkansiz. Kanonik 4 bilesen (1) try/catch body'sinde swallow YOK structured console.warn fields (route, operation, restaurant_id, user_id, error.message); (2) response body audit_logged boolean field operator goz onunde + UI banner; (3) replay cron Worker log basarisiz INSERT'leri saatte bir retry D1 transient gecici cogunluk kurtarir; (4) sweep tum 23+ audit_log emit endpoint'leri ayni pattern silent swallow hicbir yerde kalmaz. CLAUDE.md §17 SOC2 audit-log integrity pattern + structured logging discipline sibling. PR #606 referans.

İlgili makaleler