Post-hoc Logging as Governance is a structural anti-pattern in which the audit log is treated as the governance mechanism, with no enforced coupling between authorization and effect. The pattern is characterized by:
This pattern concerns the temporal and causal relationship between authorization and effect, not the integrity of the logging substrate.
- Comprehensive logging of executed actions, often to tamper-evident or append-only stores.
- Authorization decisions that are recorded after — or independent of — the action they purport to authorize.
- An audit-readiness posture that conflates the existence of a record with the legitimacy of what it records.
- No mechanism by which the log itself can prevent an unauthorized effect from occurring.
The mechanism typically manifests through:
The mechanism produces evidence as a documentary artifact rather than as a constitutive part of the action. Logging is downstream of effect; governance requires it to be upstream.
- Asynchronous logging pipelines where effect production runs ahead of log persistence.
- "Audit after" designs where the system executes first and records justification afterward.
- Same-process log writers, where the component executing the effect also writes its own authorization record.
- Compliance-driven implementations that satisfy regulatory record-keeping requirements without satisfying governance preconditions.
The audit trail describes what happened. It cannot guarantee that what happened was authorized.
Three failure modes follow:
- Under partial failure, log writes lag effect production. The system performs effects whose authorization records are pending, lost, or never written. Reconstruction after the fact cannot distinguish "effect occurred and was authorized" from "effect occurred and authorization failed."
- Under adversarial pressure, log entries can be backdated relative to the effects they purport to authorize. Tamper-evidence on the log substrate does not prevent a compromised writer from producing entries that order events incorrectly.
- Under scale, the log and the effect diverge. Sampling, rate-limiting, retention policies, and storage failures all break the one-to-one correspondence the governance claim depends on.
Audit becomes a description of system behavior rather than a structural guarantee of governance. The organization can reconstruct what occurred but cannot guarantee that what occurred was permissible at the moment of occurrence.
This violates Evidence-Coupled Execution (ZTG-4): no externally observable effect may exist without simultaneous durable evidence of authorization. Logging-as-governance produces effects whose evidence is documentary, asynchronous, and dissociable.
COUNTER-PATTERN: Authorization Precedes Commit (SDS.FN.003)
Authorization must precede the irreversible commit, and the evidence of authorization must be coupled to the effect itself — not written about it after the fact. The counter-pattern requires:
The audit trail then ceases to be an interpretive reconstruction and becomes a constitutive account of governed action.
- A pre-execution authorization step that produces a binding decision artifact.
- Atomic coupling between effect and evidence: the action either commits with its authorization record or does not commit at all.
- A governance layer separate from the executor, so the writer of the authorization record is not the consumer of its protections.
- Failure of evidence write is failure of execution.
Post-hoc Logging as Governance produces records that describe system behavior. Governance requires evidence that constitutes system behavior. The two are not interchangeable, and the gap between them is where ungoverned effects originate.