Data Governance & Audit
Structured audit logging, policy evaluation, and lineage tracking across every DataResource.
- audit-service logs structured `AuditEvent`s for compliance-relevant event trails across Nest’s services, including a `nest.auth.scope_denied` event on every authorization denial.
- policy-engine evaluates `PolicyRule`s covering access, retention, data-residency, and DLP (data-loss-prevention) concerns against DataResources — distinct from the network-layer default-deny NetworkPolicy.
- schema-service and data-indexer introspect, cache, and classify DataResource schema and contents; lineage-collector records an OpenLineage-style trail of how data flows between DataResources.