security_audit

Table `security_audit`

Audit log of security-relevant events.

Database: ionize

Owner: SDK (all modules)

Column	Type	Nullable	Description
`id`	`UUID`	no	Primary key.
`domain`	`TEXT`	no	`ciam` or `iam`.
`identity_id`	`UUID`	yes	Subject identity (NULL for unauth events).
`event_type`	`TEXT`	no	Event type (`login.success`, `lockout.applied`, etc.).
`source_ip`	`INET`	yes	Client IP.
`user_agent`	`TEXT`	yes	Browser user agent.
`metadata`	`JSONB`	no	Event-specific data.
`created_at`	`TIMESTAMPTZ`	no	Event time.

Schema owned by SDK (all modules). Migrations live in sdk/src/db.ts.