Persist SecurityService PHI access trail to phi_access_log

FeatureSecurityService
Shipped
August 3, 2026 at 3:09 PM UTC
Author
Kamo
Commit
b0ef82f

The §164.312(b) trail was going to Slf4jPhiAccessLogWriter: 14-day platform retention against a six-year obligation, and nothing that can be queried. The lead reads and CSV/HMDA exports this service records are the accesses a §164.528 accounting is assembled from, so the trail has to survive in a table. Swaps in JpaPhiAccessLogWriter via a bean PhiAccessRecorder picks up through ObjectProvider.getIfUnique — no call site in PhiAccessAuditor changes. The matching com.kamo.z.shared.phi.audit entry in @EnableJpaRepositories ships in this same commit: the bean cannot be constructed without the repository, and declaring one without the other is what CrashLooped login earlier today.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing