72388a7616
Bundle D code-review feedback on0ae1a25ande6f7a7f: - Audit error rate (HealthMonitoring tile) was described as a combined view of CentralAuditWriteFailures + AuditRedactionFailure (writer health). Per alog.md §10.3 / §14.1 it is the operational error rate of audited operations: % of central AuditLog rows with Status not in (Success/Delivered/Enqueued) over a rolling 5-min window. Audit writer issues surface separately via the dedicated metrics. - Audit volume description gains the spec-mandated 'events/min, global + per-site sparkline' shape. - CLI: scadalink audit was claiming all three subcommands need both OperationalAudit and AuditExport. Per alog.md §11.2 / §15.1, read (query, verify-chain) needs OperationalAudit; bulk export additionally requires AuditExport. Restored the spec's split.