principle requests functionality archiving eyes cibet authorization database dual audit implement proof mechanisms events intrusive method locking control possible integrate with framework calls principles http logging uses actions theory