7. The computer-implemented method as recited in claim 5 , wherein a semantic of the at least one audit content rule comports with the semantic framework of the access request including the particular resource and the logical evaluation including both the authorization query and the assertion context.
5. A computer-implemented method configured to execute instructions which, when executed by a computer processor, direct the computer to perform acts comprising: specifying at least one audit trigger rule that indicates when an audit record is to be generated; receiving an access request from an input device targeting a particular resource stored in a memory; performing, in response to the access request, a logical evaluation of an authorization query in conjunction with an assertion context to make an authorization decision about the particular resource stored in the memory; detecting if the at least one audit trigger rule matches the access request or the logical evaluation; if the at least one audit trigger rule is detected to match, generating an audit record; wherein a semantic of the at least one audit trigger rule comports with a semantic framework of the access request including the particular resource stored in the memory and the logical evaluation including both the authorization query and the assertion context; the performing comprises developing a logical chain of deduction starting from assertions of the assertion context and leading to the authorization query; the method further comprises producing a proof graph having nodes representing assertions and directed edges representing logical deduction links of the logical chain of deductions; and the audit record includes the proof graph; and specifying at least one audit content rule that indicates what audit information is to be included as part of an audit record, wherein the generating comprises generating an audit record based on the at least one audit content rule, and wherein the specifying at least one audit content rule comprises specifying policy assertions that are input to the logical evaluation from an authorization and trust policy.