1. A device comprising: memory and a processor; an auditing scheme module, stored in the memory and executable on the processor; and an access control scheme module, stored in the memory and executable on the processor, that is integrated with the auditing scheme module, wherein the access control scheme module makes authorization decisions in response to access requests for resources, the authorization decisions including inputs, outputs, and internal data, and the auditing scheme module includes an audit policy that comprises audit policy rules, the audit policy rules including audit content rules that: specify what audit information from any of the inputs, the outputs, or the internal data is to be included in an audit record, and specify logical deduction data used or produced during evaluation algorithms of the authorization decisions, the logical deduction data comprising proof graphs indicating respective logical chains of deductions that occur within the evaluation algorithms.
1. A device comprising: memory and a processor; an auditing scheme module, stored in the memory and executable on the processor; and an access control scheme module, stored in the memory and executable on the processor, that is integrated with the auditing scheme module, wherein the access control scheme module makes authorization decisions in response to access requests for resources, the authorization decisions including inputs, outputs, and internal data, and the auditing scheme module includes an audit policy that comprises audit policy rules, the audit policy rules including audit content rules that: specify what audit information from any of the inputs, the outputs, or the internal data is to be included in an audit record, and specify logical deduction data used or produced during evaluation algorithms of the authorization decisions, the logical deduction data comprising proof graphs indicating respective logical chains of deductions that occur within the evaluation algorithms. 2. The device as recited in claim 1 , wherein the audit content rules utilize a semantic framework that is utilized by the access control scheme for making the authorization decisions.