7. A system comprising: one or more processors; memory, communicatively coupled to the one or more processors, storing instructions that, when executed by the one or more processors, configure the one or more processors to perform acts comprising: receiving an access request for a resource by an access control scheme; performing by the access control scheme, at least partly in response to the access request, an authorization decision for the resource, the authorization decision comprising inputs, outputs, and internal data; specifying, by an auditing scheme, an audit policy comprising audit policy rules, the audit policy rules including audit content rules that specify what audit information from any of the inputs, the outputs, or the internal data is to be included in an audit record, and specify logical deduction data used or produced during an evaluation algorithm of the authorization decision, the logical deduction data comprising a proof graph indicating a logical chain of deductions that occur within the evaluation algorithm; and recording, by the auditing scheme, the audit record based at least in part on the specified audit policy.
7. A system comprising: one or more processors; memory, communicatively coupled to the one or more processors, storing instructions that, when executed by the one or more processors, configure the one or more processors to perform acts comprising: receiving an access request for a resource by an access control scheme; performing by the access control scheme, at least partly in response to the access request, an authorization decision for the resource, the authorization decision comprising inputs, outputs, and internal data; specifying, by an auditing scheme, an audit policy comprising audit policy rules, the audit policy rules including audit content rules that specify what audit information from any of the inputs, the outputs, or the internal data is to be included in an audit record, and specify logical deduction data used or produced during an evaluation algorithm of the authorization decision, the logical deduction data comprising a proof graph indicating a logical chain of deductions that occur within the evaluation algorithm; and recording, by the auditing scheme, the audit record based at least in part on the specified audit policy. 11. The system as recited in claim 7 , wherein the audit policy rules further include audit trigger rules that specify when the audit record is to be generated and added to an audit log.