From c7c14cf28d91dcff131bd4e514c6c2d134a90516 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=B3=96=E9=9C=B2=E6=98=9F=E9=9C=9C=E2=80=A2=E6=9A=96?=
 =?UTF-8?q?=E9=9C=9E=E6=8B=BE=E5=85=89?= <2468001320@qq.com>
Date: Sun, 16 Aug 2026 19:33:40 +0800
Subject: [PATCH] docs: add auditable principle to core principles

---
 README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README.md b/README.md
index 1b7ffe6..baf106b 100644
--- a/README.md
+++ b/README.md
@@ -274,6 +274,7 @@ python scripts/guard_passive.py
 2. **Zero Logs** — Never touch the target's logging systems
 3. **Compliant Egress** — Every outbound call must pass `compliance_client.check()`
 4. **Fail-Closed** — If in doubt, deny; if misconfigured, deny; if no token, deny
+5. **Auditable** — Every operation writes to the audit log (`data/audit.jsonl`) for compliance review
 
 ---