> Audit trails are commonly neglected coz somebody didnt ask the right questions, not coz somebody didnt try to anticipate the future.
But how do you ask "the right questions" without imagining many future possibilities and then trying to discern which ones are important?
It seems like a distinction without a difference to me.
Imagining future possibilities and implementing software to account for them are two different things.
The argument here is to validate those possibilities before acting on them.