Audit: Programmable Compliance

Compliance is no longer a "once-a-year" event; it is a continuous state. Audit is the logic layer that sits above your Compliance and Identity data, constantly cross-referencing who is active on the pool deck against the credentials they hold in their vault.

Instead of manually checking 100+ coaches and volunteers, Audit uses Manifest Logic to flag gaps before they become legal liabilities.

1. Defining the Audit Manifest

An Audit Manifest is a set of programmable rules that defines what "Compliant" looks like for a specific role. You can build different manifests for different groups:

• The Coaching Manifest: Requires [Vetting] + [Safeguarding 1] + [Coaching Level 2] + [Signed Code of Conduct].
• The Committee Manifest: Requires [Vetting] + [Safeguarding 1] + [Committee Induction].
• The Parent-on-Duty (POD) Manifest: Requires [Vetting] + [Club Membership].

2. Real-Time "Health Checks"

The Audit Dashboard provides a live "Traffic Light" view of your club's status. It doesn't just show who is expired; it predicts who will be expired by the time of your next scheduled audit.

• Green: All credentials are verified and have >30 days validity.
• Amber: Credentials are in "Pending" state (uploaded but not yet approved by the Compliance Officer).
• Red: Critical gap detected (User is active in a SmartGroup but has missing or expired credentials).

3. Generating the "Audit Pack" (ZIP Export)

When a National Governing Body (e.g., Swim Ireland) requests an audit, the traditional response is hours of scanning PDFs and renaming files. Audit reduces this to a single click.

The "Generate Audit Pack" tool performs the following forensic actions:

1. File Aggregation: Collects every verified certificate PDF/Image for every person in the manifest.
2. Standardized Naming: Automatically renames files (e.g., Vetting_John_Doe_Exp2028.pdf) to meet NGB standards.
3. Forensic Log: Includes a CSV manifest detailing exactly who verified each document and when.
4. Cryptographic Signature: Generates a signed checksum for the ZIP file to prove the contents haven't been tampered with since export.

4. Forensic Version History

If a safeguarding incident occurs, the club needs to prove what they knew and when they knew it. Audit maintains an immutable Version History of every credential.

If a coach updates their Vetting certificate, MyAthlete does not overwrite the old one; it archives it. This allows the club to generate a "Retrospective Audit," showing exactly who was compliant on any specific date in the past three years.

5. Workflow Comparison: Manual vs. Audit

Audit Step	Manual Management	Audit Workflow
Data Gathering	Chasing volunteers via WhatsApp/Email.	Auto-Pull: Users upload via Self-Service portal.
Status Verification	Checking a master spreadsheet daily.	Logic Gates: System flags gaps via Health Check.
NGB Submission	Manual PDF renaming and 50+ attachments.	One-Click Pack: Formatted, signed ZIP export.
Liability Protection	"He said/She said" on document dates.	Forensic Log: Cryptographic timestamp for every action.