{"id":"cloudtrail-default-audit-posture-has-significant-gaps","text":"CloudTrail's default configuration provides only management-event coverage with 90-day retention and ~5-minute delivery latency — data events, network events, and long-term retention all require explicit opt-in and additional cost.","truth_value":"OUT","source":"","source_url":"","source_hash":"","justifications":[],"dependents":[],"metadata":{"_retracted":true},"explanation":{"steps":[{"node":"cloudtrail-default-audit-posture-has-significant-gaps","truth_value":"OUT","reason":"retracted premise"}]}}