fn audit(state: &AppState, request_id: &str, outcome: &str, error: Option<&str>)
The outcome, once per requester, each as its own source (§6.5 step 8).