audit_chain 1.0.1

Patch release. Fixes one regression introduced by the extraction in 1.0.0.

Fixed

The streamed SIEM record carries bundle again. 1.0.0 dropped it in the move out of MCP Sentinel, where it had always been emitted. Nothing failed and nothing warned — a SIEM rule keyed on bundle would simply have stopped matching, which is the worst way for an audit stream to regress: the consumer keeps receiving records and only the rule stops firing.

The extraction's stated principle is that chain behaviour carries over unchanged, so this was a defect against that promise rather than a missing feature. The streamed context is now asserted field by field in the test suite rather than by shape, so a future omission fails loudly.

Upgrading

No database or configuration changes. composer update drupal/audit_chain.

If you consume the audit_chain logger channel and had adjusted a rule to work around the missing field, that adjustment can be reverted.