begin modeling specific audit events

* updates #15 ~enhancement