OQL as an audit rule