docs: document audited views and declared IN lists

[puzpuzpuz]

Documents two features that ship together: audited views (QuestDB Enterprise) and declared value lists for IN (open source). The code is in questdb/questdb#7602 and questdb/questdb-enterprise#1203, neither merged yet, so this stays a draft until they are.

What goes where

• security/audited-views.md (new, after RBAC in the sidebar): creating an audited view, the AUDITED modifier, the sys.view_audit schema and the params JSON per type, querying and retaining the trail, what counts as a read, audited views read through other audited views, the bounded queue and when it drops rows, permissions, replicas and readonly=true, and limitations
• configuration/audited-views.md (new): view.audit.queue.capacity and view.audit.storage.policy
• query/sql/declare.md: AUDITED in the syntax, and a "Value lists" section with the misuse errors. It removes the old "bracket lists are not allowed" limitation, which the OSS PR lifts
• query/sql/create-view.md: the WITH AUDIT clause, and OWNED BY in the syntax block
• query/sql/alter-view.md, query/sql/drop-view.md, security/rbac.md: an audited view stays audited through ALTER VIEW; dropping one needs AUDIT VIEW; the new permission's row
• concepts/views.md: short "List parameters" and "Audited views" subsections that link to the pages above
• configuration/overview.md, sidebars.js, changelog.mdx: index entries. The changelog entries sit under September 2026 and may need to move to the month this merges

Limitations the page states

Three limitations came out of review and are spelled out under "Limitations":

• Auditing is lossy, and there is no lossless mode. A read never waits for its row to be recorded, so a row can be lost: when the queue is full, when a batch write fails, when the audit table's schema is rejected, or when the server stops with rows still queued. The "Delivery" section lists each case and the log line it leaves.
• A materialized view over an audited view takes that view's data out of the trail. Creating it, refreshing it and reading it all record nothing.
• An UPDATE of a WAL table that reads an audited view records nothing, because the read happens during WAL apply. The same statement on a non-WAL table is recorded.

The page also states that statements which open a query only to check it (CREATE VIEW, CREATE MATERIALIZED VIEW, ALTER VIEW, CREATE OR REPLACE VIEW) record nothing, and that a shadowed inner view's fixed AUDITED parameters are not on the outer view's row.

Not verified

• No yarn build. The sidebar config was loaded with node, and a link and anchor check over the changed files found no broken targets among the new links.
• The example SQL was not run against a server. The error messages quoted in the tables were checked against the source.
• "Reloadable: no" for the two settings comes from the code (neither key is in the dynamic properties), not from SHOW PARAMETERS on a running server.

🤖 Generated with Claude Code

[github-actions]

🚀 Build success!

Latest successful preview: https://preview-561--questdb-documentation.netlify.app/docs/

Commit SHA: 1f23615

📦 Build generates a preview & updates the link on each commit.