add audit document

[dongzl]

ref #18430 .

Changes proposed in this pull request:

• add audit document.

---

Before committing this PR, I'm sure that I have checked the following options:

• [x] My code follows the code of conduct of this project.
• [x] I have self-reviewed the commit code.
• [x] I have triggered maven check: mvn clean install -B -T2C -DskipTests -Dmaven.javadoc.skip=true -e.
• [x] I have made corresponding changes to the documentation.
• [x] I have added corresponding unit tests for my changes.

[strongduanmu]

LGTM, let's wait @terrymanu review this pr again.