Function: assertAuditQuery()

> assertAuditQuery(query): asserts query is AuditQuery

Throws unless every filter of an AuditQuery has its declared type.

Handlers routinely forward a parsed query string, and a parser such as qs turns ?tenantId[not]=x into { not: 'x' } — which an ORM driver would read as an operator ("every tenant but x"). Audit validates every read, and the bundled drivers validate again so a store called directly is equally safe.