How to audit the "workload-version" of an application

As part of our work trying to be compliant with the upcoming EU regulation: Cyber Resilience Act (CRA) - we are looking for a way to audit versions of our many running applications.

The current version is easy, but doesn’t give the audit trail.

juju show-unit lxd-cluster/0 --format json | jq -r ‘.[“lxd-cluster/0”][“workload-version”]’ 5.21.3

This is part of the compliance topic which is required of us by regulations in the EU starting from September 2026.

I therefore look for a way to “audit” changes to the workload-version set by juju:

I thought that this information would be displayed with “juju show-status-log” for the model or application, but it seems it isn’t.

I would be very keen to understand what I would need to do to audit for changes to unit/application workload changes for our models such as we can use juju to gain compliance with audit for workload changes.