Upon a tamper event (in addition to asserting a penalty) your design could send tamper status information back to the system (instead of or in addition to logging it locally in user eFUSE space). The system could then store this information away for future auditing purposes. It would have to be designed to transmit the data before an IPROG command (tamper penalty) is given.