It would be nice to log/audit the use of rails runner as well. Currently a user can run bin/rails runner "code here" and it will bypass all of the logging that is provided in rails console.
I'd image it would require wrapping Rails::Command::RunnerCommand#perform.