Which audit stage is generated only for long-running requests such as a watch?

Answer: D. ResponseStarted

ResponseStarted fires once the response headers are sent but before the body, which only makes sense for a long-running request; the other stages apply generally.

Source: Auditing (Kubernetes) — Auditing (body)