Append-only, hash-chained record of every human decision. Tamper-evident on its own. Tamper-proof once the chain head is anchored outside.
iii trigger compose::add worker=audit-logRun in your project with the iii engine running. Exact versions are immutable and digest-pinned.
Record one decision in the append-only, hash-chained log
Who decided. Name the person where there was one.
The kind of decision. Required.
What the decision was about.
Set only when nothing was recorded.
The proof the caller keeps: seq plus hash names the entry.
False when the kind is not on AUDIT_LOG_KINDS. Recorded anyway.
The chain head, seq and hash. The fact an anchor stores
The fact an anchor stores. 64 zeros when the log is empty.
-1 when the log is empty.
Entries, optionally narrowed by kind or subject
Newest N entries. Default 200.
Who or what decided: a person, a worker, a rule id.
When the entry was sealed, epoch milliseconds.
Whatever else the decision carries.
SHA-256 over every field above.
What kind of decision, in the deployment's vocabulary.
Hash of the entry before; 64 zeros at the start.
Position in the chain, starting at 0.
What the decision was about.
Entry format version.
Matching entries, before the limit cut.
The sealed-entry event source. Observe it: your target receives the entry, seq and hash included. Private, so only this worker fires it
Who or what decided: a person, a worker, a rule id.
When the entry was sealed, epoch milliseconds.
Whatever else the decision carries.
SHA-256 over every field above.
What kind of decision, in the deployment's vocabulary.
Hash of the entry before; 64 zeros at the start.
Position in the chain, starting at 0.
What the decision was about.
Entry format version.
Who or what decided: a person, a worker, a rule id.
When the entry was sealed, epoch milliseconds.
Whatever else the decision carries.
SHA-256 over every field above.
What kind of decision, in the deployment's vocabulary.
Hash of the entry before; 64 zeros at the start.
Position in the chain, starting at 0.
What the decision was about.
Entry format version.
What the log says: whether it verifies, and what it counts
Fields to count by: top-level or detail. Defaults to kind and actor.
One counts object per requested field.
Count entries by any field, narrowed to one kind
The field to count. Default kind.
Narrow to one kind before counting.
Is the chain intact, and from which entry is it not
Last seq that verified. Everything after it is unproven.
Find workers, kits and executables, or jump to a page.