Audit module

The audit module records every administrative action with a hash-chained log entry — a single mutation cannot be silently rewritten without breaking the chain.

What it captures

• Actor (user ID + email)
• Action verb (e.g. project.create, secret.rotate)
• Resource type and id
• Before/after diff of the resource
• HTTP method, path, status code, duration
• IP and User-Agent
• Optional metadata (auth method, scopes)

How to send events

The TypeScript audit plugin instruments your framework middleware automatically. From any other language, POST a type: "audit" event to /api/ingest. See Wire protocol for the schema.

Hash chain

Every audit entry stores prev_hash = hash(prev_entry || row_payload). The portal exposes cui admin verify-chain to re-walk and verify the chain. Tampering with a row breaks every subsequent hash.

Reads