coulomb/audit-core
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Reliable multi-tenant auto setup audit capability
222 commits 1 branch 0 tags 2.8 MiB
Find a file
tegwick 21b7d7cae9 Wave-2 right-sizing: audit-core CPU request 50m->10m (AUDIT-WP-0016) 
Request only; limits and 64Mi memory unchanged.
Evidence: resource-control 2026-10-21 node budget (3d9b1bd).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 276069@bnt-lap001
Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c
2026-10-22 00:00:33 +02:00
.claude/rules docs: workplan-first agent guidance prose (CUST-WP-0055 T04 batch 5) 2026-07-08 19:50:55 +02:00
.forgejo/workflows Add Forgejo CI smoke workflow (enablement template) 2026-07-08 12:28:40 +02:00
.repo-manager Track repo-manager index and the TAMQ introduction 2026-08-29 14:45:26 +02:00
audit_core Prepare guarded cadence registry updates and Qonto receiver admission 2026-10-15 21:19:05 +02:00
data/capability Implement AUDIT-WP-0007 hash-chain integrity. 2026-08-16 01:18:30 +02:00
deploy Wave-2 right-sizing: audit-core CPU request 50m->10m (AUDIT-WP-0016) 2026-10-22 00:00:33 +02:00
docs Define retained PDP audit admission and complete-ledger reconciliation 2026-10-16 19:25:03 +02:00
evidence Make the failure matrix an executable harness 2026-08-10 17:49:32 +02:00
history Record v0.8 section 11 review and A11 r2 / A12 r3 assent 2026-09-23 11:56:26 +02:00
intakes fix: repair chained imports and track blocked evidence dependencies 2026-10-04 11:36:06 +02:00
registry docs(reuse): establish reviewed NetKingdom security capabilities 2026-10-14 06:38:21 +02:00
scripts Prepare guarded cadence registry updates and Qonto receiver admission 2026-10-15 21:19:05 +02:00
spec Added PRD for what we want to do 2026-06-01 23:38:26 +02:00
tests Define retained PDP audit admission and complete-ledger reconciliation 2026-10-16 19:25:03 +02:00
workplans chore(consistency): write back State Hub ids 2026-10-21 12:29:48 +02:00
.dockerignore Prepare railiance01 delivery: dynamic leases, migrate Job, operator runbook 2026-08-13 00:58:49 +02:00
.gitignore chore: keep generated orientation brief local 2026-10-21 12:12:27 +02:00
.repo-classification.yaml Human-review .repo-classification.yaml (CUST-WP-0050 follow-up) 2026-06-22 17:56:17 +02:00
AGENTS.md docs(agents): repoint remote State Hub URL to the in-cluster address 2026-08-25 00:20:39 +02:00
CLAUDE.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:24 +02:00
Containerfile Prepare compatible audit receiver with verified container lifecycle 2026-09-11 06:46:15 +02:00
INTENT.md Apply GH-DEC-2026-020: de-version the INTENT.md standard: path. 2026-09-21 09:36:37 +02:00
layer.yaml Apply GH-DEC-2026-017 to audit-core's layer declaration. 2026-09-21 07:34:00 +02:00
LICENSE Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) 2026-07-29 23:53:10 +02:00
Makefile Retain narrow migration egress and pin cadence-capable receiver release 2026-10-15 21:32:15 +02:00
pyproject.toml Add the PostgreSQL audit backend and a shared conformance suite 2026-08-10 17:09:46 +02:00
README.md Prepare railiance01 delivery: dynamic leases, migrate Job, operator runbook 2026-08-13 00:58:49 +02:00
requirements.lock Prepare compatible audit receiver with verified container lifecycle 2026-09-11 06:46:15 +02:00
SCOPE.md chore: keep generated orientation brief local 2026-10-21 12:12:27 +02:00
TamqMessagingIntroduction.md Track repo-manager index and the TAMQ introduction 2026-08-29 14:45:26 +02:00
tenancy.yaml Publish authoritative E2 owner and original evidence expiry 2026-10-15 19:29:39 +02:00
WORK-RECORDS.md chore(consistency): write back State Hub ids 2026-10-21 12:29:48 +02:00

README.md

Reliable multi-tenant auto setup audit capability

Production on railiance01 (AUDIT-WP-0005): PostgreSQL custody, digest-pinned image, operator procedures in docs/operator-runbook.md. Manifests live in deploy/.

Backend contract

The pluggable backend interface, event schema (audit-core.event.v1alpha1), retention policy, and migration path from the mock file backend are documented in docs/audit-backend-contract.md.

Development Mock Backend

The first implementation is intentionally tiny: a replaceable audit interface with a mock file backend.

By default it writes JSONL audit events to:

/tmp/audit-core/audit-YYYYMMDDTHH.jsonl

Files older than 7 days are removed when the backend writes or when cleanup is run explicitly. This backend is for local integration and bootstrap wiring. It is not durable audit custody.

Example:

python3 -m audit_core emit \
  --source openbao \
  --action openbao.authenticated_readiness_proof \
  --resource openbao/openbao-0 \
  --outcome success \
  --detail file_audit_visible=true \
  --detail backend=mock-file

Cleanup:

python3 -m audit_core cleanup

Make targets:

make test
make mock-audit-smoke
make mock-audit-cleanup

Environment:

  • AUDIT_CORE_MOCK_DIR: override the output directory.
  • AUDIT_CORE_MOCK_RETENTION_DAYS: override the default 7-day cleanup window.