coulomb/audit-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Reliable multi-tenant auto setup audit capability
8 commits 1 branch 0 tags 1.4 MiB
Find a file
tegwick cd11d0851e Add .repo-classification.yaml (CUST-WP-0050 T11 agent first-pass)
2026-06-22 17:47:34 +02:00
audit_core Add mock file audit backend 2026-06-01 23:44:03 +02:00
registry Add capability registry with seed entry from reuse-surface 2026-06-16 01:46:53 +02:00
spec Added PRD for what we want to do 2026-06-01 23:38:26 +02:00
tests Add mock file audit backend 2026-06-01 23:44:03 +02:00
.custodian-brief.md chore(consistency): sync task status from DB [auto] 2026-06-22 13:56:02 +02:00
.gitignore Initial commit 2026-06-01 21:16:10 +00:00
.repo-classification.yaml Add .repo-classification.yaml (CUST-WP-0050 T11 agent first-pass) 2026-06-22 17:47:34 +02:00
INTENT.md Seeded repo with intent 2026-06-01 23:20:04 +02:00
LICENSE Initial commit 2026-06-01 21:16:10 +00:00
Makefile Add mock file audit backend 2026-06-01 23:44:03 +02:00
pyproject.toml Add mock file audit backend 2026-06-01 23:44:03 +02:00
README.md Add mock file audit backend 2026-06-01 23:44:03 +02:00

README.md

Reliable multi-tenant auto setup audit capability

Development Mock Backend

The first implementation is intentionally tiny: a replaceable audit interface with a mock file backend.

By default it writes JSONL audit events to:

/tmp/audit-core/audit-YYYYMMDDTHH.jsonl

Files older than 7 days are removed when the backend writes or when cleanup is run explicitly. This backend is for local integration and bootstrap wiring. It is not durable audit custody.

Example:

python3 -m audit_core emit \
  --source openbao \
  --action openbao.authenticated_readiness_proof \
  --resource openbao/openbao-0 \
  --outcome success \
  --detail file_audit_visible=true \
  --detail backend=mock-file

Cleanup:

python3 -m audit_core cleanup

Make targets:

make test
make mock-audit-smoke
make mock-audit-cleanup

Environment:

  • AUDIT_CORE_MOCK_DIR: override the output directory.
  • AUDIT_CORE_MOCK_RETENTION_DAYS: override the default 7-day cleanup window.