coulomb/railiance-platform
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Document audit-core mock sink handoff

Browse source
This commit is contained in:
tegwick 2026-06-01 23:44:06 +02:00
parent c0c6ead5dd
commit c0d4ec9037
2 changed files with 16 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
workplans/RAIL-PL-WP-0002-openbao-platform-secrets-service.md
View file

@ -286,6 +286,14 @@ OpenBao is unsealed on `2.5.4`, `bao audit list` shows `file/`,
workplan. The cached verifier token was then revoked with
`bao token revoke -self`.
**2026-06-01:** Durable tenant-aware audit retention is now a separate
`audit-core` product/repo instead of a Railiance OpenBao bootstrap subtask. The
initial Audit Core mock backend writes JSONL events under
`/tmp/audit-core/audit-YYYYMMDDTHH.jsonl` and removes files older than seven
days; it is suitable for interface wiring and setup validation only. Railiance
still owns the OpenBao file audit device and PVC, while production retention,
tenant policy, and tamper-evident archive belong to Audit Core.
### T07 - Cross-Repo Transition Tasks
```task