Add audit maintenance, verified recovery and reproducible verification

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e6f1-443f-7783-9920-a16b2ffc467f
This commit is contained in:
tegwick 2026-09-28 11:48:01 +02:00
parent 820f0ff7b5
commit 3166da1d2e
13 changed files with 413 additions and 5 deletions

View file

@ -154,3 +154,13 @@ evidence, along with browser client/PDP/audit admission and other T04 gates.
Bernd Worsch confirmed the transport-test email arrived in his inbox. SMTP
credential custody, projection, authentication and recipient delivery now pass.
This is a transport-test receipt, not an audit-core alert acknowledgment.
September 28 local operations closure: private aggregate audit metrics and local
status/list-blocked/requeue commands implemented. SQLite online backup and
restore-to-new-path preserve original receipts, immutable event bytes and all
delivery states; native audit-core deduplicates replay after lost reply and
restore. `bash scripts/verify.sh` installs locked dependencies and builds the
native policy test dependency from declared checkouts; all 45 tests pass without
skips. See docs/acknowledgment-operations.md. No new task/workplan. T04 remains
wait and workplan blocked for live identity/PDP/audit admission, scrape binding,
recipient alert confirmation/readback, off-host watchdog and scheduled backups.