Secrets infrastructureAssurance
Audit and tamper evidence
Read the append-only journal and verify its hash chain before trusting historical operations.
Audit and tamper evidence — contract and behavior
- Every audit line includes the previous line's hash, creating a tamper-evident chain.
- verify-chain recomputes the chain and reports retroactive edits or truncation inconsistencies.
- Audit entries describe identities, operations, and outcomes but never copy secret field values.
- Backups must preserve the vault and journal coherently so restore does not silently fork history.