audit-verify

Overview ¶

Command audit-verify checks a home's audit spool. It verifies the hash chain, the sequence numbers, the gaps, and every checkpoint's signature.

audit-verify -spool /var/lib/fiberd/private/audit.jsonl -trust audit-key.json

It exits 1 when the spool does not verify, has records but no checkpoint, or has records before its chain started. Records cut after the last checkpoint need an anchor kept off the host.