auditverify

Overview ¶

Command auditverify is the operator/auditor-facing tool for the audit log's tamper-evidence guarantee (internal/audit's hash chain): point it at any exported audit.log and it reports whether the chain is intact, or names the exact line/sequence number where it breaks. This is meant to be handed to an actual auditor, not just used internally - "run this against the log we gave you" is a stronger claim than "trust our dashboard says it's fine."