Documentation
¶
Overview ¶
Package audit provides an append-only, tamper-evident record of every action the agent attempts — the accountability backbone for the autonomy ladder.
Records are written as JSON lines, each carrying the SHA-256 hash of the previous record (a hash chain). Any insertion, deletion, or edit of a past record breaks the chain and is detectable via Verify. The chain is seeded on open from the last record already on disk, so it survives process restarts.
An autonomous cluster-mutator cannot rely on best-effort stdout logging: this is the durable, ordered, complete record of what it did and why.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
Types ¶
type Decision ¶
type Decision string
Decision is the outcome of an action attempt.
const ( DecisionExecuted Decision = "executed" // the op was applied to the cluster DecisionDryRun Decision = "dry-run" // auto dry-run: would have executed DecisionSkipped Decision = "skipped" // a safety gate withheld it (paused, low confidence, rate-limited…) DecisionDenied Decision = "denied" // outside the policy envelope DecisionFailed Decision = "failed" // execution was attempted and errored )
Action-attempt outcomes.
type Logger ¶
type Logger struct {
// contains filtered or unexported fields
}
Logger is a file-backed, hash-chained Auditor.
type Record ¶
type Record struct {
Time time.Time `json:"time"`
Actor string `json:"actor"` // "auto" | "approve:<user>" | "suggest"
Op string `json:"op"` // suspend | resume | reconcile | ""
Target string `json:"target"` // kind/namespace/name
Decision Decision `json:"decision"` // executed | dry-run | skipped | denied | failed
Reason string `json:"reason,omitempty"` // why skipped/denied/failed
PrevHash string `json:"prev_hash"`
Hash string `json:"hash"`
}
Record is one audited action attempt. Hash and PrevHash are filled by Log.
Source Files