Versions in this module Expand all Collapse all v0 v0.0.7 Oct 27, 2026 v0.0.6 Oct 16, 2026 Changes in this version type Key + func KeyForRoots(current, previous string) (*Key, error) + func KeyFromRoots() (*Key, error) + func (k *Key) PreviousFingerprint() string v0.0.5 Oct 12, 2026 Changes in this version + const ChainControlPlane + const ChainProject + const EnvKey + const Kind + const ReasonInterval + const ReasonRestore + const ReasonShutdown + const Version + var ErrNoKey = errors.New("auditcheckpoint: " + EnvKey + " is not set") + func Age(recs []Located, now time.Time) (time.Duration, bool) + func ByPath(recs []Located) map[string][]Located + func CheckFile(path string) error + func FormatTime(t time.Time) string + func Paths(recs []Located) []string + func ValidPath(path string) string + func VerifyAnchor(anchors []statedb.AuditAnchor, a statedb.AuditAnchor) error + type ChainReport struct + Acknowledged int + Chain string + Consistent int + Failures []Checked + Finding string + ForeignKey int + Hint string + Newest *Checked + Path string + Pruned int + PrunedUnverified int + Records int + Refused int + RestoreRecords int + Restores []RestoreFinding + Unchecked int + Unsigned int + UntrustedRestores int + Valid int + func VerifyChain(db *statedb.DB, path, chain string, recs []Located, key *Key) (ChainReport, error) + func (r ChainReport) OK() bool + type Checked struct + Detail string + Result Result + Seal SealStatus + type Key struct + func DeriveKey(passphrase string) (*Key, error) + func KeyFromEnv() (*Key, error) + func (k *Key) Fingerprint() string + func (k *Key) Seal(r *Record) + type Located struct + Line int + func Newest(recs []Located) (Located, bool) + func Superseded(recs []Located, key *Key, restoredID int64, now time.Time) (Located, bool) + func Usable(recs []Located, key *Key, now time.Time) []Located + type ParseResult struct + Malformed []int + Oversized []int + Records []Located + func Parse(r io.Reader) (ParseResult, error) + func ReadFile(path string) (ParseResult, error) + type Record struct + AnchorHash string + AnchorID int64 + AnchorThroughID int64 + AnchorVerified bool + Chain string + KeyFingerprint string + Kind string + LastID int64 + LastRowHash string + Member string + Path string + Reason string + Restore *Restore + Rows int64 + Seal string + Time string + Version int + Window int64 + func HeadRecord(head statedb.AuditHead, chain, path, reason string, window int64, ...) Record + func RestoreRecord(head statedb.AuditHead, chain, path, member string, at time.Time, x Restore) Record + func (r Record) At() time.Time + func (r Record) IsRestore() bool + func (r Record) Signed() bool + type Restore struct + Actor string + BackupSHA256 string + BackupTime string + Reason string + RestoredID int64 + RestoredRowHash string + RestoredTime string + SecretLoss []string + Sidecar string + SupersededID int64 + SupersededRowHash string + SupersededTime string + func RestoreFrom(head statedb.AuditHead) Restore + func (x Restore) LostEvents() int64 + type RestoreFinding struct + From string + LostEvents int64 + LostFromID int64 + LostThroughID int64 + Record Checked + Superseded int + To string + func (f RestoreFinding) Summary() string + func (f RestoreFinding) Vouched() bool + type Result string + const ResultAcknowledged + const ResultAnchorMissing + const ResultAnchorRewritten + const ResultArchiveMismatch + const ResultConsistent + const ResultDeleted + const ResultPruneUnproven + const ResultPruned + const ResultPrunedUnverified + const ResultRefused + const ResultRestoreMismatch + const ResultRestored + const ResultRewritten + const ResultTruncated + func (r Result) Failing() bool + type SealStatus string + const SealBad + const SealForeignKey + const SealUnchecked + const SealUnsigned + const SealValid + func Check(r Record, k *Key) SealStatus + type Sink struct + File string + Stderr io.Writer + func (s Sink) Write(recs []Record) error