Documentation
¶
Overview ¶
Package audit is the /v1/admin/audit query surface, wired to cloud's REAL tamper-evident audit store (the audit.Recorder Serve builds and hands over via deps.Audit).
cloud keeps its OWN append-only, hash-chained trail of every security-relevant request against this binary, and that is what a compliance auditor queries here. IAM's own login/session records remain a DIFFERENT trail; admin still federates them as a fallback when cloud's local store is not configured, so no capability is lost.
SECURITY. Both handlers are registered behind core.Guard (SuperAdmin only, fail-closed). They are READ-ONLY (Query and Verify issue SELECT only), so exposing them cannot weaken the append-only property.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Records ¶
Records answers GET /v1/admin/audit from cloud's local tamper-evident store when configured, else falls back to the IAM get-records proxy (federated view). Filters: org, sub, action, resource, result, since, until, pageSize, p (page). The response is the /v1 list envelope { data:[rows], data2:total } with the current chain integrity summary attached.
Types ¶
This section is empty.
Source Files