Implement hash-chain tamper evidence for the audit log (T1) and a working CLI verify-chain #41
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Register row 8 (deferred-work register).
Hash-chain tamper evidence (audit roadmap T1) was deferred to v1.x by a locked decision; the CLI
verify-chaincommand is a no-op stub. Append-only DB roles are the current control.Revisit trigger (from register): A compliance requirement for cryptographic tamper evidence.
Current state: Still deferred; CLAUDE.md states T1 is deferred to v1.x, not shipped in M5.
Related: audit-log roadmap :12.
Source:
docs/plans/2026-07-08-deferred-work-register.mdrow 8