Implement hash-chain tamper evidence for the audit log (T1) and a working CLI verify-chain #41

Open
opened 2026-11-06 15:24:33 -05:00 by dohertj2 · 0 comments
Owner

Register row 8 (deferred-work register).

Hash-chain tamper evidence (audit roadmap T1) was deferred to v1.x by a locked decision; the CLI verify-chain command is a no-op stub. Append-only DB roles are the current control.

Revisit trigger (from register): A compliance requirement for cryptographic tamper evidence.

Current state: Still deferred; CLAUDE.md states T1 is deferred to v1.x, not shipped in M5.
Related: audit-log roadmap :12.

Source: docs/plans/2026-07-08-deferred-work-register.md row 8

Register row 8 (deferred-work register). Hash-chain tamper evidence (audit roadmap T1) was deferred to v1.x by a locked decision; the CLI `verify-chain` command is a no-op stub. Append-only DB roles are the current control. **Revisit trigger (from register):** A compliance requirement for cryptographic tamper evidence. **Current state:** Still deferred; CLAUDE.md states T1 is deferred to v1.x, not shipped in M5. Related: audit-log roadmap :12. Source: `docs/plans/2026-07-08-deferred-work-register.md` row 8
dohertj2 added the type:featurepriority:p3migrated labels 2026-11-06 15:24:33 -05:00
Sign in to join this conversation.