 host
|
eeb10118d6
|
feat: tamper-evident audit ledger (hash chain) + dual-column cost view
- Hash-chain ledger (cloud/ledger.py): prev_hash/entry_hash per record,
SQLite append-only triggers, UNIQUE prev/entry hash with fail-closed
retry at the transaction boundary; verify/export (incl. expected-head
check for tail truncation); legacy audit_log rows marked pre-chain via
a single ledger_genesis marker, never rewritten.
- AuthStore.audit() writes audit_log + chain entry in one transaction.
- Track-3 interface: audit_verdict / audit_pushback_round /
audit_rebuild / third-failure assessment / test-change audit /
meta-review / rebuild-notice entries; per-(module, contract-version)
failure counts derived from the ledger (pass or completed rebuild
resets; total > 3 triggers rebuild); acceptance-triggered rebuilds
require a confirmed user notice.
- Admin read-only endpoints: GET /admin/audit-ledger/verify|export.
- Cost: dual_column_view (priced_usd_micros + billing note, wording
reused verbatim from PR #212) wired into project/task cost endpoints;
by-model and per-creator reporting stay in #212, not duplicated here.
- PG schema + migration lists updated for audit_ledger (incl. sequence
setval alignment).
|
2026-11-03 02:49:25 +00:00 |
|