Security & Compliance
WORM Audit Ledger
Account and rule mutations are recorded in an append-only, hash-chained audit ledger. This is one of the genuinely working pieces of the engine you can build from source today. Available now
1. Hash-Chain Shape
Each audit entry H_n is bound to the preceding entry H_(n-1), so any retroactive edit or deletion breaks the chain and is detectable on verification:
H_n = HMAC-SHA256(secret_key, seq || timestamp || actor || action || payload_hash || H_n-1)
2. CLI Commands
# List recent audit ledger records nuncio system audit list --limit 50 --offset 0 # Verify the hash-chain integrity of the whole ledger nuncio system audit verify # Machine-readable output (the --json flag is global) nuncio --json system audit list --limit 50