8.7 KiB
@suaveplan/network-plugin-audit-mesh - Tamper-evident, cryptographically signed, append-only audit log chain for the Suaveplan mesh: SignedLog, LogReplicator (R-copy with tier-aware target selection), LogRetriever (range queries + pagination), IntegrityChecker, ConflictResolver, LogCompaction
Summary
Tamper-evident, cryptographically signed, append-only audit log chain for the Suaveplan mesh. SignedLog produces hash-chained LogEntry records keyed by monotonic sequence with caller-injected SignFn (Ed25519 typically) so each entry's signature covers the deterministic SHA-256 of the prior entry plus the current payload; LogReplicator ships entries to R sibling hosts (default 2) with tier-aware target selection and synchronous-for-CRITICAL / async-for-NORMAL semantics; LogRetriever answers paginated getLogs(meshId, fromSeq, toSeq) range queries; IntegrityChecker walks the chain, detecting gaps / forks / tampered entries and emitting audit:corruption-detected; ConflictResolver reconciles divergent chains via longest-chain-wins with deterministic lex tiebreak; LogCompaction snapshots state into signed checkpoints to reduce reconciliation volume after server reconnect. Wrapped in a single AuditMeshPlugin satisfying the NetworkPlugin lifecycle.
Documentation tree
- compaction — (no submodules)
- log-compaction — (no submodules)
- conflict — (no submodules)
- conflict-resolver — (no submodules)
- integrity — (no submodules)
- integrity-checker — (no submodules)
- log — (no submodules)
- signed-log — (no submodules)
- plugin — (no submodules)
- audit-mesh-plugin — (no submodules)
- replicator — (no submodules)
- log-replicator — (no submodules)
- retriever — (no submodules)
- log-retriever — (no submodules)
- error-codes — Frozen
NET_AUDITerror registry for@suaveplan/network-plugin-audit-mesh. Every failure path the audit subsystem ca…
- log-compaction — (no submodules)- conflict — (no submodules)- conflict-resolver — (no submodules)- integrity — (no submodules)- integrity-checker — (no submodules)- log — (no submodules)- signed-log — (no submodules)- plugin — (no submodules)- audit-mesh-plugin — (no submodules)- replicator — (no submodules)- log-replicator — (no submodules)- retriever — (no submodules)- log-retriever — (no submodules)- error-codes — Frozen
NET_AUDITerror registry for@suaveplan/network-plugin-audit-mesh. Every failure path the audit subsystem ca… - log-compaction — (no submodules)- conflict — (no submodules)- conflict-resolver — (no submodules)- integrity — (no submodules)- integrity-checker — (no submodules)- log — (no submodules)- signed-log — (no submodules)- plugin — (no submodules)- audit-mesh-plugin — (no submodules)- replicator — (no submodules)- log-replicator — (no submodules)- retriever — (no submodules)- log-retriever — (no submodules)- error-codes — Frozen
NET_AUDITerror registry for@suaveplan/network-plugin-audit-mesh. Every failure path the audit subsystem ca… - log-compaction — (no submodules)- conflict — (no submodules) - conflict-resolver — (no submodules)- integrity — (no submodules) - integrity-checker — (no submodules)- log — (no submodules) - signed-log — (no submodules)- plugin — (no submodules) - audit-mesh-plugin — (no submodules)- replicator — (no submodules) - log-replicator — (no submodules)- retriever — (no submodules) - log-retriever — (no submodules)- error-codes — Frozen
NET_AUDITerror registry for@suaveplan/network-plugin-audit-mesh. Every failure path the audit subsystem ca…