Files
skills/docs/networking/network/network-plugin-audit-mesh/README.md
2026-05-29 08:20:56 +01:00

8.7 KiB

@suaveplan/network-plugin-audit-mesh - Tamper-evident, cryptographically signed, append-only audit log chain for the Suaveplan mesh: SignedLog, LogReplicator (R-copy with tier-aware target selection), LogRetriever (range queries + pagination), IntegrityChecker, ConflictResolver, LogCompaction

Summary

Tamper-evident, cryptographically signed, append-only audit log chain for the Suaveplan mesh. SignedLog produces hash-chained LogEntry records keyed by monotonic sequence with caller-injected SignFn (Ed25519 typically) so each entry's signature covers the deterministic SHA-256 of the prior entry plus the current payload; LogReplicator ships entries to R sibling hosts (default 2) with tier-aware target selection and synchronous-for-CRITICAL / async-for-NORMAL semantics; LogRetriever answers paginated getLogs(meshId, fromSeq, toSeq) range queries; IntegrityChecker walks the chain, detecting gaps / forks / tampered entries and emitting audit:corruption-detected; ConflictResolver reconciles divergent chains via longest-chain-wins with deterministic lex tiebreak; LogCompaction snapshots state into signed checkpoints to reduce reconciliation volume after server reconnect. Wrapped in a single AuditMeshPlugin satisfying the NetworkPlugin lifecycle.

Documentation tree

- [log-compaction](./src/compaction/log-compaction.md) — _(no submodules)_- [conflict](./src/conflict/conflict-resolver.md) — _(no submodules)_- [conflict-resolver](./src/conflict/conflict-resolver.md) — _(no submodules)_- [integrity](./src/integrity/integrity-checker.md) — _(no submodules)_- [integrity-checker](./src/integrity/integrity-checker.md) — _(no submodules)_- [log](./src/log/signed-log.md) — _(no submodules)_- [signed-log](./src/log/signed-log.md) — _(no submodules)_- [plugin](./src/plugin/audit-mesh-plugin.md) — _(no submodules)_- [audit-mesh-plugin](./src/plugin/audit-mesh-plugin.md) — _(no submodules)_- [replicator](./src/replicator/log-replicator.md) — _(no submodules)_- [log-replicator](./src/replicator/log-replicator.md) — _(no submodules)_- [retriever](./src/retriever/log-retriever.md) — _(no submodules)_- [log-retriever](./src/retriever/log-retriever.md) — _(no submodules)_- [error-codes](./src/error-codes.md) — Frozen `NET_AUDIT` error registry for `@suaveplan/network-plugin-audit-mesh`. Every failure path the audit subsystem ca…