audit-trail

Log governed actions into a SHA-256 tamper-evident hash chain.

Updated Mar 11, 2026
One-click install
npx skills add https://github.com/SunrisesIllNeverSee/moses-governance --skill audit-trail-sunrisesillneversee
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit-trail
Source: https://github.com/SunrisesIllNeverSee/moses-governance/tree/main/skills/audit-trail
Command: npx skills add https://github.com/SunrisesIllNeverSee/moses-governance --skill audit-trail-sunrisesillneversee

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill ensures accountability and integrity by logging every governed action to a secure, append-only SHA-256 hash chain, making it impossible to alter past records without detection.

Core Features & Use Cases

  • Tamper-Evident Logging: Records actions with timestamps, governance mode, posture, role, and outcome.
  • Verifiable Audit Trail: Generates a SHA-256 hash for each entry, chained to the previous one for integrity checks.
  • Use Case: In a high-stakes AI workflow, this Skill provides an immutable record of every decision and action taken, crucial for compliance, debugging, and security audits.

Quick Start

Use the audit-trail skill to verify the integrity of the hash chain.

Frequently Asked Questions about audit-trail

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a tamper-evident audit trail for governed actions?

To create a tamper-evident audit trail, this Skill logs governed actions into a SHA-256 append-only hash chain. Each entry cryptographically links to the previous hash, making any unauthorized modifications to the historical ledger immediately detectable.

How does SHA-256 hash chaining secure my governance logs?

SHA-256 hash chaining secures governance logs by generating a unique cryptographic hash for every action entry and linking it to the previous record's hash. This append-only mechanism ensures that altering any past log entry breaks the chain and flags tampering.

Can I automatically log command execution and state changes?

Yes, you can automatically log command execution and state changes. The Skill supports auto-activation on governance mode changes, capturing timestamps, role, posture, and outcome directly into the append-only ledger without manual intervention.

What details are captured in a cryptographic audit ledger?

A cryptographic audit ledger captures timestamps, governance mode, posture, role, and outcome for each governed action. These details are cryptographically hashed together with the previous chain entry to enforce strict integrity and verifiable accountability.

Do I need any external dependencies to maintain an append-only ledger?

No external dependencies are needed to maintain an append-only ledger. The Skill operates independently using built-in scripts to enforce integrity through cryptographic hashing of action details and previous chain hashes.

How do I verify the integrity of a hash chain during a security audit?

To verify the integrity of a hash chain during a security audit, you validate the SHA-256 hashes sequentially against the recorded action details and previous hashes. Any mismatch indicates that the append-only ledger has been compromised.