moses-audit

Log and verify SHA-256 chained audit entries for agent actions.

1|Updated Mar 12, 2026
One-click install
npx skills add https://github.com/SunrisesIllNeverSee/moses-claw-gov --skill moses-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: moses-audit
Source: https://github.com/SunrisesIllNeverSee/moses-claw-gov/tree/main/skills/moses-audit
Command: npx skills add https://github.com/SunrisesIllNeverSee/moses-claw-gov --skill moses-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

MO§ES™ Audit Trail provides a tamper-evident, append-only governance ledger for all governed agent actions, ensuring verifiable provenance and accountability.

Core Features & Use Cases

  • Tamper-evident, append-only action logs with per-entry hashes and chain validation.
  • Tools: moses_log_action to log before final responses, and moses_verify_chain to verify the ledger integrity.
  • Attestation and Isnad concepts provide cross-checked state and signal provenance for audits across governance layers.

Quick Start

Log an action with moses_log_action and then verify the chain with moses_verify_chain.

Frequently Asked Questions about moses-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a tamper-evident audit ledger for agent governance?

A tamper-evident audit ledger is an append-only log using sha-256 chained hashes to provide verifiable provenance and accountability for governed agent actions. Each entry receives a unique hash, ensuring end-to-end traceability and preventing undetected modifications.

How do I log and verify agent actions in a compliance workflow?

To log and verify agent actions, use the moses_log_action tool before final responses to append entries, then run moses_verify_chain to check ledger integrity. This creates verifiable attestations across governance layers for compliance checks.

Do I need Python3 to run a sha-256 chained audit log for governance?

Yes, you need Python3 installed to run this sha-256 chained audit log. The Skill stores ledger entries locally at the ~/.openclaw/governance directory and uses an operator secret environment variable for generating verifiable attestations.

What is the best way to ensure traceability for AI governance workflows?

The best way to ensure traceability is using an append-only governance ledger with per-entry hashes and chain validation. This approach applies Isnad and attestation concepts to provide cross-checked state and signal provenance for audits across governance layers.

Why does chain validation fail for my append-only action logs?

Chain validation fails when append-only action logs are modified after creation, breaking the sha-256 hash sequence. Run moses_verify_chain to identify integrity breaches in the ledger entries stored at ~/.openclaw/governance.