moses-audit

Log and verify SHA-256 chained audit entries for agent actions.

1|Updated Mar 12, 2026

Search Tags:#logging #audit #governance #ledger #sha256 #tamper-evident #attestation

Ready to run

npx skills add https://github.com/SunrisesIllNeverSee/moses-claw-gov --skill moses-audit

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: moses-audit
Source: https://github.com/SunrisesIllNeverSee/moses-claw-gov/tree/main/skills/moses-audit
Command: npx skills add https://github.com/SunrisesIllNeverSee/moses-claw-gov --skill moses-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

MO§ES™ Audit Trail provides a tamper-evident, append-only governance ledger for all governed agent actions, ensuring verifiable provenance and accountability.

Core Features & Use Cases

Tamper-evident, append-only action logs with per-entry hashes and chain validation.
Tools: moses_log_action to log before final responses, and moses_verify_chain to verify the ledger integrity.
Attestation and Isnad concepts provide cross-checked state and signal provenance for audits across governance layers.

Quick Start

Log an action with moses_log_action and then verify the chain with moses_verify_chain.

Frequently Asked Questions about moses-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

What is a tamper-evident audit ledger for agent governance?▼

A tamper-evident audit ledger is an append-only log using sha-256 chained hashes to provide verifiable provenance and accountability for governed agent actions. Each entry receives a unique hash, ensuring end-to-end traceability and preventing undetected modifications.

How do I log and verify agent actions in a compliance workflow?▼

To log and verify agent actions, use the moses_log_action tool before final responses to append entries, then run moses_verify_chain to check ledger integrity. This creates verifiable attestations across governance layers for compliance checks.

Do I need Python3 to run a sha-256 chained audit log for governance?▼

Yes, you need Python3 installed to run this sha-256 chained audit log. The Skill stores ledger entries locally at the ~/.openclaw/governance directory and uses an operator secret environment variable for generating verifiable attestations.

What is the best way to ensure traceability for AI governance workflows?▼

The best way to ensure traceability is using an append-only governance ledger with per-entry hashes and chain validation. This approach applies Isnad and attestation concepts to provide cross-checked state and signal provenance for audits across governance layers.

Why does chain validation fail for my append-only action logs?▼

Chain validation fails when append-only action logs are modified after creation, breaking the sha-256 hash sequence. Run moses_verify_chain to identify integrity breaches in the ledger entries stored at ~/.openclaw/governance.