Audit
Every decision the firewall made, in a log that cannot be quietly rewritten. Try to forge a record and watch the integrity check show you exactly where it broke.
Chain integrity
Each record commits to the hash of the one before it. Altering or deleting any past entry breaks every hash after it — which is something you can check rather than take on trust.
Verifying the hash chain
Audit records
Who called what, the verdict, and a digest of the request. Argument values are never stored here — an audit log that leaks what it audits is a liability. The chain is persisted, so it survives restarts and redeploys.
Reading the chain
| Seq | Verdict | Agent | Tool | Request digest | Links to |
|---|---|---|---|---|---|