Repository navigation
T9 — Append hash-chained audit records the proxy alone writes #2262
Description
Task
| slice | size | difficulty | model | who | estimated lines |
|---|---|---|---|---|---|
| Clone, push and gh from a box with no token in it | L | needs care | standard | an agent | 540 (300 code, 240 tests) |
Every decision appends one chained record naming the box and the authority, never a credential or a body.
Covers:
- BEP-039
- BEP-040
- BEP-041
- BEP-048
Layers:
- audit:
- crates/bep/src/audit.rs (new):
min/v1JSONL records of BEP-039 built from the decision alone, chained per BEP-048, opened append-only - crates/bep/src/lib.rs: module line
cargo nextest run -p bep every_decision_appends_one_audit_recordcargo nextest run -p bep prop_audit_records_never_contain_secretscargo nextest run -p bep audit_log_is_opened_append_onlycargo nextest run -p bep audit_record_carries_previous_hash
- crates/bep/src/audit.rs (new):
Waits on:
Plan block
### T9 — Append hash-chained audit records the proxy alone writes
slice: S0
kind: task
covers: BEP-039, BEP-040, BEP-041, BEP-048
size: L
est: 300 code, 240 tests
executor: agent
difficulty: needs care
model: standard
diagnostics: the log is plain JSONL under the proxy's state directory, one record per decision, readable with `min box audit <box>` once that task lands
observability: the audit log is the record; one warn log line if an append fails, naming the path
layers:
- audit:
- crates/bep/src/audit.rs (new): `min/v1` JSONL records of BEP-039 built from the decision alone, chained per BEP-048, opened append-only
- crates/bep/src/lib.rs: module line
test: cargo nextest run -p bep every_decision_appends_one_audit_record
test: cargo nextest run -p bep prop_audit_records_never_contain_secrets
test: cargo nextest run -p bep audit_log_is_opened_append_only
test: cargo nextest run -p bep audit_record_carries_previous_hash
produces:
- crates/bep/src/audit.rs
consumes: none
proof: Every decision appends one chained record naming the box and the authority, never a credential or a body.
depends on:
- blocked by #2258
Reacted by minimal-foundry
Activity
minimal-foundry commentedon Oct 19, 2026
Done. #2361 merged.
branch
agent/2262-append-hash-chained-audit-records-the-proxy-alon· epic #1501 · PR #23618a6c73137cffa0bc8cd328e58aa6684fdcb281552c4a3858Updated 2026-10-20T02:06:36.918Z.