fetch_ml/cmd
Jeremie Fraeys 58c1a5fa58
feat(audit): Tamper-evident audit chain verification system
Add ChainVerifier for cryptographic audit log verification:
- VerifyLogFile(): Validates entire audit chain integrity
- Detects tampering at specific event index (FirstTampered)
- Returns chain root hash for external verification
- GetChainRootHash(): Standalone hash computation
- VerifyAndAlert(): Boolean tampering detection with logging

Add audit-verifier CLI tool:
- Standalone binary for audit chain verification
- Takes log path argument and reports tampering

Update audit logger for chain integrity:
- Each event includes sequence number and hash chain
- SHA-256 linking: hash_n = SHA-256(prev_hash || event_n)
- Tamper detection through hash chain validation

Add comprehensive test coverage:
- Empty log handling
- Valid chain verification
- Tampering detection with modification
- Root hash consistency
- Alert mechanism tests

Part of: V.7 audit verification from security plan
2026-02-23 19:43:50 -05:00
..
api-server refactor(go): Update Go commands and TUI controller 2026-02-23 14:13:14 -05:00
audit-verifier feat(audit): Tamper-evident audit chain verification system 2026-02-23 19:43:50 -05:00
configlint ci: align workflows, build scripts, and docs with current architecture 2026-01-05 12:34:23 -05:00
data_manager refactor(dependency-hygiene): Move path functions from config to storage 2026-02-17 21:15:23 -05:00
db-utils ci: align workflows, build scripts, and docs with current architecture 2026-01-05 12:34:23 -05:00
errors feat: implement research-grade maintainability phases 1,3,4,7 2026-02-18 15:27:50 -05:00
gen-keys refactor(go): Update Go commands and TUI controller 2026-02-23 14:13:14 -05:00
performance-regression-detector chore(build): update build system, scripts, and additional tests 2026-02-12 12:05:55 -05:00
profiler chore(build): update build system, scripts, and additional tests 2026-02-12 12:05:55 -05:00
tui refactor(go): Update Go commands and TUI controller 2026-02-23 14:13:14 -05:00
user_manager feat: implement Argon2id hashing and Ed25519 manifest signing 2026-02-19 15:34:20 -05:00
worker feat(worker): add integrity checks, snapshot staging, and prewarm support 2026-01-05 12:31:13 -05:00