feat(audit): agentic cert-lifecycle audit trail — attribution + tamper-evidence#313

Merged

fabriziosalmi merged 8 commits into

mainfrom

feat/agentic-audit-trail

Jun 15, 2026

Commits on Jun 15, 2026

feat(audit): attribute cert-lifecycle actions (actor + trigger) and emit on the silent paths

fabriziosalmi
and
claude
committed
feat(audit): tamper-evident SHA-256 hash chain + standalone verifier

fabriziosalmi
and
claude
committed
feat(audit): operator surface — chain-verify endpoint and agent-key UI toggle

fabriziosalmi
and
claude
committed
docs(audit): document attribution, the hash chain, the verifier, and compliance

fabriziosalmi
and
claude
committed
fix(audit): hardening from adversarial review — corrupt-line safety, lock-on-verify, tail-truncation docs

fabriziosalmi
and
claude
committed
chore(css): rebuild tailwind bundle for the agent-key badge classes

fabriziosalmi
and
claude
committed
chore(release): v2.16.0 — agentic cert-lifecycle audit trail

fabriziosalmi
and
claude
committed
fix(audit): drop the domain from a defensive debug line (CodeQL clear-text FP)

fabriziosalmi
and
claude
committed