GetAuditLog

Audit log — durable, hash-chained record of operator-facing events.

Request Type: GetAuditLogRequest

With neither bound: the newest limit entries, newest first (the audit page). With since_seq / up_to_seq (inclusive; 0 = unbounded): the entries in that range, limit at a time — an exporter pages with oldest_first from the checkpoint to the head. limit 0 = 200.

Field

Type

Repeated

Description

limit

int32

since_seq

int64

up_to_seq

int64

oldest_first

bool

Response Type: GetAuditLogResponse

Field

Type

Repeated

Description

entries

AuditLogEntry

✅

newest first, unless oldest_first

integrity_ok

bool

chain verified on last boot

dropped_on_hydration

HydrationDrop

✅

Persisted rows the daemon’s stores couldn’t parse on the current boot (schema drift / corruption) — the live set, so it clears when a boot hydrates cleanly. Lets a consumer raise a current-state alert.

checkpoint_seq

int64

The front-prune boundary the kept chain anchors to: the oldest kept entry’s prev_hash is checkpoint_hash (GENESIS when nothing was ever pruned, seq 0). Everything up to checkpoint_seq is in the archives (audit-archived / audit-pruned entries name them). head_seq is the newest entry.

checkpoint_hash

string

head_seq

int64