Struct AuditConfig 

pub struct AuditConfig {
    pub enabled: Option<bool>,
    pub path: Option<String>,
    pub schema_version: Option<u32>,
    pub redact_content: Option<bool>,
    pub hash_chain: Option<bool>,
    pub attestation_cadence_minutes: Option<u32>,
    pub append_only: Option<bool>,
    pub retention_days: Option<u32>,
    pub compliance: Option<AuditComplianceConfig>,
}

[audit] block in config.toml. Drives the hash-chained audit trail emitted from every memory mutation call site.

Fields

enabled: Option<bool>

Master toggle. Default false.

path: Option<String>

Audit log path. Either a directory (in which case audit.log is appended) or an explicit file path. Default ~/.local/state/ai-memory/audit/.

schema_version: Option<u32>

Documented schema version on the wire. The binary always emits audit::SCHEMA_VERSION; this knob is reserved for forward compatibility and must equal the binary’s emitted version today (validated at init).

redact_content: Option<bool>

Whether to redact memory.content from emitted events. The only supported value in v1 is true — the audit schema does not expose a content field at all; this flag is reserved for a future per-namespace exception API.

hash_chain: Option<bool>

Whether to compute and verify the per-line hash chain. Default true.

attestation_cadence_minutes: Option<u32>

Cadence in minutes for the periodic CHECKPOINT.sig attestation marker. The marker is a synthetic audit event that pins the chain head into the log so an attacker who truncates the file can’t silently rewind history. Default 60. 0 disables.

append_only: Option<bool>

Apply the platform-appropriate “append-only” file flag at startup. Best-effort defense in depth; the chain is the load-bearing tamper-evidence. Default true.

retention_days: Option<u32>

Retention horizon (days). ai-memory logs purge warns about deleting audit records younger than this, and audit verify surfaces gaps when retention is shorter than the chain extent. Default 90. Compliance presets override.

compliance: Option<AuditComplianceConfig>

Compliance presets — apply industry-standard retention / redaction policy on top of the base config. See docs/security/audit-trail.md §Compliance.

Implementations

impl AuditConfig

pub fn effective_retention_days(&self) -> u32

Resolve the effective retention horizon after applying any active compliance preset. Presets win when applied = true; when multiple presets are applied the most-conservative (longest) retention wins so the binary never picks a value that violates any active policy.

pub fn effective_attestation_cadence_minutes(&self) -> u32

Resolve the effective attestation cadence — the most-frequent (smallest non-zero) cadence across the base config and applied presets so the strictest compliance rule wins.

Trait Implementations

impl Clone for AuditConfig

fn clone(&self) -> AuditConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuditConfig

fn default() -> AuditConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuditConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuditConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.