Struct AuditEntry 

pub struct AuditEntry {
    pub id: AuditEntryId,
    pub timestamp: Timestamp,
    pub session_id: SessionId,
    pub principal: Option<PrincipalId>,
    pub action: AuditAction,
    pub authorization: AuthorizationProof,
    pub outcome: AuditOutcome,
    pub previous_hash: ContentHash,
    pub runtime_key: PublicKey,
    pub signature: Signature,
}

A single audit log entry.

Fields

id: AuditEntryId

Unique entry identifier.

timestamp: Timestamp

When this entry was created.

session_id: SessionId

Session this entry belongs to.

principal: Option<PrincipalId>

The principal (user identity) this action was performed on behalf of. None for system actions that have no user context.

action: AuditAction

The action being audited.

authorization: AuthorizationProof

Authorization proof for this action.

outcome: AuditOutcome

Outcome of the action.

previous_hash: ContentHash

Hash of the previous entry (chain linking).

runtime_key: PublicKey

Runtime public key that signed this entry.

signature: Signature

Signature over entry contents.

Implementations

impl AuditEntry

pub fn create( session_id: SessionId, action: AuditAction, authorization: AuthorizationProof, outcome: AuditOutcome, previous_hash: ContentHash, runtime_key: &KeyPair, ) -> Self

Create and sign a new audit entry.

pub fn create_with_principal( session_id: SessionId, principal: PrincipalId, action: AuditAction, authorization: AuthorizationProof, outcome: AuditOutcome, previous_hash: ContentHash, runtime_key: &KeyPair, ) -> Self

Create and sign a new audit entry with a principal.

Used when audit entries need to record which principal an action was performed on behalf of. Call sites will be wired when the kernel audit integration is updated.

pub fn signing_data(&self) -> Vec<u8>

Get the data used for signing.

pub fn content_hash(&self) -> ContentHash

Compute the content hash of this entry.

pub fn verify_signature(&self) -> AuditResult<()>

Verify the entry’s signature.

Errors

Returns AuditError::InvalidSignature if the signature does not match the entry contents.

pub fn follows(&self, previous: &AuditEntry) -> bool

Check if this entry follows another (chain linking).

Trait Implementations

impl Clone for AuditEntry

fn clone(&self) -> AuditEntry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditEntry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuditEntry

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuditEntry

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.