Module audit_sink 

Kernel implementation of the capsule per-action host-audit sink.

Native-only: the HostAuditSink seam is driven exclusively by the wasmtime host engine, which is itself native-only (the WASM engine never runs on the browser profile). The sink is the last synchronous caller of the now-async audit log, so it carries a native-gated block-on bridge that must not exist on wasm32-unknown-unknown. Kernel implementation of the capsule host-audit sink.

The WASM host engine (astrid-capsule) reports sensitive per-action host calls — fs read/write/delete, net connect/bind, process spawn — to the HostAuditSink trait. The kernel holds both the durable audit log and the runtime ed25519 signing key, so it is the side that can map those neutral events onto a signed, hash-chained AuditEntry. A bounded writer coalesces concurrent reports and collapses identical events in the window; host calls return after enqueue. Producers never block WASM/tokio workers.

Structs

AuditSinkHealth

Operator-visible health for the bounded host-audit ingestion queue.

HostAuditPolicy

Operator policy for the host-audit writer. Built from AuditConfig.

KernelAuditSink

Persists capsule per-action host calls onto the kernel’s signed audit chain.