Module chain 

Local exochain manager for kernel event logging.

Provides an append-only event chain with SHAKE-256 hash linking (via weftos_rvf_crypto). Each event references the hash of the previous event and a content hash of its payload, forming an immutable, tamper-evident audit trail suitable for cross-service and cross-node verification.

Hash scheme

Every event carries three hashes:

• prev_hash — SHAKE-256 of the preceding event (chain link)
• payload_hash — SHAKE-256 of the canonical JSON payload bytes (content commitment; zeroed when payload is None)
• hash — SHAKE-256 of (sequence ‖ chain_id ‖ prev_hash ‖ source ‖ 0x00 ‖ kind ‖ 0x00 ‖ timestamp ‖ payload_hash)

Together these enable two-way verification: given an event you can verify the chain link backward and the payload content independently.

K0 Scope

Local chain only: genesis, append, checkpoint.

K1+ Scope (not implemented)

Global root chain, BridgeEvent anchoring, ruvector-raft consensus.

Structs

AnchorReceipt

Receipt returned by a successful ChainAnchor::anchor call.

ChainCheckpoint

A checkpoint snapshot of the chain state.

ChainEvent

A chain event – one entry in the append-only log.

ChainManager

Thread-safe chain manager.

ChainStatus

Chain status summary.

ChainVerifyResult

Result of chain integrity verification.

DualSignature

A dual signature (Ed25519 + optional ML-DSA-65).

DualSigningConfig

Configuration for dual Ed25519 + ML-DSA-65 signing.

GovernanceDecisionEvent

A governance decision event suitable for chain logging.

IpcDeadLetterEvent

An IPC dead-letter event suitable for chain logging.

MockAnchor

A mock anchor that always succeeds (for testing).

RestartEvent

A restart event suitable for chain logging.

Constants

EVENT_KIND_API_CONTRACT_REGISTERED

API contract registration event (k2:D8).

EVENT_KIND_CAPABILITY_REVOKED

Capability revocation event (k3:D8 — informational revocation).

EVENT_KIND_SANDBOX_SUDO_OVERRIDE

Sandbox sudo override event (k3:D12).

EVENT_KIND_SHELL_EXEC

Shell command execution event (k3:D10).

EVENT_KIND_TOOL_DEPLOYED

Tool version deployment event.

EVENT_KIND_TOOL_SIGNED

Tool signed event (k3:D9).

EVENT_KIND_TOOL_VERSION_REVOKED

Tool version revocation event.

Traits

ChainAnchor

Trait for anchoring chain state to an external ledger or store.

ChainLoggable

Trait for types that can be logged to the ExoChain audit trail.