SAMS Black-Box Auditor
Immutable Ledger & Forensic Logging - Legal Admissibility for NIS2 Compliance
Overview
SAMS Black-Box Auditor is a sovereign technology solution providing immutable forensic logging and legal evidence preservation for critical infrastructure. Built for EU Digital Sovereignty and NIS2 Directive compliance, it delivers tamper-evident audit trails with quantum-safe cryptographic signatures while maintaining exceptional performance for industrial deployments.
Core Capabilities
οΏ½ Immutable Ledger
- Append-Only Storage: Tamper-evident binary logging with cryptographic protection
- Quantum-Safe Signatures: PQC-validated audit records for future-proof security
- Blockchain Integration: Optional distributed ledger for multi-party verification
- Zero-Knowledge Proofs: Privacy-preserving audit verification
π΅οΈ Forensic Logging
- Nanosecond Precision: High-resolution timestamping for event reconstruction
- Binary Preservation: Raw semantic atom capture without processing overhead
- Chain of Custody: Complete audit trail with legal admissibility
- Evidence Integrity: Cryptographic hash verification for court presentation
βοΈ Legal Admissibility
- NIS2 Article 21: Mandatory audit trail compliance for critical infrastructure
- eIDAS Compliance: Digital signature standards for legal recognition
- Court-Ready Evidence: Forensic standards for judicial proceedings
- Regulatory Reporting: Automated compliance documentation generation
πͺοΏ½ Digital Sovereignty
- EU Data Residency: Sovereign storage within European jurisdiction
- Quantum-Resistant Security: Post-Quantum Cryptography (PQC) integration
- Zero-Trust Architecture: Mutual authentication and end-to-end encryption
- GDPR Compliance: Privacy-by-design audit data protection
Installation
Feature Flags
Open-Source Mode (Default/Audit)
- Basic forensic logging
- Standard immutable storage
- Community documentation
- MIT License compliance
Closed-Source Mode (Enterprise/PQC)
- Advanced quantum-safe signatures
- Blockchain integration
- Enterprise legal features
- Commercial licensing
Quick Start
use ;
async
Architecture
βββββββββββββββββββ ββββββββββββββββββββ βββββββββββββββββββ
β SAMS Atoms βββββΆβ Immutable βββββΆβ Legal β
β (32-byte) β β Ledger β β Evidence β
βββββββββββββββββββ ββββββββββββββββββββ βββββββββββββββββββ
β β β
βΌ βΌ βΌ
βββββββββββββββββββ ββββββββββββββββββββ βββββββββββββββββββ
β Quantum-Safe β β Forensic β β NIS2 Article β
β Signatures β β Analysis β β 21 Reports β
βββββββββββββββββββ ββββββββββββββββββββ βββββββββββββββββββ
NIS2 Directive Compliance
Article 21 Requirements
- Mandatory Audit Trails: Complete logging for regulatory compliance
- Risk Management: Automated risk assessment and reporting
- Incident Response: Real-time alerting and forensic capture
- Supply Chain Security: Vendor risk assessment and monitoring
Legal Framework Alignment
- eIDAS Regulation: Digital signature legal recognition
- GDPR Compliance: Privacy-preserving audit data handling
- Cybersecurity Act: CE marking preparation for security products
- ISO 27001: Information security management standards
Performance
Energy Efficiency
- SAMS Protocol: 0.8ΞΌJ per audit record
- Traditional Logging: 8ΞΌJ per audit record
- Energy Savings: 90% reduction vs conventional logging
- Battery Life: 12x extension in remote deployments
Throughput & Latency
- Write Latency: <50ΞΌs for audit record creation
- Storage Throughput: >100,000 records/second
- Verification Time: <100ΞΌs for integrity checks
- Memory Usage: <64MB runtime footprint
Configuration
NIS2 Compliance Mode
[]
# NIS2 Article 21 Configuration
= "nis2-article-21"
= 2555 # 7 years mandatory
= "eidas-compliant"
= true
# Quantum-Safe Security
= true
= "dilithium3"
= 1000
# Immutable Storage
= "append-only"
= true
= false
Sovereign Cloud Deployment
[]
# EU Digital Sovereignty
= "eu-only"
= "wss://sovereign.equinibrium.eu"
= true
# Forensic Analysis
= true
= "court-ready"
= true
Integration
SAMS Ecosystem
- cyber-monitor: Real-time anomaly detection and alerting
- sams-ghost-node: Decentralized P2P mesh networking
- sams-logic-gate: Hardware-native semantic validation
External Systems
- Legal Authorities: Court systems and regulatory bodies
- Compliance Platforms: Automated regulatory reporting
- SIEM Systems: Security information and event management
- Blockchain Networks: Distributed ledger verification
Security Features
Post-Quantum Cryptography
- Dilithium3: Quantum-safe digital signatures
- Kyber-1024: Quantum-resistant key exchange
- NIST PQC Standards: Future-proof cryptographic protection
- Hybrid Mode: Backward compatibility with classical crypto
Immutable Storage
- Append-Only Architecture: Tamper-evident logging design
- Cryptographic Hashing: SHA-3 and BLAKE3 integrity verification
- Merkle Trees: Efficient integrity verification for large datasets
- Zero-Knowledge Proofs: Privacy-preserving audit verification
Legal & Compliance
Regulatory Compliance
- NIS2 Directive: Full Article 21 implementation
- eIDAS Regulation: Digital signature legal recognition
- GDPR: Privacy-by-design audit data protection
- Cybersecurity Act: CE marking preparation
Industry Standards
- ISO 27001: Information security management
- ISO 15489: Records management standards
- Common Criteria: EAL evaluation ready
- NIST SP 800-86: Guide to integrating forensic evidence
Use Cases
Critical Infrastructure
- Energy Sector: Power grid audit trails for regulatory compliance
- Transportation: Aviation and railway safety logging
- Healthcare: Medical device and patient data protection
- Finance: Banking transaction audit and fraud detection
Public Sector
- Government Agencies: Sovereign IT infrastructure auditing
- Defense: Military systems and national security logging
- Emergency Services: Communication and coordination records
- Public Utilities: Water and waste management compliance
Development
Local Development Setup
# Clone repository
# Development build
# Run tests
# Local development server
Contributing
We welcome contributions to the open-source components. Please see our contributing guidelines for details on how to participate in the SAMS ecosystem development.
Support
Documentation
- API Reference: Full API documentation
- NIS2 Compliance Guide: Regulatory implementation details
- Legal Framework: eIDAS and GDPR compliance
Community & Commercial Support
- Issues: GitHub Issues
- Discord: SAMS Community
- Commercial: Contact Equinibrium
- EU Partnerships: Digital Sovereignty Programs
License
This project is dual-licensed:
- Open-Source: MIT License for community development
- Commercial: Proprietary license for enterprise features
Part of the SAMS Industrial Ecosystem - Sovereign Technology for EU Digital Independence and Legal Compliance