Module audit 

Audit log — SQLite-based operation history.

Stores a record of every vault operation (set, delete, rotate, etc.) in a local SQLite database at <vault_dir>/audit.db.

Designed for graceful degradation: if the database can’t be opened or written to, operations silently continue without logging.

Structs

AuditEntry

A single audit log entry.

AuditEntryExport

Serializable audit entry for JSON/CSV export.

AuditLog

SQLite-backed audit log.

Functions

log_audit

Convenience helper: log an audit event using the CLI context.

log_auth_failure

Always log failed authentication attempts.

log_read_audit

Log a read operation only if [audit] log_reads = true in config.