pub fn sign_record( device_id: String, sequence: u64, timestamp_ms: u64, payload: Vec<u8>, prev_hash: Hash32, object_ref: String, private_key_hex: &str, ) -> Result<AuditRecord, CliError>