Struct AuditChain 

pub struct AuditChain { /* private fields */ }

An append-only audit chain with hash-linked entries.

Implementations

impl AuditChain

pub fn new() -> Self

pub fn append( &mut self, severity: EventSeverity, source: impl Into<String>, action: impl Into<String>, details: Value, ) -> &AuditEntry

Append an event to the chain. Automatically links to the previous entry’s hash.

pub fn append_with_agent( &mut self, severity: EventSeverity, source: impl Into<String>, action: impl Into<String>, details: Value, agent_id: impl Into<String>, ) -> &AuditEntry

Append an event with an agent ID to the chain.

pub fn len(&self) -> usize

Number of entries in the chain.

pub fn is_empty(&self) -> bool

pub fn entries(&self) -> &[AuditEntry]

Get all entries.

pub fn head_hash(&self) -> Option<&str>

Get the last entry’s hash (chain head).

pub fn verify(&self) -> Result<()>

Verify the entire chain’s integrity.

Checks the genesis entry links to the expected previous chain hash (empty string for a fresh chain, or the archived head after rotation), then delegates entry-level hash and linkage verification to verify_chain.

pub fn append_batch( &mut self, events: impl IntoIterator<Item = (EventSeverity, String, String, Value)>, ) -> &[AuditEntry]

Append multiple events in one call. Each entry is chained to the previous. Returns a slice of the newly appended entries.

pub fn by_source(&self, source: &str) -> Vec<&AuditEntry>

Query entries by source.

pub fn by_severity(&self, severity: EventSeverity) -> Vec<&AuditEntry>

Query entries by severity.

pub fn by_agent(&self, agent_id: &str) -> Vec<&AuditEntry>

Query entries by agent ID.

pub fn page(&self, offset: usize, limit: usize) -> &[AuditEntry]

Return a page of entries: offset entries skipped, up to limit returned.

pub fn query(&self, filter: &QueryFilter) -> Vec<&AuditEntry>

Query entries using a composable QueryFilter.

pub fn rotate(&mut self) -> ChainArchive

Rotate the chain: drain all current entries and return them as an archive. The next entry appended will link to the previous chain’s head hash, preserving continuity across rotations.

pub fn from_entries(entries: Vec<AuditEntry>) -> Self

Restore a chain from an archive (e.g. for verification of historical data).

pub fn apply_retention( &mut self, policy: &RetentionPolicy, ) -> Option<ChainArchive>

Apply a retention policy, archiving entries that fall outside the retention window. Returns the archived entries (if any).

The chain maintains integrity: the first retained entry links to the last archived entry’s hash via prev_chain_hash.

Returns None if no entries need archiving.

impl AuditChain

pub fn review(&self) -> ChainReview

Produce a structured review of the chain.

Verifies integrity and summarizes contents: entry count, time range, source/severity/agent distributions, and head hash.

Trait Implementations

impl Debug for AuditChain

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuditChain

fn default() -> AuditChain

Returns the “default value” for a type.