Struct AuditLog 

pub struct AuditLog { /* private fields */ }

Immutable audit log for dotfile access.

Single-instance invariant: exactly one AuditLog should exist per log file path. The write_lock and last_hash are in-process Arc<Mutex> fields — two separate instances for the same path would have independent locks and chain-hash caches, allowing interleaved appends that corrupt the tamper-evident chain. The sole production caller (DotfileGuardian::new) respects this by constructing one instance and sharing it via Arc.

Implementations

impl AuditLog

pub async fn new(log_path: impl AsRef<Path>) -> Result<Self>

Create or open an audit log at the specified path.

pub async fn log(&self, entry: AuditEntry) -> Result<()>

Log an access attempt.

Both write_lock and last_hash are acquired as OwnedMutexGuards and moved into the spawn_blocking closure so that:

1. Appends stay serialized even if the calling task is cancelled — both guards survive in the blocking closure until the IO finishes.
2. last_hash is updated only after the full append succeeds (the line is in the OS page cache, visible to subsequent reads) but before sync_all(). If sync_all() fails, the entry is still readable and the chain is consistent. If open or write_all fails, last_hash is not updated and any partial bytes are truncated back to the pre-append length, so the file never has a malformed tail that would break future reads.

pub async fn get_entries(&self) -> Result<Vec<AuditEntry>>

Get all entries from the log.

Uses lock_owned() so the write_lock guard is moved into the spawn_blocking closure — reads stay consistent with in-flight writes even if the calling task is cancelled.

pub async fn verify_integrity(&self) -> Result<bool>

Verify the integrity of the entire audit log.

pub async fn get_entries_for_file( &self, file_path: &str, ) -> Result<Vec<AuditEntry>>

Get entries for a specific file.

pub async fn get_recent_entries(&self, count: usize) -> Result<Vec<AuditEntry>>

Get recent entries (last N).