Hash-Chained Audit Trail
Every provisioning, deployment, and administrative action is written to an append-only, hash-chained audit log with an offsite mirror.
- Each audit entry carries an entry_hash and prev_hash; a hash mismatch anywhere in the chain indicates tampering, corruption, or operator error.
- The chain replicates to an offsite mirror over NATS, with mirror-lag alerting if it falls behind.
- gough audit verify, gough audit log, and gough audit export cover integrity checking, review, and export from the CLI.
- A monthly compliance-audit routine (gough audit report) produces a report for a given date range.