Enum AuditCmd

pub(crate) enum AuditCmd {
    Verify {
        audit: Option<String>,
        secret_file: String,
    },
    Export {
        audit: Option<String>,
        format: String,
        out: Option<String>,
    },
    Sar {
        audit: Option<String>,
        subject_id: String,
    },
    Erase {
        audit: Option<String>,
        subject_id: String,
        salt_file: String,
        out: Option<String>,
    },
    Rotate {
        audit: Option<String>,
        secret_file: Option<String>,
    },
}

Variants

Verify

Walk the HMAC chain and verify every record.

Fields

audit: Option<String>

Path to the audit log (default: –audit)

secret_file: String

Path to the secret file containing the HMAC root key

Export

Re-format the audit log for SIEM ingestion.

Fields

audit: Option<String>

Path to the audit log (default: –audit)

format: String

Output format: jsonl | cef | leef | ecs

out: Option<String>

Output path (default: stdout)

Sar

Subject access report — find all decisions about a data subject.

Fields

audit: Option<String>

Path to the audit log (default: –audit)

subject_id: String

Subject ID (principal) to search for

Erase

Pseudonymize a subject’s records (GDPR Art. 17 erasure).

Fields

audit: Option<String>

Path to the audit log (default: –audit)

subject_id: String

Subject ID to erase

salt_file: String

Salt file (random bytes) — required to ensure irreversibility

out: Option<String>

Output path for the pseudonymized log (default: overwrite input)

Rotate

Force-rotate the audit log (rename active file to a timestamped sibling and open a fresh active file). Pair with AGENTGUARD_AUDIT_MAX_BYTES for size-based rotation in the server.

Fields

audit: Option<String>

Path to the audit log (default: –audit)

secret_file: Option<String>

Path to the secret file containing the HMAC root key — required for chained logs so the chain head is preserved across rotations.

Trait Implementations

impl FromArgMatches for AuditCmd

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from [ArgMatches], parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from [ArgMatches], parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut<'b>( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Subcommand for AuditCmd

fn augment_subcommands<'b>(__clap_app: Command) -> Command

Append to [Command] so it can instantiate Self via [FromArgMatches::from_arg_matches_mut]

fn augment_subcommands_for_update<'b>(__clap_app: Command) -> Command

Append to [Command] so it can instantiate self via [FromArgMatches::update_from_arg_matches_mut]

fn has_subcommand(__clap_name: &str) -> bool

Test whether Self can parse a specific subcommand