Module decision

Append-only structured decision log.

See DecisionLog for the writer, DecisionRecord for the record schema, and chain for the tamper-evident HMAC hash chain.

Re-exports

pub use cache::DecisionCache;

pub use chain::ChainId;

pub use chain::HashChain;

pub use chain::HASH_LEN;

pub use formatter::AuditFormat;

pub use log::ChainedRecord;

pub use log::DecisionLog;

pub use log::RotationConfig;

pub use record::AuthenticatedActor;

pub use record::DecisionRecord;

Modules

cache

LRU decision cache with TTL and policy-version invalidation.

canonical

Canonical JSON serialization (simplified RFC 8785).

chain

HMAC-SHA256 hash chain for tamper-evident audit records.

formatter

Audit log formatters for SIEM ingestion.

log

Append-only JSONL decision log writer with optional HMAC hash chaining.

record

Decision record schema (v2).