Struct AuditLog 

pub struct AuditLog { /* private fields */ }

Appends signed, hash-chained entries to a tamper-evident log.

Each append signs the new entry’s digest and links it to the previous entry, so the log can later be proven complete and unaltered. The log holds the signing identity and the chain head; it does not store the entries itself, so the caller persists each entry’s to_bytes to durable storage (a file or SD card in the field) and rebuilds the chain from there.

Examples

use pamoja_audit::{verify_chain, AuditLog};
use pamoja_security::DeviceIdentity;

let device = DeviceIdentity::from_seed(&[9u8; 32]);
let public = device.public();

let mut log = AuditLog::new(device);
let entries = [log.append(b"4.6C"), log.append(b"4.9C")];

assert!(verify_chain(&public, &entries).is_ok());

Implementations

impl AuditLog

pub fn new(identity: DeviceIdentity) -> Self

Starts a fresh log signed by identity.

Arguments

• identity - the device identity that signs each entry.

Returns

An empty log positioned at the first entry.

pub fn resume(identity: DeviceIdentity, last: &Entry) -> Self

Resumes a log after its last entry, to keep appending across a restart.

Arguments

• identity - the device identity that signs each entry.
• last - the most recent entry already in durable storage.

Returns

A log positioned to append after last.

pub fn append(&mut self, payload: &[u8]) -> Entry

Appends payload, returning the new signed, chained entry.

The caller persists the returned entry’s to_bytes.

Arguments

• payload - the bytes to record, such as an encoded reading.

Returns

The new Entry.