docs: WORM audit design spec #5

Merged

KofTwentyTwo merged 2 commits from feature/design-spec into develop

2026-10-14 00:27:12 +00:00

Author	SHA1	Message	Date
james.maesandClaude Opus 5.5	d25df1de0a	docs: the export policy also needs s3:PutObjectRetention Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-13 19:23:33 -05:00
james.maesandClaude Opus 5.5	bbac29e4d0	docs: WORM audit design spec Append-only audit tables enforced by Postgres triggers, a GRANT model and an audited retention purge; a single-writer hash chain with signed Merkle checkpoints, verification and daily alerting; sealed JSONL exports to S3 Object Lock (COMPLIANCE, 6 years); canonical content agreed with qbit-secured-data so only audit tokens are sealed. Owner decisions (2026-10-12): all recommendations accepted. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-13 19:20:29 -05:00

Author

SHA1

Message

Date

james.maesandClaude Opus 5.5

d25df1de0a

docs: the export policy also needs s3:PutObjectRetention

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-13 19:23:33 -05:00

james.maesandClaude Opus 5.5

bbac29e4d0

docs: WORM audit design spec

Append-only audit tables enforced by Postgres triggers, a GRANT model and
an audited retention purge; a single-writer hash chain with signed Merkle
checkpoints, verification and daily alerting; sealed JSONL exports to S3
Object Lock (COMPLIANCE, 6 years); canonical content agreed with
qbit-secured-data so only audit tokens are sealed.

Owner decisions (2026-10-12): all recommendations accepted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-13 19:20:29 -05:00