Skip to content

Tags: audit

  • sow log

    In Commands

    Commandcliaudit

    Every write command inside a Repository commits an application-level Operation to that Repository’s SQLite database before it produces any external file side effect. That record is what makes crash recovery possible — and once the Operation reaches a …

    Every write command inside a Repository commits an application-level Operation to that Repository’s SQLite database before it produces any external file side effect. That record is what makes crash recovery possible — and once the Operation reaches a …

  • sow check

    In Commands

    Commandcliauditsigning

    sow check is the deep read-only gate for a managed Repository. It hashes bytes, validates state, reconstructs expected views, and verifies declared signatures. It never repairs, builds, recovers an Operation, or takes the write lock. Synopsis sow …

    sow check is the deep read-only gate for a managed Repository. It hashes bytes, validates state, reconstructs expected views, and verifies declared signatures. It never repairs, builds, recovers an Operation, or takes the write lock. Synopsis sow …

  • sow status

    In Commands

    Commandclimanagedaudit

    sow status is the cheap Repository health query. It reads state but does not hash files, verify signatures, recover Operations, build metadata, or take the write lock. Synopsis sow status [-C|--workdir DIR] [-r|--repo NAME] [-d|--dist NAME]... …

    sow status is the cheap Repository health query. It reads state but does not hash files, verify signatures, recover Operations, build metadata, or take the write lock. Synopsis sow status [-C|--workdir DIR] [-r|--repo NAME] [-d|--dist NAME]... …

  • Observability & Audit

    In Features

    Featureaudittransaction

    Each read surface answers a different question. Command Question Writes? status What state is the Repository in? no check Does the selected Repository satisfy the complete delivery contract? no changes What physical files differ between Built …

    Each read surface answers a different question. Command Question Writes? status What state is the Repository in? no check Does the selected Repository satisfy the complete delivery contract? no changes What physical files differ between Built …

  • Transactions & Recovery

    In Features

    Featuretransactiongenerationaudit

    This page explains how Managed mode prevents a live pointer from naming missing content and how it coordinates SQLite state with filesystem changes. The invariant On a supported local POSIX filesystem, a client following a Managed protocol pointer …

    This page explains how Managed mode prevents a live pointer from naming missing content and how it coordinates SQLite state with filesystem changes. The invariant On a supported local POSIX filesystem, a client following a Managed protocol pointer …