ujex-audit-chain 0.2.0

Hash-chained append-only audit log. Python companion to @ujex/audit-chain (TypeScript). Stdlib-only.

ujex-audit-chain (Python)

Python companion to @ujex/audit-chain (TypeScript). Hash-chained append-only log. Stdlib only — no external dependencies.

Wire format is identical to the TypeScript package. A chain serialized in one language verifies in the other.

Install

pip install ujex-audit-chain

Requires Python 3.10+.

Usage

from ujex_audit_chain import Chain, VerifyResult

chain = Chain()
entry = chain.append(
    {"actor": "agent-hello", "action": "postbox.send", "meta": {"to": "alice"}}
)
# entry.seq, entry.timestamp, entry.payloadHash, entry.prevHash, entry.entryHash

result = chain.verify()     # VerifyResult(ok=True, broken_at=None, reason=None)

blob = chain.serialize()    # list[dict] — JSON-safe
restored = Chain.from_entries(blob)

Wire format

payloadHash = sha256_hex(canonical_json(payload))
entryHash   = sha256_hex(prevHash || payloadHash || str(timestamp_ms) || str(seq))

Canonical JSON = json.dumps(..., sort_keys=True, separators=(',', ':'), ensure_ascii=False). Hex digests are lowercase, 64 chars.

For full details see the TypeScript package README.

License

Apache-2.0.