Crate krabka_audit 

Krabka audit subsystem: event model, OCSF serialization, and write pipeline.

See docs/superpowers/specs/2026-06-18-krabka-fedramp-mla-audit-design.md.

Re-exports

pub use chain::ChainState;

pub use chain::GENESIS_HEAD;

pub use chain::chain_hash;

pub use checkpoint::Checkpoint;

pub use checkpoint::EVENT_CLASS_CHECKPOINT;

pub use event::AuditEndpoint;

pub use event::AuditEvent;

pub use event::AuditEventClass;

pub use event::AuditOutcome;

pub use event::AuditPrincipal;

pub use event::AuditResource;

pub use event::LifecycleKind;

pub use event::PrivilegedPhase;

pub use ids::CheckpointCount;

pub use ids::EpochMs;

pub use ids::MaxSpoolBytes;

pub use ids::RecordCount;

pub use ids::Seq;

pub use ids::SpoolBytes;

pub use log::AuditLog;

pub use log::AuditMode;

pub use log::AuditReceiver;

pub use log::AuditWriter;

pub use log::AuditWriterParams;

pub use ocsf::ProductInfo;

pub use ocsf::to_ocsf;

pub use signing::FileEd25519Signer;

pub use signing::FreezeSigningInput;

pub use signing::checkpoint_signing_bytes;

pub use signing::freeze_signing_input;

pub use signing::verify_signature;

pub use sink::AuditError;

pub use sink::AuditRecord;

pub use sink::AuditSink;

pub use sink::HEADER_PREV_HASH;

pub use sink::HEADER_SEQ;

pub use sink::MemorySink;

pub use spool::Spool;

pub use stats::AuditStats;

pub use verify::TrustedKeys;

pub use verify::VerifyBreak;

pub use verify::VerifyReport;

pub use verify::verify_partition_dir;

Modules

chain

Per-broker audit hash-chain primitives.

checkpoint

Signed chain-checkpoint records.

event

Internal audit event model.

ids

Domain newtypes for the audit crate.

log

The AuditLog handle and the background AuditWriter.

ocsf

OCSF serialization for audit events.

operator_keys

The operator key trust set, loaded from [[operator_keys]].

signing

Ed25519 checkpoint signing for the audit hash-chain.

sink

The audit sink abstraction and an in-memory test sink.

spool

Durable-across-process-crash local spool for the AU-5 degraded path.

stats

Shared, lock-free counters for the audit spool.

verify

Offline verification of an audit partition’s hash-chain and signed checkpoints.

Structs

NodeId

A broker, node, replica, or controller identifier.