auditrail

The DeepSeek Harness (dsh) ecosystem already ships observability bundles for performance (OpenTelemetry, Prometheus), but nobody was recording a security audit trail. auditrail closes that gap. It mounts as a dsh bundle, subscribes to the session event stream and the live tool pipeline, and records—per invocation—who ran what, when, which files and network targets were touched, the result status, and the duration—producing a single, tamper-evident audit chain.

Privacy and forensics coexist by design. Every row is masked and truncated before it touches SQLite (WAL): keys, bearer tokens, and high-entropy strings become labels, not secret values. A SHA-256 hash chain links each record to the previous one, so auditrail chain verify will flag any tampered or reordered line. Fourteen built-in sensitive-operation rules (rm -rf, curl | sh, sudo su, git force-push, and more) tag records with severity and rule IDs you can filter, query, and export.

Four model-facing tools (audit_query, audit_export, audit_playback, audit_policy) and a standalone auditrail CLI share the same SQLite database, so you can query, export to JSON / Markdown / compliance JSONL, or slow-play the entire session as a plain-text terminal timeline—without launching the harness. If your team needs compliance evidence, post-incident forensics, or simply wants to know exactly which commands the model invoked and which files it touched, auditrail is the security-audit layer the dsh ecosystem has been missing.