mirror of
https://github.com/hanzoai/drive.git
synced 2026-10-30 18:38:28 +00:00
zeekayandHanzo Dev
cb05c3656f
Hash-chained, append-only audit log per tenant: every mkdir/upload/download/ share (and denied access) records actor/action/resource with a sha256 chain over the prior entry. VerifyAudit() recomputes the chain and reports the first tampered seq — altering or deleting any entry is detected (SOC 2 CC7.2). GET /v1/drive/audit exports the trail + intact status for auditors. SOC2-READINESS.md maps Trust Services Criteria to code vs org process — honest that readiness != certification (needs an auditor + observation window). Co-authored-by: Hanzo Dev <[email protected]>
6 lines
186 B
Go
6 lines
186 B
Go
package drive
|
|
|
|
// Exec runs a statement on the tenant metadata DB. Exported for audit
|
|
// verification tooling and tests.
|
|
func (s *Store) Exec(sql string) error { return s.db.Exec(sql) }
|