[DEF-4] audit_log grows forever; no retention and no read API #25
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
[claude 2026-07-03] Deferred from audit review (store.go schema comment). Add (a) GET /api/v1/audit?limit=N admin endpoint (completes the forensic story — rows are currently only reachable via sqlite), and (b) retention: audit_retention config (duration, default e.g. 2160h), pruned at startup and daily. E2E: real server binary; mint tokens -> rows visible via the API; restart with tiny retention -> old rows pruned, recent survive.
Migrated from git-collab issue
22de4ebf8ef97005038a53572ecea0a0e4799c27.Original author: a73x dev@a73x.sh.
Close reason: Fixed by patch
8de9b58d[claude 2026-07-04] Picking this up. store.PruneAudit(olderThan) + GET /api/v1/audit?limit=N (admin) + audit_retention server config (default 2160h/90d, 0 disables) pruned at startup and daily.