auditgate 0.1.0__py3-none-any.whl

auditgate/__init__.py

@@ -0,0 +1,46 @@
+"""AuditGate: Compliance-grade audit logging for agent systems."""
+
+from .core import (
+    MISSING,
+    AuditEntry,
+    AuditPolicy,
+    Decision,
+    IntegrityMode,
+    Mode,
+    Result,
+    Severity,
+    Status,
+    StoreErrorMode,
+    Trail,
+    Verdict,
+    compute_hash,
+    verify_chain,
+    wall_clock,
+)
+from .engine import AuditError, Engine
+from .store import MemoryStore, QueryFilter, Store
+
+__all__ = [
+    "Trail",
+    "AuditPolicy",
+    "AuditEntry",
+    "Decision",
+    "Result",
+    "MISSING",
+    "compute_hash",
+    "verify_chain",
+    "wall_clock",
+    "Mode",
+    "Status",
+    "Severity",
+    "Verdict",
+    "IntegrityMode",
+    "StoreErrorMode",
+    "Engine",
+    "AuditError",
+    "Store",
+    "MemoryStore",
+    "QueryFilter",
+]
+
+__version__ = "0.1.0"

auditgate/core.py

@@ -0,0 +1,229 @@
+"""Core types for AuditGate."""
+
+from __future__ import annotations
+
+import hashlib
+import json
+from dataclasses import dataclass, field
+from datetime import datetime, timezone
+from enum import Enum, auto
+from typing import Any
+
+
+class Mode(Enum):
+    """Enforcement mode for audit failures."""
+    HARD = auto()
+    SOFT = auto()
+
+
+class StoreErrorMode(Enum):
+    """Behavior when audit store backend fails."""
+    FAIL_CLOSED = auto()
+    FAIL_OPEN = auto()
+
+
+class Status(Enum):
+    """Audit recording outcome."""
+    RECORDED = auto()
+    DROPPED = auto()
+
+
+class Severity(Enum):
+    """Audit entry severity level."""
+    DEBUG = auto()
+    INFO = auto()
+    WARN = auto()
+    ERROR = auto()
+    CRITICAL = auto()
+
+
+class Verdict(Enum):
+    """Outcome of the gate decision being audited."""
+    ALLOW = auto()
+    BLOCK = auto()
+    ERROR = auto()
+    OVERRIDE = auto()
+
+
+class IntegrityMode(Enum):
+    """Tamper-evidence mode for audit entries."""
+    NONE = auto()
+    HASH = auto()
+    CHAIN = auto()
+
+
+@dataclass(frozen=True, slots=True)
+class Trail:
+    """Identifies an audit trail (log stream)."""
+    namespace: str
+    source: str
+    principal: str = "global"
+
+    def __str__(self) -> str:
+        return f"{self.namespace}:{self.source}@{self.principal}"
+
+    @property
+    def key(self) -> str:
+        return f"aud:{self.namespace}:{self.source}:{self.principal}"
+
+
+@dataclass(frozen=True, slots=True)
+class AuditPolicy:
+    """Configuration for an audit trail."""
+    mode: Mode = Mode.HARD
+    on_store_error: StoreErrorMode = StoreErrorMode.FAIL_CLOSED
+    min_severity: Severity = Severity.DEBUG
+    retention_seconds: float | None = None
+    integrity: IntegrityMode = IntegrityMode.HASH
+
+    def __post_init__(self) -> None:
+        if self.retention_seconds is not None and self.retention_seconds <= 0:
+            raise ValueError("retention_seconds must be positive or None")
+
+
+@dataclass(frozen=True, slots=True)
+class AuditEntry:
+    """A single audit log entry."""
+    trail: Trail
+    ts: float
+    wall_ts: str
+    verdict: Verdict
+    severity: Severity
+    gate_type: str
+    gate_identity: str
+    recorded_by: str = ""
+    reason: str | None = None
+    detail: dict[str, Any] = field(default_factory=dict)
+    entry_hash: str | None = None
+    prev_hash: str | None = None
+    sequence: int = 0
+
+    def to_dict(self) -> dict[str, Any]:
+        """Canonical JSON-portable format for cross-language compatibility."""
+        return {
+            "trail": str(self.trail),
+            "ts": self.ts,
+            "wall_ts": self.wall_ts,
+            "verdict": self.verdict.name,
+            "severity": self.severity.name,
+            "gate_type": self.gate_type,
+            "gate_identity": self.gate_identity,
+            "recorded_by": self.recorded_by,
+            "reason": self.reason,
+            "detail": self.detail,
+            "entry_hash": self.entry_hash,
+            "prev_hash": self.prev_hash,
+            "sequence": self.sequence,
+        }
+
+
+@dataclass(frozen=True, slots=True)
+class Decision:
+    """Result of attempting to record an audit entry."""
+    status: Status
+    trail: Trail
+    policy: AuditPolicy
+    entry: AuditEntry | None = None
+    reason: str | None = None
+
+    @property
+    def recorded(self) -> bool:
+        return self.status == Status.RECORDED
+
+    @property
+    def dropped(self) -> bool:
+        return self.status == Status.DROPPED
+
+    def __bool__(self) -> bool:
+        return self.recorded
+
+
+class _Missing:
+    """Sentinel for distinguishing None from missing value."""
+    __slots__ = ()
+    def __repr__(self) -> str:
+        return "<MISSING>"
+
+
+MISSING = _Missing()
+
+
+@dataclass(frozen=True, slots=True)
+class Result[T]:
+    """Wrapper for guarded function results."""
+    decision: Decision
+    _value: T | _Missing = field(default=MISSING)
+
+    @property
+    def ok(self) -> bool:
+        return self.decision.recorded
+
+    def unwrap(self) -> T:
+        if isinstance(self._value, _Missing):
+            raise RuntimeError(
+                f"unwrap() called on dropped audit: {self.decision.reason}"
+            )
+        return self._value  # type: ignore[return-value]
+
+    def unwrap_or(self, default: T) -> T:
+        if isinstance(self._value, _Missing):
+            return default
+        return self._value  # type: ignore[return-value]
+
+
+# ── Integrity ──
+
+def compute_hash(
+    entry_data: dict[str, Any],
+    prev_hash: str | None = None,
+) -> str:
+    """Deterministic SHA-256 content hash over canonical JSON."""
+    hashable = {
+        "trail": entry_data.get("trail", ""),
+        "ts": entry_data.get("ts", 0),
+        "verdict": entry_data.get("verdict", ""),
+        "severity": entry_data.get("severity", ""),
+        "gate_type": entry_data.get("gate_type", ""),
+        "gate_identity": entry_data.get("gate_identity", ""),
+        "reason": entry_data.get("reason"),
+        "detail": entry_data.get("detail", {}),
+        "sequence": entry_data.get("sequence", 0),
+    }
+    if prev_hash is not None:
+        hashable["prev_hash"] = prev_hash
+    canonical = json.dumps(hashable, sort_keys=True, separators=(",", ":"))
+    return hashlib.sha256(canonical.encode("utf-8")).hexdigest()
+
+
+def verify_chain(entries: list[AuditEntry]) -> tuple[bool, int | None]:
+    """Verify hash chain integrity. Returns (valid, broken_at)."""
+    for i, entry in enumerate(entries):
+        if entry.entry_hash is None:
+            continue
+
+        base_data = {
+            "trail": str(entry.trail),
+            "ts": entry.ts,
+            "verdict": entry.verdict.name,
+            "severity": entry.severity.name,
+            "gate_type": entry.gate_type,
+            "gate_identity": entry.gate_identity,
+            "reason": entry.reason,
+            "detail": entry.detail,
+            "sequence": entry.sequence,
+        }
+
+        expected = compute_hash(base_data, prev_hash=entry.prev_hash)
+        if entry.entry_hash != expected:
+            return False, entry.sequence
+
+        if entry.prev_hash is not None and i > 0:
+            if entries[i - 1].entry_hash != entry.prev_hash:
+                return False, entry.sequence
+
+    return True, None
+
+
+def wall_clock() -> str:
+    """Current wall-clock time as ISO 8601 UTC."""
+    return datetime.now(timezone.utc).isoformat()

auditgate/engine.py

@@ -0,0 +1,266 @@
+"""AuditGate engine for compliance-grade audit logging."""
+
+from __future__ import annotations
+
+import time
+from functools import wraps
+from typing import Any, Callable, ParamSpec, TypeVar
+
+from .core import (
+    MISSING,
+    AuditEntry,
+    AuditPolicy,
+    Decision,
+    IntegrityMode,
+    Mode,
+    Result,
+    Severity,
+    Status,
+    StoreErrorMode,
+    Trail,
+    Verdict,
+    compute_hash,
+    wall_clock,
+)
+from .store import MemoryStore, Store
+
+P = ParamSpec("P")
+T = TypeVar("T")
+
+
+class AuditError(RuntimeError):
+    """Raised when audit logging fails in HARD mode."""
+
+    def __init__(self, decision: Decision) -> None:
+        super().__init__(decision.reason or f"Audit failure: {decision.status}")
+        self.decision = decision
+
+
+class Engine:
+    """AuditGate engine for compliance-grade audit logging."""
+
+    __slots__ = (
+        "_store", "_clock", "_wall_clock", "_recorded_by",
+        "_policies", "_sequences", "_listeners", "_errors",
+    )
+
+    def __init__(
+        self,
+        store: Store | None = None,
+        clock: Callable[[], float] | None = None,
+        wall_clock_fn: Callable[[], str] | None = None,
+        recorded_by: str = "",
+    ) -> None:
+        self._store: Store = store or MemoryStore()
+        self._clock = clock or time.monotonic
+        self._wall_clock = wall_clock_fn or wall_clock
+        self._recorded_by = recorded_by
+        self._policies: dict[Trail, AuditPolicy] = {}
+        self._sequences: dict[Trail, int] = {}
+        self._listeners: list[Callable[[Decision], None]] = []
+        self._errors = 0
+
+    # ── Configuration ──
+
+    def register(self, trail: Trail, policy: AuditPolicy) -> None:
+        self._policies[trail] = policy
+
+    def policy_for(self, trail: Trail) -> AuditPolicy | None:
+        return self._policies.get(trail)
+
+    def on_decision(self, listener: Callable[[Decision], None]) -> None:
+        self._listeners.append(listener)
+
+    @property
+    def listener_errors(self) -> int:
+        return self._errors
+
+    # ── Core API ──
+
+    def record(
+        self,
+        trail: Trail,
+        *,
+        verdict: Verdict,
+        severity: Severity,
+        gate_type: str,
+        gate_identity: str,
+        reason: str | None = None,
+        detail: dict[str, Any] | None = None,
+        policy: AuditPolicy | None = None,
+    ) -> Decision:
+        """Record an audit entry for a gate decision."""
+        if policy is not None:
+            self._policies[trail] = policy
+
+        p = self._policies.get(trail)
+        if p is None:
+            p = AuditPolicy()
+            self._policies[trail] = p
+
+        if _sev_rank(severity) < _sev_rank(p.min_severity):
+            return self._decide(trail, p, Status.DROPPED,
+                                reason=f"Below min_severity ({p.min_severity.name})")
+
+        now = self._clock()
+
+        try:
+            entry = self._build_entry(trail, p, now, verdict, severity,
+                                      gate_type, gate_identity, reason, detail or {})
+        except Exception as exc:
+            return self._on_store_error(trail, p, f"Entry build failed: {exc}")
+
+        try:
+            self._store.append(entry)
+        except Exception as exc:
+            return self._on_store_error(trail, p, f"Store append failed: {exc}")
+
+        if p.retention_seconds is not None:
+            try:
+                self._store.prune(trail, now - p.retention_seconds)
+            except Exception:
+                pass
+
+        return self._decide(trail, p, Status.RECORDED, entry=entry)
+
+    def enforce(self, decision: Decision) -> None:
+        """Raise AuditError if dropped in HARD mode."""
+        if decision.dropped and decision.policy.mode == Mode.HARD:
+            raise AuditError(decision)
+
+    def clear(self, trail: Trail) -> None:
+        self._store.clear(trail)
+        self._sequences.pop(trail, None)
+
+    def clear_all(self) -> None:
+        self._store.clear_all()
+        self._sequences.clear()
+
+    # ── Decorator API ──
+
+    def guard(
+        self,
+        trail: Trail,
+        *,
+        policy: AuditPolicy | None = None,
+        verdict: Verdict = Verdict.ALLOW,
+        severity: Severity = Severity.INFO,
+        gate_type: str = "auditgate",
+        meta: dict[str, Any] | None = None,
+    ) -> Callable[[Callable[P, T]], Callable[P, T]]:
+        """Decorator that audits function calls. Raises on audit failure."""
+        if policy is not None:
+            self.register(trail, policy)
+
+        def decorator(fn: Callable[P, T]) -> Callable[P, T]:
+            @wraps(fn)
+            def wrapper(*args: P.args, **kwargs: P.kwargs) -> T:
+                d = self._guard_record(trail, verdict, severity, gate_type, fn, meta)
+                if d.dropped:
+                    self.enforce(d)
+                return fn(*args, **kwargs)
+            return wrapper
+        return decorator
+
+    def guard_result(
+        self,
+        trail: Trail,
+        *,
+        policy: AuditPolicy | None = None,
+        verdict: Verdict = Verdict.ALLOW,
+        severity: Severity = Severity.INFO,
+        gate_type: str = "auditgate",
+        meta: dict[str, Any] | None = None,
+    ) -> Callable[[Callable[P, T]], Callable[P, Result[T]]]:
+        """Decorator that audits function calls. Returns Result instead of raising."""
+        if policy is not None:
+            self.register(trail, policy)
+
+        def decorator(fn: Callable[P, T]) -> Callable[P, Result[T]]:
+            @wraps(fn)
+            def wrapper(*args: P.args, **kwargs: P.kwargs) -> Result[T]:
+                d = self._guard_record(trail, verdict, severity, gate_type, fn, meta,
+                                       prefix="guard_result")
+                if d.dropped:
+                    return Result(decision=d)
+                return Result(decision=d, _value=fn(*args, **kwargs))
+            return wrapper
+        return decorator
+
+    # ── Internal ──
+
+    def _guard_record(
+        self, trail: Trail, verdict: Verdict, severity: Severity,
+        gate_type: str, fn: Callable, meta: dict[str, Any] | None,
+        prefix: str = "guard",
+    ) -> Decision:
+        return self.record(
+            trail=trail, verdict=verdict, severity=severity,
+            gate_type=gate_type, gate_identity=str(trail),
+            reason=f"{prefix}:{fn.__qualname__}", detail=meta or {},
+        )
+
+    def _build_entry(
+        self, trail: Trail, policy: AuditPolicy, now: float,
+        verdict: Verdict, severity: Severity, gate_type: str,
+        gate_identity: str, reason: str | None, detail: dict[str, Any],
+    ) -> AuditEntry:
+        seq = self._next_seq(trail)
+        base = {
+            "trail": str(trail), "ts": now,
+            "verdict": verdict.name, "severity": severity.name,
+            "gate_type": gate_type, "gate_identity": gate_identity,
+            "reason": reason, "detail": detail, "sequence": seq,
+        }
+
+        entry_hash: str | None = None
+        prev_hash: str | None = None
+
+        if policy.integrity == IntegrityMode.HASH:
+            entry_hash = compute_hash(base)
+        elif policy.integrity == IntegrityMode.CHAIN:
+            prev = self._store.last_entry(trail)
+            prev_hash = prev.entry_hash if prev is not None else None
+            entry_hash = compute_hash(base, prev_hash=prev_hash)
+
+        return AuditEntry(
+            trail=trail, ts=now, wall_ts=self._wall_clock(),
+            verdict=verdict, severity=severity,
+            gate_type=gate_type, gate_identity=gate_identity,
+            recorded_by=self._recorded_by, reason=reason, detail=detail,
+            entry_hash=entry_hash, prev_hash=prev_hash, sequence=seq,
+        )
+
+    def _next_seq(self, trail: Trail) -> int:
+        if trail not in self._sequences:
+            last = self._store.last_entry(trail)
+            self._sequences[trail] = (last.sequence + 1) if last is not None else 0
+        seq = self._sequences[trail]
+        self._sequences[trail] = seq + 1
+        return seq
+
+    def _on_store_error(self, trail: Trail, policy: AuditPolicy, msg: str) -> Decision:
+        decision = self._decide(trail, policy, Status.DROPPED, reason=msg)
+        if policy.on_store_error == StoreErrorMode.FAIL_CLOSED and policy.mode == Mode.HARD:
+            raise AuditError(decision)
+        return decision
+
+    def _decide(
+        self, trail: Trail, policy: AuditPolicy, status: Status,
+        entry: AuditEntry | None = None, reason: str | None = None,
+    ) -> Decision:
+        d = Decision(status=status, trail=trail, policy=policy, entry=entry, reason=reason)
+        self._emit(d)
+        return d
+
+    def _emit(self, decision: Decision) -> None:
+        for listener in self._listeners:
+            try:
+                listener(decision)
+            except Exception:
+                self._errors += 1
+
+
+def _sev_rank(severity: Severity) -> int:
+    return {Severity.DEBUG: 0, Severity.INFO: 1, Severity.WARN: 2,
+            Severity.ERROR: 3, Severity.CRITICAL: 4}[severity]

auditgate/store.py

@@ -0,0 +1,130 @@
+"""Storage backends for AuditGate."""
+
+from __future__ import annotations
+
+import threading
+from dataclasses import dataclass
+from typing import Protocol, Sequence
+
+from .core import AuditEntry, Severity, Trail, Verdict
+
+
+@dataclass(frozen=True, slots=True)
+class QueryFilter:
+    """Filter criteria for querying audit entries."""
+    trail: Trail | None = None
+    verdict: Verdict | None = None
+    min_severity: Severity | None = None
+    after_ts: float | None = None
+    before_ts: float | None = None
+    gate_type: str | None = None
+    offset: int = 0
+    limit: int | None = None
+
+
+class Store(Protocol):
+    """Protocol for audit storage backends. Must be thread-safe."""
+
+    def append(self, entry: AuditEntry) -> None: ...
+    def query(self, filter: QueryFilter) -> Sequence[AuditEntry]: ...
+    def last_entry(self, trail: Trail) -> AuditEntry | None: ...
+    def count(self, trail: Trail) -> int: ...
+    def prune(self, trail: Trail, before_ts: float) -> int: ...
+    def clear(self, trail: Trail) -> None: ...
+    def clear_all(self) -> None: ...
+
+
+_SEV_ORDER: dict[Severity, int] = {
+    Severity.DEBUG: 0, Severity.INFO: 1, Severity.WARN: 2,
+    Severity.ERROR: 3, Severity.CRITICAL: 4,
+}
+
+
+class MemoryStore:
+    """Thread-safe in-memory audit store."""
+
+    __slots__ = ("_trails", "_locks", "_global_lock")
+
+    def __init__(self) -> None:
+        self._trails: dict[Trail, list[AuditEntry]] = {}
+        self._locks: dict[Trail, threading.Lock] = {}
+        self._global_lock = threading.Lock()
+
+    def _get_lock(self, trail: Trail) -> threading.Lock:
+        with self._global_lock:
+            if trail not in self._locks:
+                self._locks[trail] = threading.Lock()
+            return self._locks[trail]
+
+    def append(self, entry: AuditEntry) -> None:
+        lock = self._get_lock(entry.trail)
+        with lock:
+            if entry.trail not in self._trails:
+                self._trails[entry.trail] = []
+            self._trails[entry.trail].append(entry)
+
+    def query(self, filter: QueryFilter) -> Sequence[AuditEntry]:
+        with self._global_lock:
+            if filter.trail is not None:
+                keys = [filter.trail] if filter.trail in self._trails else []
+            else:
+                keys = list(self._trails.keys())
+
+        results: list[AuditEntry] = []
+        for k in keys:
+            lock = self._get_lock(k)
+            with lock:
+                for entry in self._trails.get(k, []):
+                    if self._matches(entry, filter):
+                        results.append(entry)
+
+        results.sort(key=lambda e: (e.ts, e.sequence))
+        if filter.offset > 0:
+            results = results[filter.offset:]
+        if filter.limit is not None:
+            results = results[:filter.limit]
+        return results
+
+    def last_entry(self, trail: Trail) -> AuditEntry | None:
+        lock = self._get_lock(trail)
+        with lock:
+            entries = self._trails.get(trail)
+            return entries[-1] if entries else None
+
+    def count(self, trail: Trail) -> int:
+        lock = self._get_lock(trail)
+        with lock:
+            return len(self._trails.get(trail, []))
+
+    def prune(self, trail: Trail, before_ts: float) -> int:
+        lock = self._get_lock(trail)
+        with lock:
+            entries = self._trails.get(trail, [])
+            original = len(entries)
+            self._trails[trail] = [e for e in entries if e.ts >= before_ts]
+            return original - len(self._trails[trail])
+
+    def clear(self, trail: Trail) -> None:
+        lock = self._get_lock(trail)
+        with lock:
+            self._trails.pop(trail, None)
+
+    def clear_all(self) -> None:
+        with self._global_lock:
+            self._trails.clear()
+            self._locks.clear()
+
+    @staticmethod
+    def _matches(entry: AuditEntry, filter: QueryFilter) -> bool:
+        if filter.verdict is not None and entry.verdict != filter.verdict:
+            return False
+        if filter.min_severity is not None:
+            if _SEV_ORDER[entry.severity] < _SEV_ORDER[filter.min_severity]:
+                return False
+        if filter.after_ts is not None and entry.ts < filter.after_ts:
+            return False
+        if filter.before_ts is not None and entry.ts > filter.before_ts:
+            return False
+        if filter.gate_type is not None and entry.gate_type != filter.gate_type:
+            return False
+        return True

auditgate-0.1.0.dist-info/METADATA

@@ -0,0 +1,200 @@
+Metadata-Version: 2.4
+Name: auditgate
+Version: 0.1.0
+Summary: Compliance-grade audit logging for agent systems.
+Project-URL: Homepage, https://github.com/actiongate-oss/auditgate
+Project-URL: Documentation, https://github.com/actiongate-oss/auditgate#readme
+Project-URL: Repository, https://github.com/actiongate-oss/auditgate
+Author-email: ActionGate OSS <actiongate-oss@users.noreply.github.com>
+License-Expression: BUSL-1.1
+License-File: LICENSE
+Keywords: ai-agents,audit,compliance,llm,tamper-evident
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: Other/Proprietary License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Typing :: Typed
+Requires-Python: >=3.12
+Provides-Extra: dev
+Requires-Dist: mypy>=1.0; extra == 'dev'
+Requires-Dist: pytest-cov>=4.0; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: ruff>=0.1; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# AuditGate
+
+**Compliance-grade audit logging for agent systems.**
+
+Every decision, every verdict, every override — structured, queryable, and tamper-evident.
+
+```bash
+pip install auditgate
+```
+
+---
+
+## What It Does
+
+AuditGate records every gate decision as a structured audit entry with optional tamper-evidence via content hashing or hash chaining. It pairs with [ActionGate](https://github.com/actiongate-oss/actiongate), [BudgetGate](https://github.com/actiongate-oss/budgetgate), and [RuleGate](https://github.com/actiongate-oss/rulegate) as the fourth composable primitive in the agent execution layer.
+
+AuditGate does **not** make allow/block decisions. It records what other gates decided and guarantees the record exists.
+
+**Vendoring encouraged.** This is a small, stable primitive. Copy it, fork it, reimplement it. If you vendor AuditGate, you must preserve the LICENSE file, preserve copyright headers in source files, and not remove or modify the BSL terms. The production use restriction applies to vendored copies. See [SEMANTICS.md](SEMANTICS.md) for the behavioral contract if you reimplement.
+
+## Quick Start
+
+```python
+from auditgate import (
+    Engine, Trail, AuditPolicy, Verdict, Severity, IntegrityMode
+)
+
+engine = Engine()
+
+# Define an audit trail with hash chain integrity
+trail = Trail("billing", "actiongate", "user:123")
+policy = AuditPolicy(integrity=IntegrityMode.CHAIN)
+engine.register(trail, policy)
+
+# Record a decision from ActionGate
+decision = engine.record(
+    trail=trail,
+    verdict=Verdict.ALLOW,
+    severity=Severity.INFO,
+    gate_type="actiongate",
+    gate_identity="billing:refund@user:123",
+    reason="Rate limit check passed",
+    detail={"calls_in_window": 3, "max_calls": 10},
+)
+
+assert decision.recorded
+assert decision.entry.entry_hash is not None
+```
+
+## Integrity Modes
+
+| Mode    | Behavior | Use Case |
+|---------|----------|----------|
+| `NONE`  | No hashing | Maximum throughput, trust the store |
+| `HASH`  | SHA-256 per entry | Detect tampering of individual entries |
+| `CHAIN` | Hash includes previous entry's hash | Detect tampering or deletion of any entry |
+
+## Failure Modes
+
+| Policy | Behavior |
+|--------|----------|
+| `HARD` + `FAIL_CLOSED` | No action can proceed without a recorded audit entry |
+| `HARD` + `FAIL_OPEN` | Raises on failure but allows unaudited actions |
+| `SOFT` + `FAIL_CLOSED` | Returns DROPPED decision, caller decides |
+| `SOFT` + `FAIL_OPEN` | Fire-and-forget audit (best-effort) |
+
+## Decorator API
+
+```python
+# Raises AuditError if audit recording fails (HARD mode default)
+@engine.guard(
+    Trail("api", "combined", "global"),
+    policy=AuditPolicy(integrity=IntegrityMode.HASH),
+    severity=Severity.INFO,
+    gate_type="auditgate",
+)
+def process_order(order_id: str) -> dict:
+    return {"status": "processed", "id": order_id}
+
+# Or use guard_result for no-exception handling
+@engine.guard_result(
+    Trail("api", "combined", "global"),
+    policy=AuditPolicy(mode=Mode.SOFT),
+    severity=Severity.INFO,
+    gate_type="auditgate",
+)
+def fetch_data(query: str) -> list:
+    return db.search(query)
+
+result = fetch_data(query="recent orders")
+data = result.unwrap_or([])
+```
+
+## Querying the Audit Trail
+
+```python
+from auditgate import QueryFilter, Verdict, Severity
+
+# All blocked decisions in the last hour
+entries = engine._store.query(QueryFilter(
+    trail=trail,
+    verdict=Verdict.BLOCK,
+    after_ts=time.monotonic() - 3600,
+))
+
+# All critical events across all trails
+critical = engine._store.query(QueryFilter(
+    min_severity=Severity.CRITICAL,
+))
+```
+
+## Composing with Other Gates
+
+```python
+from actiongate import Engine as ActionEngine, Gate, Policy
+from auditgate import Engine as AuditEngine, Trail, AuditPolicy, Verdict, Severity
+
+action_engine = ActionEngine()
+audit_engine = AuditEngine()
+
+trail = Trail("api", "actiongate", "global")
+audit_engine.register(trail, AuditPolicy())
+
+# Listen to ActionGate decisions and auto-audit them
+def audit_listener(action_decision):
+    audit_engine.record(
+        trail=trail,
+        verdict=Verdict.ALLOW if action_decision.allowed else Verdict.BLOCK,
+        severity=Severity.INFO if action_decision.allowed else Severity.WARN,
+        gate_type="actiongate",
+        gate_identity=str(action_decision.gate),
+        reason=str(action_decision.reason) if action_decision.reason else None,
+    )
+
+action_engine.on_decision(audit_listener)
+```
+
+## Performance
+
+Sub-20µs per audit entry with MemoryStore and SHA-256 hashing (benchmarked). Hash chain mode adds negligible overhead. For context, a single LLM API call is 200ms–2s.
+
+## File Structure
+
+```
+auditgate/
+├── __init__.py   # Public API, exports, version
+├── core.py       # All value types (Trail, AuditPolicy, AuditEntry, Decision, Result)
+├── engine.py     # Engine class (record, guard, guard_result)
+└── store.py      # Store protocol + MemoryStore
+```
+
+## Specification
+
+See [SEMANTICS.md](SEMANTICS.md) for the normative behavior specification. When this document and the code conflict, the specification governs.
+
+## License
+
+AuditGate is licensed under the [Business Source License 1.1](LICENSE).
+
+```
+Licensor:             actiongate-oss
+Licensed Work:        AuditGate
+Additional Use Grant: None
+Change Date:          2030-02-28 (four years from initial publication)
+Change License:       Mozilla Public License 2.0
+```
+
+**What this means:** You may copy, modify, create derivative works, redistribute, and make non-production use of AuditGate. The Additional Use Grant is "None", which means any use in a live environment that provides value to end users or internal business operations — including SaaS, internal enterprise deployment, and paid betas — requires a commercial license from the licensor. On the Change Date, AuditGate becomes available under [MPL 2.0](https://www.mozilla.org/en-US/MPL/2.0/) and the production restriction terminates. Each version has its own Change Date calculated from its publication.
+
+**If you vendor AuditGate:** Preserve the LICENSE file and copyright headers. Do not remove or modify the BSL terms. The production restriction applies to all copies, vendored or otherwise.
+
+**Licensing difference from siblings:** [ActionGate](https://github.com/actiongate-oss/actiongate) and [BudgetGate](https://github.com/actiongate-oss/budgetgate) are Apache 2.0. AuditGate is BSL 1.1. If composing all three, ensure your use complies with both license terms.
+
+See [LICENSE](LICENSE) for the legally binding text.

auditgate-0.1.0.dist-info/RECORD

@@ -0,0 +1,9 @@
+auditgate/__init__.py,sha256=-IoNAVxMrXz123D_fo9HY8fpaGlDN075ztykeMnvOxU,777
+auditgate/core.py,sha256=Xqkh_E-6tW1kHzyseZR4kq3QYerdU5qa3pBTsjXYAng,6303
+auditgate/engine.py,sha256=kYRPHncOJwbAwElDecakjLsnj-1qDD-wlhi-Rlv6vbw,8995
+auditgate/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+auditgate/store.py,sha256=Qc3Tb_5EN5A1i82yxYbuM0kwPsDQBM1m5TXssyZBy7I,4428
+auditgate-0.1.0.dist-info/METADATA,sha256=uTY6A40g85QlLNz9rMbRAIiAkenvJBqxfmpTImoCHgw,7610
+auditgate-0.1.0.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+auditgate-0.1.0.dist-info/licenses/LICENSE,sha256=KNgpFwRANZuqhI7xCqS2jIIN3u8MhcSfH7rYrEZpnUM,4128
+auditgate-0.1.0.dist-info/RECORD,,

auditgate-0.1.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.29.0
+Root-Is-Purelib: true
+Tag: py3-none-any

auditgate-0.1.0.dist-info/licenses/LICENSE

@@ -0,0 +1,96 @@
+Business Source License 1.1
+
+License text copyright (c) 2017 MariaDB Corporation Ab, All Rights
+Reserved. “Business Source License” is a trademark of MariaDB
+Corporation Ab.
+
+------------------------------------------------------------------------
+
+Parameters
+
+Licensor: actiongate-oss Licensed Work: AuditGate Additional Use Grant:
+None Change Date: February 28, 2030 Change License: Mozilla Public
+License 2.0
+
+------------------------------------------------------------------------
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create
+derivative works, redistribute, and make non-production use of the
+Licensed Work. The Licensor may make an Additional Use Grant, above,
+permitting limited production use.
+
+Effective on the Change Date, or the fourth anniversary of the first
+publicly available distribution of a specific version of the Licensed
+Work under this License, whichever comes first, the Licensor hereby
+grants you rights under the terms of the Change License, and the rights
+granted in the paragraph above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or
+authorized resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative
+works of the Licensed Work, are subject to this License. This License
+applies separately for each version of the Licensed Work and the Change
+Date may vary for each version of the Licensed Work released by
+Licensor.
+
+You must conspicuously display this License on each original or modified
+copy of the Licensed Work. If you receive the Licensed Work in original
+or modified form from a third party, the terms and conditions set forth
+in this License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will
+automatically terminate your rights under this License for the current
+and all other versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or
+logo of Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED
+ON AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND
+CONDITIONS, EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION)
+WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE,
+NON-INFRINGEMENT, AND TITLE.
+
+MariaDB hereby grants you permission to use this License’s text to
+license your works, and to refer to it using the trademark “Business
+Source License”, as long as you comply with the Covenants of Licensor
+below.
+
+------------------------------------------------------------------------
+
+Covenants of Licensor
+
+In consideration of the right to use this License’s text and the
+“Business Source License” name and trademark, Licensor covenants to
+MariaDB, and to all other recipients of the licensed work to be provided
+by Licensor:
+
+1.  To specify as the Change License the GPL Version 2.0 or any later
+    version, or a license that is compatible with GPL Version 2.0 or a
+    later version, where “compatible” means that software provided under
+    the Change License can be included in a program with software
+    provided under GPL Version 2.0 or a later version. Licensor may
+    specify additional Change Licenses without limitation.
+
+2.  To either: (a) specify an additional grant of rights to use that
+    does not impose any additional restriction on the right granted in
+    this License, as the Additional Use Grant; or (b) insert the text
+    “None”.
+
+3.  To specify a Change Date.
+
+4.  Not to modify this License in any other way.
+
+------------------------------------------------------------------------
+
+Notice
+
+The Business Source License (this document, or the “License”) is not an
+Open Source license. However, the Licensed Work will eventually be made
+available under an Open Source License, as stated in this License.