feat: per-action audit trail (reins audit) - #20

Merged

karngyan merged 15 commits into

mainfrom

audit-log

Jul 11, 2026

Commits on Jul 11, 2026

docs: roadmap status pass + audit log design spec

karngyan
and
claude
committed
2b83905
docs: audit log implementation plan + spec corrections

karngyan
and
claude
committed
172670d
feat(protocol): optional ResponseMeta (host/tier/tabId) on ResponseFrame

karngyan
and
claude
committed
2cf3eb9
feat(extension): ensureAllowed returns tier, PolicyDenied carries meta

karngyan
and
claude
committed
f0cee80
feat(extension): dispatchWithMeta stamps resolved host/tier/tabId

karngyan
and
claude
committed
3f8680a
test(extension): cover open_tab/list_tabs meta shapes and metaless denial

karngyan
and
claude
committed
24894f9
feat(extension): carry dispatch meta on response frames

karngyan
and
claude
committed
4c8969b
feat(cli): audit record redaction, JSONL writer, 30-day prune

karngyan
and
claude
committed
8b73adc
feat(cli): BridgeHost.requestFull exposes meta, browserId, error code

karngyan
and
claude
committed
fb3119a
test(cli): fakeBridge satisfies BridgePort.requestFull

karngyan
and
claude
committed
91fbf28
feat(cli): daemon writes an audit record per /rpc action

karngyan
and
claude
committed
67077b0
fix(cli): audit hook exceptions never affect the RPC result

karngyan
and
claude
committed
7de27a9
feat(cli): reins audit — view the per-action trail

karngyan
and
claude
committed
65309da
docs: audit trail on security page, changeset, roadmap tick

karngyan
and
claude
committed
f3c005c
fix(cli): final-review fixes — redact promptText, denial browserId, tabId fallback

karngyan
and
claude
committed
d923d28

Navigation Menu

Uh oh!

feat: per-action audit trail (reins audit) - #20

feat: per-action audit trail (reins audit)#20
karngyan merged 15 commits into
mainfrom
audit-log

Commits on Jul 11, 2026

docs: roadmap status pass + audit log design spec

docs: audit log implementation plan + spec corrections

feat(protocol): optional ResponseMeta (host/tier/tabId) on ResponseFrame

feat(extension): ensureAllowed returns tier, PolicyDenied carries meta

feat(extension): dispatchWithMeta stamps resolved host/tier/tabId

test(extension): cover open_tab/list_tabs meta shapes and metaless denial

feat(extension): carry dispatch meta on response frames

feat(cli): audit record redaction, JSONL writer, 30-day prune

feat(cli): BridgeHost.requestFull exposes meta, browserId, error code

test(cli): fakeBridge satisfies BridgePort.requestFull

feat(cli): daemon writes an audit record per /rpc action

fix(cli): audit hook exceptions never affect the RPC result

feat(cli): reins audit — view the per-action trail

docs: audit trail on security page, changeset, roadmap tick

fix(cli): final-review fixes — redact promptText, denial browserId, tabId fallback