Skip to content

Why having logs is not the same as accountability

Logs answer “what is in the database now.” Accountability also needs “has anything been altered after write?” A system that can write logs can usually rewrite them; that calls for a recomputable structure that does not depend on operational promises.

flowchart TD
L[Logs only] --> Q[Queryable]
C[Hash chain] --> Q
C --> V[Recomputable verify]
V --> B[Locate break]

Agent Forge appends prev_hash / hash per tenant and exposes a verify API. False positives often come from inconsistent serialization shapes; normalize the body to avoid them. Mechanism: hash-chain audit. Metric definitions: reliability · metrics.

Full verify capability is license-gated; open source can still retain stream query. Do not equate “there is an audit table” with “integrity verification has passed.”


Related reading: