Why having logs is not the same as accountability
Logs answer “what is in the database now.” Accountability also needs “has anything been altered after write?” A system that can write logs can usually rewrite them; that calls for a recomputable structure that does not depend on operational promises.
Difference
Section titled “Difference”flowchart TD L[Logs only] --> Q[Queryable] C[Hash chain] --> Q C --> V[Recomputable verify] V --> B[Locate break]Agent Forge appends prev_hash / hash per tenant and exposes a verify API. False positives often come from inconsistent serialization shapes; normalize the body to avoid them. Mechanism: hash-chain audit. Metric definitions: reliability · metrics.
Full verify capability is license-gated; open source can still retain stream query. Do not equate “there is an audit table” with “integrity verification has passed.”
Related reading: