v0.4.0 — External transparency-log anchoring
Anchor the tamper-evident audit hash-chain to the public Sigstore Rekor log, so the chain can be proven un-rewritten by an independent third party - verifiable fully offline, without trusting the Aulite instance.
Added
- External anchoring of the chain head to Sigstore Rekor (ECDSA P-256 signed, off the request path, opt-in).
- Fully offline verification: RFC 6962 Merkle inclusion proof + signed-checkpoint verification against Rekor's pinned key.
- CLI:
aulite anchor,aulite verify [--online]. - Art. 12 audit report now shows anchor status (Rekor log index + public verify URL).
Notes
Disabled by default — enable with AULITE_ANCHOR_ENABLED=true. Only opaque chain-head hashes leave the deployment. Zero new dependencies.