Contribution records credited to Bordeaux Metropole

Audit Trail

• The README does not mention the proof that survives deletion
  Sun, 09/20/2026 - 18:24
• Let the metrics job measure the tree and fail when the page is stale, instead of comparing the page with its own copy
  Sun, 09/20/2026 - 17:26
• Both shipped filter plugins restate the same scope rules, in PHP and again in config schema
  Sun, 09/20/2026 - 08:08
• A segment signature checked and found forged is reported with the value reserved for one that was never checked
  Sun, 09/20/2026 - 07:44
• Admin stylesheets tint a cell without saying what color its text is, and the entry page prints a unit nothing can translate
  Sun, 09/20/2026 - 07:24
• The login and password forms carry a validate handler Drupal cannot serialize, so a rebuilt form fatals
  Sat, 09/19/2026 - 23:21
• Cron's backlog flush takes staged rows whose own request is still holding them
  Sat, 09/19/2026 - 22:29
• A filter answer and a plugin crash are two things in one array
  Sat, 09/19/2026 - 22:11
• Methods named for a fragment of their call site instead of the question they answer
  Sat, 09/19/2026 - 20:49
• A TSA provider can carry a credential to a plaintext endpoint
  Sat, 09/19/2026 - 18:30
• The compaction stage runs at a threshold both retention forms refuse
  Sat, 09/19/2026 - 16:44
• A chain clear racing the post-transaction flush puts its entries back
  Sat, 09/19/2026 - 15:36
• Chain ids, hex digests and channel names are stored as if they could hold any character, in all five tables
  Sat, 09/19/2026 - 12:55
• Surfaces describing behaviour the code no longer has
  Sat, 09/19/2026 - 08:13
• audit_trail:rewrite-archive reports refusals that say nothing about the trail as bad audit data
  Sat, 09/19/2026 - 07:32
• Importing an archive can declare a segment over rows another one already claims
  Fri, 09/18/2026 - 22:54
• Clearing a chain leaves its staged entries, cron puts them back, and the surfaces that name them get them wrong
  Fri, 09/18/2026 - 22:16
• A keyless verification walk reports every gap it never tried to cross as a broken chain, and blames the keyring
  Fri, 09/18/2026 - 21:11
• Deleting a Key deletes the audit trail secret that signs with it
  Fri, 09/18/2026 - 08:43
• Methods named after what they return instead of what they do
  Fri, 09/18/2026 - 08:18
• Segments a lifecycle stage keeps refusing are counted nowhere
  Fri, 09/18/2026 - 07:54
• Chain the segments, so an archived one stays attested after its own events age out
  Thu, 09/17/2026 - 21:29
• Uninstalling audit_trail_tsa leaves a State row per chain behind
  Thu, 09/17/2026 - 16:58
• One owner for the signature vocabulary, and four surfaces that describe what the code does not do
  Thu, 09/17/2026 - 16:09
• Segments a stage refuses hold up every segment behind them
  Thu, 09/17/2026 - 15:01
• A change between two loosely equal values is recorded, and rendered, as no change
  Thu, 09/17/2026 - 14:26
• An acknowledgment on a chain's first row is recorded and then never honored
  Thu, 09/17/2026 - 08:29
• Remove five duplicate catch arms, an unreachable ternary and a repeated secret lookup
  Wed, 09/16/2026 - 22:07
• Document every key audit_trail.settings ships, and pin the list to the schema
  Wed, 09/16/2026 - 21:44
• Generate operator-facing links from their routes so a subdirectory install can follow them
  Wed, 09/16/2026 - 21:27
• Keys the module stamps on a row can be set by the caller, and one of them can abort the save
  Wed, 09/16/2026 - 20:41
• An entry detail page reports a chain break over a range retention purged and attested
  Wed, 09/16/2026 - 18:34
• Three surfaces miscount the verify routes, the per-row checks and the lifecycle stages
  Wed, 09/16/2026 - 15:24
• Let an operator run the auditor's walk the documentation tells them to run
  Wed, 09/16/2026 - 15:07
• A refused probe and a HEAD are recorded as downloads, though neither carries the document
  Wed, 09/16/2026 - 14:34
• A walk that cannot read a signature reports the structural breaks behind it as verified
  Wed, 09/16/2026 - 14:08
• One reader for the active-filter chip bar and for the active TSA provider
  Wed, 09/16/2026 - 06:52
• Document the segment reindex command, and correct the index and permission counts
  Wed, 09/16/2026 - 06:30
• Two admin surfaces describe a behaviour the code does not have
  Wed, 09/16/2026 - 06:15
• Cron builds the features a site has switched off, two of which ship off
  Tue, 09/15/2026 - 21:58
• Every entity save builds the audit orchestrator, including the ones the bridge skips
  Tue, 09/15/2026 - 21:21
• A config-entity change is recorded as its label, so the diff reports that nothing changed
  Tue, 09/15/2026 - 20:44
• A private-file request that core refuses is recorded as a completed download
  Tue, 09/15/2026 - 17:38
• The status report names the chain and the row twice on a broken chain
  Tue, 09/15/2026 - 14:09
• Rebuilding the segment index from the chain, and acknowledging what it cannot rebuild
  Tue, 09/15/2026 - 13:48
• Correct the surfaces that describe an API and a signature coverage the code does not have
  Tue, 09/15/2026 - 11:47
• Move the segment attestations out of the verifier into their own class
  Tue, 09/15/2026 - 09:57
• Verification depth is a boolean, so an unresolvable secret reads as a forged signature
  Tue, 09/15/2026 - 07:44
• The segment table is an index the chain can rebuild, and nothing treats it as one
  Mon, 09/14/2026 - 18:17
• Two lifecycle diagnostics land in the chain they are reporting on
  Mon, 09/14/2026 - 13:18