Contribution records credited to Bordeaux Metropole

Audit Trail

• Throttle checkpoints on the rows a chain gained, not on the ids it spans
  Sat, 09/12/2026 - 21:12
• Preserve a value the writer had to cut, so a signed row stops naming something the caller never sent
  Sat, 09/12/2026 - 16:25
• Move the acknowledgment store out of the chain verifier
  Sat, 09/12/2026 - 14:30
• Name the admin surfaces the module actually has, and let core announce its own warning
  Sat, 09/12/2026 - 14:07
• Parse an ISO duration in one place, order the thresholds by one set of rules, and count the units the preview renders
  Sat, 09/12/2026 - 12:06
• Diff a multi-value field by counting its items, and draw each one where the field holds it
  Fri, 09/11/2026 - 21:58
• Move the canonical JSON encoder out of the chain verifier
  Fri, 09/11/2026 - 19:40
• Keep a chain write inside the columns it has, the shape it signs, and the budget a page can spend
  Fri, 09/11/2026 - 16:43
• Record what an acknowledgment does to the chain, keep its operator in the erasable tier, and re-check a signing Key whose bytes moved
  Fri, 09/11/2026 - 14:41
• Give every method a verb that names what it does, and stop calling a filtered event rejected
  Thu, 09/10/2026 - 17:48
• Correct the statements the code contradicts, and let the confirm button name the operation
  Thu, 09/10/2026 - 13:27
• Give the two implemented entries filters their fields and their chips
  Thu, 09/10/2026 - 12:04
• Keep an archive file unreadable by the host, and serve it only to whoever may administer the trail
  Thu, 09/10/2026 - 09:12
• Refuse, re-read and lock the five chain states the module documents and does not survive
  Thu, 09/10/2026 - 08:02
• Claim one nested context key, so a foreign log context cannot suppress or forge part of an audit row
  Wed, 09/09/2026 - 16:08
• Keep the module's own diagnostics out of the chain they report on
  Wed, 09/09/2026 - 14:09
• Name the signing role instead of competing status adjectives, and let the command line set which secret signs
  Wed, 09/09/2026 - 13:32
• Report stale filter plugins, stop reporting a failed key copy as success, and correct the contracts describing removed behavior
  Wed, 09/09/2026 - 12:48
• Guard the acknowledgment edit path, answer the verifier's per-row questions once per walk, and stop storing unbounded verdicts
  Wed, 09/09/2026 - 10:33
• Refuse to sign an archive whose bytes did not all reach the file, and identify an archived row by the id it carries
  Wed, 09/09/2026 - 09:19
• Mark the config types FullyValidatable, constrain what the keys promise, and make the settings forms validate against them
  Tue, 09/08/2026 - 20:40
• Put the demo seed where PHPStan looks, stop the metrics job asserting on its own output, and offer the redaction lists a write actually uses
  Tue, 09/08/2026 - 18:18
• Redact URL-borne secrets from the request URI and the referer before they are recorded
  Tue, 09/08/2026 - 17:03
• Let a caller supply the outbox buffer, so the flush failure path can be tested
  Tue, 09/08/2026 - 13:23
• Correct the documentation the code contradicts, starting with the Drupal 12 claim, and declare the project a shipped submodule needs
  Tue, 09/08/2026 - 11:46
• Record the refused logins and reset requests, diff a translation against its own language, and correct the forensic precedence
  Tue, 09/08/2026 - 10:23
• Ask the chain's filters on both paths, report the drops that were silent, and give the chain key one meaning per value
  Tue, 09/08/2026 - 07:02
• Bound the attempts a staged write gets, so one entry stops blocking the rest
  Mon, 09/07/2026 - 16:23
• Run the test that never ran, and cover the two paths the suite claimed
  Mon, 09/07/2026 - 15:37
• Validate an archive against its own signed anchors on import, and stop the missing-secret waiver covering a mismatch
  Mon, 09/07/2026 - 15:04
• Compute the per-row verdict in one place, and stop the surfaces disagreeing with the walk
  Mon, 09/07/2026 - 13:48
• Set validation errors in validateForm, and stop the chain form promising a delete it does not do
  Mon, 09/07/2026 - 09:00
• Refuse to reissue a freed tsa_id, so a stored timestamp keeps naming the TSA that issued it
  Mon, 09/07/2026 - 07:28
• Refuse to reissue a freed secret_id, and stop a key edit turning an intact trail into a tamper verdict
  Sun, 09/06/2026 - 21:12
• Bind the RFC-3161 timestamp to the chain it anchors, so TSA verification proves something about the chain
  Sun, 09/06/2026 - 19:08
• Refuse to verify a chain whose tail was deleted, and require an attested purge before bridging a gap
  Sat, 09/05/2026 - 23:25
• Verify before destroying at every retention stage, give PT0S one meaning, and make a refusal recoverable
  Sat, 09/05/2026 - 18:08
• Validate a segment's lifecycle signature before trusting it, and stop every transition re-signing the row as found
  Sat, 09/05/2026 - 09:27
• Keep credential fields and served-tree archives out of the trail
  Fri, 09/04/2026 - 21:31
• Exit non-zero when a Drush command did not do what it reports
  Fri, 09/04/2026 - 20:42
• Extract the retention preview written twice, and delete the two methods nothing calls
  Fri, 09/04/2026 - 16:22
• Declare the config schema and dependencies the bridge modules install with
  Fri, 09/04/2026 - 15:29
• Identify chained rows by identity in forget(), so a partly-failed multi-chain flush stops destroying an unchained row
  Fri, 09/04/2026 - 13:17
• Build the chain registry hot path from configuration rather than entities, and stop the metrics page going stale unnoticed
  Thu, 09/03/2026 - 13:17
• Chain writes made inside a caller's transaction are dropped under concurrency; chain them in the post-transaction callback instead
  Thu, 09/03/2026 - 09:53
• Describe the chain the way the code builds it, so the front pages stop claiming a row embeds the previous row's HMAC
  Tue, 09/01/2026 - 22:40
• Count service definitions rather than keys, so the metrics page stops reporting 46 services where there are 25
  Tue, 09/01/2026 - 18:58
• Remove CHANGELOG.md, which duplicates the release notes and the issue queue
  Tue, 09/01/2026 - 17:37
• Split ChainArchiver, so a change to one lifecycle stage stops being a change to all of them
  Tue, 09/01/2026 - 17:06
• Close the changelog section for the alpha7 release, so the released file stops describing its own contents as unreleased
  Tue, 09/01/2026 - 11:36