stzSecurityLedger

(sans commentaire dans la source : le nom se lit comme une phrase) initaucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) handleaucune extension

Bind this face to a ledger owned elsewhere (the process ledger). Destroy() will not free an adopted handle -- the owner does.aucune extension

The engine's own answer -- a face bound to the process ledger (AdoptHandle) never knew the capacity it was created with.aucune extension

recording --------------------------------------------------- Append an stzSecurityEvent. The engine chains it; nothing about the digest is under the caller's control.aucune extension

Append a canonical line directly -- the acquisition path (I8), used when rebuilding a ledger from verified evidence. The chain is recomputed here; it does not carry the original file's.aucune extension

Call it BEFORE recording. Returns [ :ok, :verified, :brokenAt, :why ]; a broken stored history is REFUSED (:ok = 0) and nothing is attached.aucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) is durableaucune extension

Verify the WHOLE stored history from genesis -- where Verify() can only speak for the retained window. [ :intact, :brokenAt, :message ]aucune extension

Events ever recorded (keeps counting past capacity).aucune extension

Events still retained in the window.aucune extension

reading ----------------------------------------------------- The record at 1-based position i (oldest retained first), in the I0 field shape plus its chain digest.aucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) allaucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) recentaucune extension

the analyst's pivotsaucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) of subjectaucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) of kindaucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) of traceaucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) of outcomeaucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) of severityaucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) of originaucune extension

Everything that was not granted -- the signal to watch. Refused and failed -- NOT "everything that is not granted". The negative form was here too, and it was wrong the moment the OBSERVED outcome arrived (I2's session seams): an expired session would have been counted as a refusal by this pivot, in a system whose whole point is that a warning must mean something. Kept in step with stzSecurityEvent.IsRefusal(), deliberately as one positive list.aucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) sinceaucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) betweenaucune extension

the chain --------------------------------------------------- The head digest: one string that commits to the ENTIRE history ever recorded (including evicted entries).aucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) digest ataucune extension

[ :intact, :brokenAt, :message ] -- brokenAt is the 1-based index of the first entry whose stored digest disagrees with a recomputation, 0 when the retained window is consistent.aucune extension

sealing (evidence leaves the process) ----------------------- Write the retained window as a verifiable file: one "<digest>TAB<canonical>" line per entry, a header carrying the count and an HMAC seal over (head digest | count). Re-check it with StzVerifySealedLedger(path, key) -- editing any line breaks the chain; editing the seal without the key is not possible. As SealTo, plus WHO attested and WHEN -- the custody header that turns a sealed file into an attested one (I7). Unknown "#" lines are ignored by verifiers, so the format stayed compatible.aucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) seal toaucune extension

OCSF, newline-delimited: what a collector ingests as a stream.aucune extension

OCSF as one JSON array (the batch form).aucune extension

The OTLP logs envelope -- the same shape stzLog ships (perf P9), so security events and log lines arrive at one collector looking like what they are: records of the same run, sharing trace ids.aucune extension

legibilityaucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) showaucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) resetaucune extension

(sans commentaire dans la source : le nom se lit comme une phrase) destroyaucune extension