Skip to content

stratumctl audit

Query + verify the audit log

Terminal window
stratumctl audit [flags]

List audit events (newest first)

Terminal window
stratumctl audit query [flags]

List audit events, newest first.

–project narrows the listing to one project’s events; without it the listing is install-wide and includes the install-scope events that have no project at all.

Terminal window
stratumctl audit query
stratumctl audit query --limit 200 --output json
Flag Type Default Description
--limit int 50 Max events to return
--oldest bool false List oldest events first instead of newest

Verify the audit log hash chain over a time window

Terminal window
stratumctl audit verify [flags]

Verify the audit log hash chain. –from and –to are RFC 3339 timestamps; omit both for an effectively end-to-end check (1970-01-01.. now). The endpoint returns 200 if the chain is intact and 422 if a mismatch is detected; either body decodes into the same VerifyResult shape.

Terminal window
stratumctl audit verify
stratumctl audit verify --from 2026-10-01T00:00:00Z --to 2026-10-08T00:00:00Z
Flag Type Default Description
--from string RFC 3339 lower bound (default: 1970-01-01T00:00:00Z)
--to string RFC 3339 upper bound (default: now)