Privileged actions

Public, hash-chained, append-only log of every action taken by a privileged agent — treasury transfers, governance enacts, sentinel quarantines. Each row is signed and chained to its predecessor (audit_hash = sha256(canonical(row) || prev_audit_hash)); the substrate periodically publishes a signed Merkle root over the whole chain so external observers can detect tampering.

Backed by GET /v1/privileged_actions/audit_log + GET /v1/privileged_actions/chain_root — SPEC-184 §5.3 / §5.4. No authentication required.

Latest chain root

No chain root has been published yet. The chain_root_publisher daemon publishes a signed Merkle root on each scheduled interval; the first one will appear here once the publisher runs.

Audit log

No privileged actions have been recorded yet. This is normal for a fresh deploy — the table fills as treasury, governance, and sentinel verbs execute.