vortos/vortos-audit

Vortos Audit — enterprise-grade unified audit spine. One append-only, hash-chained, per-scope/per-tenant event store with controlled action vocabulary, sensitivity classification, impersonation-chain capture, async (Kafka) ingestion, partitioned storage, retention + cold-storage tiering, keyset quer

v1.0.0-alpha-324 2026-07-28 14:29 UTC

Requires

• php: >=8.2
• ext-hash: *
• psr/clock: ^1.0
• psr/log: ^3.0
• symfony/dependency-injection: ^7.0 || ^8.0
• symfony/uid: ^7.0 || ^8.0
• vortos/vortos-domain: ^1.0
• vortos/vortos-foundation: ^1.0

Requires (Dev)

• phpunit/phpunit: ^11.0

Suggests

• ext-redis: Idempotency keys for the async ingestion consumer (P3).
• doctrine/dbal: Required for the default partitioned DBAL audit store, hash chain, and keyset reader (P2).
• vortos/vortos-audit-admin: Cross-tenant platform audit console endpoints (P6).
• vortos/vortos-authorization: RBAC gate for the audit-admin read/export/verify endpoints (P6).
• vortos/vortos-messaging: Kafka-decoupled ingestion — record() enqueues, the worker appends the chain (P3).
• vortos/vortos-object-store: Cold-storage archival target for aged partitions (P4) + streaming sink for async signed exports (P6).
• vortos/vortos-observability: Ingest-lag, chain-length, and verify-failure metrics (P7).
• vortos/vortos-scheduler: Drives the retention + cold-archive sweeper on a schedule (P4).

MIT

Published on Packagist.org on 2026-08-04 23:45 UTC