Coming soon · BioAudit

BioAudit

Coming soon

Tamper-evident software evidence ledger

BioAudit is coming soon as a tamper-evident software evidence ledger. It will model hash-chained events, append-only storage, and offline-verifiable audit bundles.

Built for teams that need cryptographic assurance that deterministic software history cannot be silently rewritten.

Status: coming soon. BioAudit is not generally available yet.

Every event includes the digest of the previous event, forming an unbroken chain.

hash_chain.json
json
[
  {
    "seq": 1,
    "event": "study_created",
    "payload_digest": "sha256:a1b2...",
    "prev_digest": "sha256:0000..."
  },
  {
    "seq": 2,
    "event": "artifact_verified",
    "payload_digest": "sha256:c3d4...",
    "prev_digest": "sha256:a1b2..."
  },
  {
    "seq": 3,
    "event": "approval_gate_changed",
    "payload_digest": "sha256:e5f6...",
    "prev_digest": "sha256:c3d4..."
  }
]
SHA-256Hash chainAppend-only storageEvidence pack
Evidence
Every record is linked cryptographically. Tampering with any event invalidates the entire chain.
Event integrity
SHA-256 linked sequence
Hash-chained
Each event includes the digest of the previous event so tampering breaks the chain.
Storage model
Immutable log semantics
Append-only
Targets append-only storage so historical records cannot be retroactively modified.
Export format
zip + manifest + digest
Evidence pack
Planned offline pack for auditors with a single root digest to verify.
Status
Roadmap
Soon
BioAudit is not generally available yet.

Built for teams that require proof

BioAudit applies ideas from formal verification to deterministic software evidence. The goal is simple: if history is altered, it should be obvious.

Hash-chained events
  • Every deterministic software event and verification checkpoint is ingested into a unified audit bus.
  • Each record contains the SHA-256 digest of the previous record, forming a tamper-evident sequence.
Append-only storage
  • Uses append-only semantics so that once an event is written, it cannot be altered or deleted.
  • Prevents retroactive tampering even by administrators with full system access.
Offline evidence packs
  • Roadmap includes exporting a zip archive containing all events, a canonical manifest, and a root digest.
  • Reviewers can verify bundle integrity without access to the live system.
Join the BioAudit coming-soon list
We are collecting requirements for deterministic event trails, canonical manifests, and offline-verifiable bundles.

Part of the Omnis platform

BioAudit is part of our longer-term vision for deterministic, inspectable systems. It shares design principles with BioFlow and BioCost: canonical outputs, verifiable hashes, and replayable artifacts.

Use cases

Built for deterministic software environments where event trails are not optional and trust must be verifiable.

Developer corner

BioAudit is planned as a local-first service with migrations and an append-only storage layer. The contract is event in, canonical manifest out.

Planned Python / FastAPI
POST /audit/events
{
  "event_type": "artifact_verified",
  "workspace_id": "WS-001",
  "payload": { "artifact_digest": "sha256:9f2c..." }
}
Appends the event to the hash chain and returns the sequence number and event digest.

BioAudit is coming soon

BioAudit is part of our longer-term vision for deterministic, inspectable systems with canonical events, verifiable hashes, and offline audit bundles.