Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
EU AI Act compliance mapping
What This Skill Does
Hash-chained audit logging for AI agents using SHA-256 to create tamper-evident records. Covers EU AI Act Articles 12, 14, and 50 on record-keeping, human oversight, and transparency. Runs as a standalone Python script with no external dependencies.
Any modification to the log breaks the SHA-256 hash chain, making tampering detectable with a single verify command and no external tooling required.
When to use it
- Logging every file write and command execution made by an AI agent
- Verifying audit log integrity after an automated pipeline completes
- Linking agent actions to human approval references before sensitive operations
- Preparing tamper-evident records for EU AI Act compliance audits
- Tracking credential access events across multi-step agent workflows
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: log and verify that my agent backed up the production database
- 1Agent runs pg_dump on the production database
- 2Calls auditlog.py append with kind 'exec', target 'pg_dump production', summary, and a human approval gate reference
- 3Script computes SHA-256 hash chaining the new entry to the previous log entry
- 4User runs auditlog.py verify to confirm chain integrity
OK (N entries verified) — audit trail shows a timestamped exec event with actor, domain, gate reference, and unbroken hash chain