Design notes on tamper-evident audit logs: hash chains, Merkle roots, public anchoring, crypto-shredding.https://auditkit.dev/https://auditkit.dev/blog/crypto-shredding-immutable-logs-right-to-erasure/https://auditkit.dev/blog/crypto-shredding-immutable-logs-right-to-erasure/How a per-event salt lets an audit log honour GDPR Article 17 erasure while the hash chain, Merkle roots and public anchors stay valid, following the EDPB's Guidelines 02/2025 pattern.Mon, 05 Oct 2026 00:00:00 GMThttps://auditkit.dev/blog/how-merkle-trees-make-an-audit-log-verifiable/https://auditkit.dev/blog/how-merkle-trees-make-an-audit-log-verifiable/Leaves, roots and inclusion proofs; why AuditKit builds three levels (tenant, project, global) and what an inclusion proof lets a tenant check without the rest of the log.Mon, 05 Oct 2026 00:00:00 GMThttps://auditkit.dev/blog/immutable-audit-logs-in-postgres-what-a-dba-can-still-do/https://auditkit.dev/blog/immutable-audit-logs-in-postgres-what-a-dba-can-still-do/REVOKE, triggers, pgaudit and hash-chain columns each stop something; none stops a superuser, a restore from backup, or a dropped partition. What an external anchor changes.Mon, 05 Oct 2026 00:00:00 GMThttps://auditkit.dev/blog/query-your-audit-log-from-claude-with-mcp/https://auditkit.dev/blog/query-your-audit-log-from-claude-with-mcp/AuditKit's MCP server: seven tools over Streamable HTTP with the same API key as REST, tool annotations, what is read-only, and how to add it to Claude Code or Claude.ai.Mon, 05 Oct 2026 00:00:00 GMThttps://auditkit.dev/blog/signed-ingest-receipts/https://auditkit.dev/blog/signed-ingest-receipts/Every accepted event returns position, event_hash, prev_hash and an Ed25519 server signature. Keep them, and a later verify proves the service never dropped or reordered an acknowledged event.Mon, 05 Oct 2026 00:00:00 GMThttps://auditkit.dev/blog/sigstore-rekor-and-opentimestamps-as-public-anchors/https://auditkit.dev/blog/sigstore-rekor-and-opentimestamps-as-public-anchors/What Rekor and OpenTimestamps are, what each one proves, why AuditKit uses both, and how to read the anchors page.Mon, 05 Oct 2026 00:00:00 GMThttps://auditkit.dev/blog/what-is-a-tamper-evident-audit-log/https://auditkit.dev/blog/what-is-a-tamper-evident-audit-log/Definition of a tamper-evident audit log, how it differs from tamper-proof, and the three parts it is built from: hash chain, Merkle root, external anchor.Mon, 05 Oct 2026 00:00:00 GMT