Install

Works with Drupal: ^10.6 || ^11.3

Using Composer to manage Drupal site dependencies

Alternative installation files

Download tar.gz 46.48 KB
MD5: d5b759808aa0706c6910b35cb77f470d
SHA-1: 45e203d0aac649827b73bb60a7acabb4f3efbf10
SHA-256: 347335597a59ddf89d7c055bfa07c86411d83b1e917c1b197b0718a473f27382
Download zip 60.37 KB
MD5: 47c5b313cf51970901b0cf831dd790a1
SHA-1: 89c04884db6045d8cc9f3a7a26714b4983d12f2d
SHA-256: f8b0ef1bf134b226b571ced0164be155aae47eff06abe1b3a1746e5933bb5567
Downloads are for manual installation, which is not recommended when using Drupal 8 or later.

Release notes

Audit Chain 1.3.0 adds an operator prefix seal for historical segments that cannot be verified under today's signing keys (for example production rows written unkeyed). Re-chaining is intentionally not provided — recomputed hashes would paper over prior tampering.

  • drush audit-chain:seal --through=ID --reason="…" records a keyed digest over the stored row_hash values of the prefix.
  • drush audit-chain:verify content-checks only post-seal rows and reports sealed_through, seal_intact, and verified_from.
  • Exit 0 when the seal is intact and the live segment verifies; edits to sealed hashes fail as seal_broken.
  • Sealing a still-verifiable row is refused. Status report WARNING when a seal is active.

See #3614137 and the project CHANGELOG.

Created by: jmcerda
Created on: 1 Aug 2026 at 02:33 UTC
Last updated: 1 Aug 2026 at 02:33 UTC
Git tag 1.3.0
Bug fixes
New features
Unsupported

Other releases