FeatureClosedSwamp CLIPublic

AssigneesNone

#2075 Docs: Serve audit Phase 4 — SIEM sinks, HMAC, and export reference

Opened by stack72 · 9/9/2026

What changed

Phase 4 of the serve audit log (#2074) adds:

Webhook sink — audit.sinks config with type: webhook, JSON/CEF formats, auth options
Syslog sink — audit.sinks config with type: syslog, RFC 5424 TCP/UDP/TLS
HMAC — audit.hmac config, HMAC-SHA256 of sensitive fields, per-rule opt-out
Bulk export — swamp audit export --from --to --format json|cef|csv --output CLI command
System events — instance.join, instance.leave, health.transition

What needs documenting

Update swamp-serve reference docs in swamp-club manual for:

Audit sink configuration (webhook, syslog options in serve.yaml)
HMAC configuration (vault, key, enabled, per-rule opt-out)
swamp audit export CLI subcommand
Updated system event list

9/9/2026, 12:02:38 PM

No activity in this phase yet.

03Sludge Pulse

serve: idle peer data.query remains stale when a remote datastore honors selective pulls

serve data.get cannot resolve models stored in managed configuration

serve model.edit does not publish managed configuration changes to the shared datastore

swamp serve daemon (user service) doesn't handle systemd 'lingering' — claims it 'starts automatically' but only runs while logged in

swamp serve daemon (user service) doesn't handle systemd 'lingering' — claims it 'starts automatically' but only runs while logged in

deprecated extensions are more prominent than I expected :)

Trigger schedule overrides require a swamp serve restart to take effect

Serve Audit Log - Phase 5: Extension sinks, alerting, compliance

Serve Audit Log - Phase 6: Full documentation

CI auto-merge broken: removed claude-review job was the PR approver

createModelTestContext mock Logger has .warn() but real runtime has .warning()

Serve Audit Log - Phase 4: SIEM integrations, bulk export, HMAC

aws-sm vault: support profile config key to select named AWS credential profiles

docs: data.latest second argument matches name OR spec, not just spec

Per-extension white listing

agent-runner: allow using the Claude CLI's stored login instead of requiring an API key

data.latest().attributes/.content unresolved in workflow assert/guard CEL for @mgreten/cli-agent extension data

Simplify CI: remove redundant jobs, automerge only on security + attestation gates

Add put_events method to event-bus type

workflow guard: run requires ${{ }}, evaluate rejects it — no guard form satisfies both

Unify serve config credential resolution via CEL expressions

Block temporary email services on signup

repo upgrade/init hardcode absolute swamp binary path in hook commands, breaking cross-machine portability

Docs: Serve audit Phase 4 — SIEM sinks, HMAC, and export reference

managedConfig: cross-process sentinel disagreement between CLI and serve

Expose swamp help to agents proactively in the swamp skill

Windows: vault roundtrip model outputs UTF-16LE instead of UTF-8

Make verification reviews tolerate a passing review without an explicit verdict

Enrich InvocationContext telemetry with datastore type and external vault detection

Windows: CLI outputs forward-slash lowercase paths instead of native backslash paths

Audit: emit auth-category events for OAuth device flow and token operations

Add create_pipeline_schedule to @webframp/gitlab

First-class scheduled garbage collection policy per datastore namespace

Document run GC retention configuration

Serve Audit Log - Phase 3: Real-time WebSocket streaming

docs(cli): document run GC retention configuration

Audit: many model/data handlers pass wildcard resource name instead of actual model name

swamp cmds don't realise the user is sshed into the system

spreadsheets-values: append and update cannot send valueInputOption, so neither can write — query-location parameters are never populated

Flaky POSIX shutdown handler SIGINT test exits 130

Test flake: buildOtelResource env var race in parallel test execution

Windows: HOME environment variable not set — no USERPROFILE fallback

Property test flake: CEL embedded interpolation with empty expression key

Adversarial review guard does not cover src/cli/ outside src/cli/commands/

Expose configured per-method definition arguments in model get --json

Lab #2037 mitigation does not cover category-specific bundle stores (datastore-bundles, vault-bundles, report-bundles)

Implemented/shipped issues should reference the implementation more clearly

Document configured method arguments in model get JSON

writeCatalogExport takes 55-150s per workflow step — serializes entire catalog as pretty-printed JSON

Separation of duties impossible: workflow.approve is authorized against the 'run' action, so approvers can start runs and operators can self-approve

Serve Audit Log - Phase 2: WAL, chain hashing, query API, complete coverage

data query omits report artifacts returned by data list and versions

swamp issue bug isn't auto-filling swamp version, OS and shell

Upgrade/Update causes odd locking issue on swamp deno

stale lock file not being cleaned up?

Document env.* namespace for model-instance globalArguments (host-portable config)

In "swamp workflow run", "Still running... [Xs elapsed]" should be considered non-essential output

Docs: document the approve grant action and separation-of-duties patterns

Docs: Add method-level grant scoping to authorization reference

Docs: document enriched model search JSON output shape

Retire or rebuild /admin/nurture once the epic lands — it is a gate, and gates are single-use

feat(nurture): /admin/nurture — who would get what, and why

feat(nurture): the nurture_send ledger and the dry-run projector, with the cold-start seal

feat(nurture): batch cohort reads — account-grain identification that carries its evidence

feat(nurture): the flow catalog and the qualification contract (pure domain)

Serve Audit Log - Phase 1: Event pipeline and durable storage

harness-marketing-funnel posts {batch:[...]} to /ingest, which is not a batch — every run silently measures zero

feat(cli): swamp inbox — read swamp-club notifications without leaving the terminal

feat(cli): tell operatives they have swamp-club notifications waiting

feat(api): a cheap unread-notification count for API-key clients

feat(nurture): deliver to the swamp-club inbox on the same dedupe decision as email

feat(nurture): arm needs-help-after-a-failed-run (NEEDS HELP)

feat(nurture): arm model-usage-without-workflows (BUILDING PRODUCT FEATURES)

feat(nurture): arm no-activation-after-30-days (ARRIVED, NEVER RAN)

feat(nurture): arm reactivation-after-7-days (DRIFTED)

feat(nurture): arm the first flow — extension published, email only, verified in prod

feat(nurture): the six nurture email templates, previewed before anything sends

feat(nurture): an outbound transport that reports its outcome, and per-channel send status

feat(nurture): suppression — opt-out, address-grain frequency caps, one-click unsubscribe

Epic: Product nurture — lifecycle identification, dedupe-safe delivery, and operator control (email, inbox, CLI)