GoLogX

Project Overview

GoLogX is a tamper-evident audit log for Go. It provides an append-only, hash-chained, optionally Ed25519-signed slog.Handler with offline verification via logx verify.

Key Features

• Hash chain: Each entry contains the SHA-256 of the previous one — editing, deleting, reordering, or injecting breaks the chain
• Ed25519 signing: Entries are signed with an Ed25519 key, preventing forgery
• Offline verification: logx verify checks log integrity and identifies the first tampered entry
• Everyday logging: Colored output, JSON, rotation, fan-out to multiple sinks
• Zero external dependencies: Built on the Go standard library alone

Target Audience

• Developers who need tamper-evident audit logs
• Security-sensitive applications and compliance scenarios
• AI agent behavior tracking

Quick Start

1. As a library: go get github.com/AyoubTadlaoui/GoLogX@latest
2. As a CLI: brew install AyoubTadlaoui/tap/logx or scoop install logx or via the universal install script
3. Use the slog.Handler in your code to record tamper-evident logs
4. Verify logs: logx verify

Core Advantages

• Tamper-evident audit log — any post-hoc change is detectable
• Zero external dependencies, built on the standard library
• Both everyday logging and audit logging in one package

System Requirements

• OS: Cross-platform (Linux, macOS, Windows)
• Architectures: amd64, arm64