kovaudit queries the audit trail — an immutable, Ed25519 signature-chained record of every action — filtered by actor or action to answer compliance and forensic questions.
export KOVANEX_ADDR=127.0.0.1:9090
bash log.sh # recent entries (default 50)
bash log.sh --actor <user_id> # everything one actor did
bash log.sh --action git.push # by action (task.move, pipeline.trigger, ...)
bash log.sh --limit 200 # widen the window
Flags pass straight through to kovanex-ctl audit; combine them to
narrow a question. The chain is signature-verified server-side, so entries are
tamper-evident.
tar xzf kovaudit.tar.gz -C ~/.claude/skills/ — needs kovanex-ctl on PATH.
Source → skills/kovaudit/ (SKILL.md · log.sh · README.md)