Skip to content

x/audit — Audit module

The x/audit module is the marketplace’s attestation layer. Independent, identity-verified auditors sign provider attributes directly on-chain, turning what would be a self-asserted claim — region, datacenter tier, compliance posture — into an attestation a tenant can verify and require.

A provider may claim any attribute on its provider record. An auditor who holds the on-chain auditor role inspects the claim against reality and signs it. That signature lands as an on-chain object attached to the provider’s attribute record, where three things become possible:

  • Orders can require signed attributes. Placement constraints can demand attributes signed by specific auditors, so only verified claims match a tenant’s workload.
  • Trust is traceable. Auditor status is itself a role granted through x/roles, held by VEID-verified participants — an attestation names an accountable party, not an anonymous badge.
  • Standing can be withdrawn. Attestations are revocable and superseded on chain, so audit trust reflects current reality rather than a one-time certification.

The module also maintains an audit log of its own operations (LogEntry/LogEntries queries) and supports bulk export jobs (MsgCreateExportJob) for reviewers who want the full attestation history off-chain.

Self-reported quality is worth little in an anonymous marketplace. Real procurement solves this with independent verification — but a centralized gatekeeper would simply recreate the trust problem the protocol exists to dissolve. x/audit imports the assurance model of procurement (a second, accountable party checks the claim) without importing a gatekeeper: auditors are on-chain roles, attestations are public objects, and both are revocable.

ConceptDefinition
AttestationAn auditor’s on-chain signature over a provider’s claimed attribute.
Audited placementAn order constraint requiring attributes signed by trusted auditors.
Auditor roleThe x/roles capability that authorizes signing provider attributes.
Export jobA recorded request for a bulk export of attestation history.
  1. Claim — Provider claims attributes. Region, datacenter tier, and compliance posture go on-chain as part of the provider record via x/provider.
  2. Inspect — An auditor verifies. A recognized, identity-verified auditor checks the claim against reality.
  3. Sign — The attestation lands. MsgSignProviderAttributes records the signature, upgrading the claim into an attestation tenants can require.
  4. Revoke — Standing is withdrawn. MsgDeleteProviderAttributes removes a signature; attestations stay auditable and traceable to their signers throughout.
MessagePurpose
MsgSignProviderAttributesAn auditor signs (attests to) a provider’s claimed attributes.
MsgDeleteProviderAttributesThe auditor withdraws a previously signed attestation.
MsgCreateExportJobRequests a bulk export of audit records for off-chain review.
MsgUpdateParamsGovernance-only update of module parameters.
QueryPurpose
ProviderAttributesAttested attributes for one provider.
AllProvidersAttributesAttested attributes across every registered provider.
AuditorAttributesWhat a given auditor has signed.
ProviderAuditorThe auditor relationship for a provider.
ExportJob / ExportJobsStatus of export jobs, individually and as a list.
LogEntry / LogEntriesThe module’s own audit log, individually and as a list.
ParamsCurrent module parameters.
ModuleHow they interact
x/providerAttestations attach to provider attribute records.
x/marketOrders can require auditor-signed attributes for placement.
x/rolesAuditor status is an on-chain role with defined capabilities.
x/veidAuditors are identity-verified participants with accountable standing.

An auditor’s on-chain signature over a provider’s claimed attribute — the difference between “trust us” and “a verified party checked”.

Holders of the auditor role — an on-chain role with defined capabilities, held by VEID-verified participants with accountable standing. See the x/roles module.

Through audited placement constraints: orders can require specific attributes signed by trusted auditors, so only verified claims match.