WP Manifestindependent plugin directory
manifest / security / wp-kinetic-gain-audit

Kinetic Gain Audit

Tamper-evident, MySQL-backed governance audit log for WordPress. SHA-256 hash chain (audit-stream-py compatible), one-click verify, optional forwarding to the Kinetic Gain audit-stream spine. GPL-2.0.

by Miz Causevic / Kinetic Gain LLC · github.com/mizcausevic-dev/wp-kinetic-gain-audit · website

0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/mizcausevic-dev/wp-kinetic-gain-audit/archive/refs/heads/main.zip

From the readme

wp-kinetic-gain-audit A WordPress plugin that writes a tamper-evident, MySQL-backed governance audit log — every publish, plugin toggle, role change, and security-setting change linked into a SHA-256 hash chain you can verify in one click. The MySQL-lane member of the Kinetic Gain Protocol Suite — it brings the Suite's tamper-evident audit-stream-py convention to the 40%+ of the web that runs on WordPress + MySQL. Why it's different from every other activity-log plugin Most WordPress audit-log plugins write rows you have to trust. This one writes a hash chain: each event stores a SHA-256 hash over its own canonical JSON plus the previous event's hash. Altering a row, deleting one, or inserting one out of band breaks the chain — and the admin screen's one-click verifier detects it mathematically. The chain uses the same canonical-JSON + SHA-256 convention as audit-stream-py, so an auditor verifies your WordPress log with the exact rules they use across the rest of the Suite — and you can forward every event to a central audit-stream-py spine for a portfolio-wide verifiable narrative. What it records | WordPress hook | Event kind | Payload | | --- | --- | --- | | transitionpo

Read the full README on GitHub →