Immutable audit history for compliance workflows
Preserve ordered changes with integrity checks, reconstruct past state, and trace each result to its source events. Apply role-based access and policy enforcement to hosted tenants.
Built for compliance from day one
Immutable Append-Only Log
Accepted changes append new events instead of updating prior payloads in place. The WAL supports CRC32 integrity checks and configurable fsync.
CRC32 Integrity Checks
Each WAL entry receives a checksum at write time so recovery can detect accidental bit-level corruption. CRC32 is an integrity check, not a cryptographic signature.
Time-Travel Reconstruction
Reconstruct entity state at a past timestamp with as_of queries and return the source events used by that reconstruction.
RBAC: 4 Roles, 7 Permissions
Admin, Developer, ReadOnly, and ServiceAccount roles with fine-grained permissions. Control who can ingest, query, manage schemas, and access projections.
Policy Enforcement Engine
Define custom authorization policies beyond RBAC. Enforce data retention rules, access windows, IP restrictions, and tenant-specific compliance requirements.
Full Event Provenance
Every event carries metadata: who created it, when, from which service, with what API key. Complete chain of custody from ingestion to query.
Reconstruct any past state
One API call to answer "what was the state at time X?"
# Reconstruct account state at the time of the audit
curl -s https://api.all-source.xyz/api/v1/events/query \
-H "Authorization: Bearer $API_KEY" \
-H "Content-Type: application/json" \
-d '{
"entity_id": "account-7291",
"as_of": "2026-01-15T09:30:00Z",
"event_type": "compliance.*"
}' | jq '.events | length'
# Response: 1,247 events — full history up to audit timestamp
# Every event has: who, when, what, from which service, CRC32 checksum
# Verify data integrity across the entire event log
curl -s https://api.all-source.xyz/api/v1/events/query \
-H "Authorization: Bearer $API_KEY" \
-d '{
"entity_id": "account-7291",
"include_checksums": true
}' | jq '.events[] | .checksum' | wc -l
# 1,247 checksums — every single event is independently verifiablePrepare audit evidence from event history
Query prior state, export its source-event sequence, and verify WAL integrity checks from the same store.