wms audit verify

Recompute the audit log's hash chain; exits non-zero at the first broken line

Every line the suite writes carries a hash of itself and the line before it, and the first one pins the whole file as it was when the chain began. Editing, deleting or reordering a line is reported with its line number. This does NOT catch someone with root recomputing the chain, or dropping the newest lines: compare wms audit head against a copy kept somewhere this machine cannot write.

wms audit verify