Security & Audit

Every Change Recorded, Every Record Provable

Every mutation made in the panel is written to the audit log automatically; records are chained with SHA-256 and their integrity is verified in one click.

Automatic auditing

Keeping records isn't left to a developer remembering — middleware captures every mutation.

Provable integrity

Chain verification reports the sequence number of the first broken record — silent tampering is not possible.

What's Inside

A Management Panel That Is Secure by Default

Security isn't a module added later; it's a design decision applied at every layer.

Audit Log

Who, when, against which resource, with what result — records are filtered and searched from the panel.

Hash-Chain Integrity

Each record carries the hash of the one before it; the whole chain is verified from one end.

Secret Management

Secrets live in a single source with restricted file permissions; tokens and passwords are never logged and query strings are masked.

Command Allowlist

System commands run through an allowlist of permitted binaries with timeouts, never a free shell.

Hardening

Rate limiting, security headers, HSTS and a strict cookie policy in production are on by default.

Least Privilege

An mTLS agent channel, a read-only Docker socket proxy and an unprivileged slurmrestd — each component holds only the rights it needs.

What Makes a Panel Auditable

An audit trail exists to prove what happened, not to produce a report after the fact.

Audit events are appended to a SHA-256 hash chain in a separate integrity module; appends are atomic and any retroactive edit breaks the chain visibly.

Rejected unauthorized requests are written alongside successful operations — access attempts become visible.

Agent enrollment, heartbeats, node discovery and metric ingestion are each protected by their own token or mTLS certificate; none can stand in for another.

When a configuration bundle is exported, secrets are redacted and the guard is fail-closed — a bundle never carries a secret by accident.

Want to see it live on your cluster? Get in touch!
%