- name
- openclaw-ledger
- user-invocable
- true
- metadata
- {"openclaw":{"emoji":"📒","requires":{"bins":["python3"]},"os":["darwin","linux","win32"]}}
OpenClaw Ledger
Tamper-evident audit trail for agent workspaces. Every workspace change is recorded in a hash-chained log — if anyone alters an entry, the chain breaks and you know.
The Problem
Agents modify files, execute commands, install skills — and leave no verifiable record. If something goes wrong, you can't trace what happened. If logs exist, nothing proves they haven't been altered after the fact.
Commands
Initialize
Create the ledger and snapshot current workspace state.
python3 {baseDir}/scripts/ledger.py init --workspace /path/to/workspaceRecord Changes
Snapshot current state and log all changes since last record.
python3 {baseDir}/scripts/ledger.py record --workspace /path/to/workspace
python3 {baseDir}/scripts/ledger.py record -m "Installed new skill" --workspace /path/to/workspaceVerify Chain
Verify the hash chain is intact — no entries tampered with.
python3 {baseDir}/scripts/ledger.py verify --workspace /path/to/workspaceView Log
Show recent ledger entries.
python3 {baseDir}/scripts/ledger.py log --workspace /path/to/workspace
python3 {baseDir}/scripts/ledger.py log -n 20 --workspace /path/to/workspaceQuick Status
python3 {baseDir}/scripts/ledger.py status --workspace /path/to/workspaceHow It Works
Each entry contains:
- Timestamp
- SHA-256 hash of the previous entry
- Event type and data (file changes, snapshots)
If any entry is modified, inserted, or deleted, the hash chain breaks and verify detects it.
Exit Codes
0— Clean / chain intact1— No ledger or minor issues2— Chain tampered / corrupt entries
No External Dependencies
Python standard library only. No pip install. No network calls. Everything runs locally.
Cross-Platform
Works with OpenClaw, Claude Code, Cursor, and any tool using the Agent Skills specification.