← index
security / platform · 2026 · completed

ledger

0rce ecosystem ledger platform — secure transaction logging, audit trails, and compliance reporting for security-critical environments. Live and customer-ready.

★ 0rce Ecosystem
auditcomplianceledgersecurityenterprise

About

ledger is the secure transaction and audit platform for the 0rce ecosystem. It provides cryptographically verifiable logging, immutable audit trails, and compliance reporting for security-critical operations in enterprise and adversarial environments.

Trust, but verify — with cryptographic proof.

What It Does

  • Immutable Transaction Logging: Every action (user login, permission change, data access) is recorded as a signed ledger entry with a timestamp, actor, and cryptographic hash of the previous state. No entry can be altered or deleted without breaking the chain.
  • Audit Trails: Full history of every entity (user, asset, permission) with diffs between revisions. Trails are exportable as signed JSON-LD documents for third-party verification and legal compliance.
  • Compliance Reporting: Pre-built reports for common compliance frameworks (ISO 27001, SOC 2, GDPR) with custom report builders for internal policies and regulatory requirements.
  • Tamper Detection: Periodic integrity checks compare the current state hash against the ledger. Any mismatch triggers an alert and locks affected records, ensuring data integrity.
  • Access Control: Fine-grained permissions with role-based access control (RBAC) and attribute-based access control (ABAC) via custom policies. Supports multi-factor authentication (MFA) and session management.

Who It’s For

  • Security Teams: Track and verify every change in your environment with cryptographic proof. Detect unauthorized access, privilege escalation, or data tampering in real time.
  • Compliance Officers: Generate audit-ready reports for internal audits, regulatory inspections, or legal proceedings. Export trails as signed documents for third-party verification.
  • Enterprise IT: Integrate ledger into your existing security stack via REST API. Use it as the single source of truth for all security-critical operations.
  • Adversarial Environments: Deploy in high-risk environments where data integrity and non-repudiation are critical. Use cryptographic signatures to prove the authenticity of every transaction.

Key Features

Cryptographic Signatures

Every ledger entry is signed with the server’s private key (Ed25519). The public key is published at /.well-known/ledger-public-key for external verification. This ensures that every transaction is cryptographically verifiable and non-repudiable.

Immutable Storage

PostgreSQL tables for ledger entries are append-only (via triggers). Deletion is only allowed via a privileged “purge” operation that logs its own entry, ensuring a complete and tamper-evident history.

Compliance Templates

Pre-built report templates for ISO 27001, SOC 2, and GDPR. Custom templates can be created for internal policies or industry-specific regulations (e.g., HIPAA, PCI-DSS).

API-First Design

RESTful API with OpenAPI 3.1 schema (Swagger UI at /api/schema/). Integrate ledger into your existing security tools, SIEMs, or custom dashboards.

Multi-Tenancy Support

Deploy a single instance of ledger to serve multiple teams, departments, or customers. Each tenant has isolated data and permissions, with centralized administration.

Built With

  • Backend: Django 5.1 + PostgreSQL 16 (TimescaleDB extension)
  • Frontend: Next.js 14 (App Router) + Tailwind CSS 4
  • Authentication: JWT + Redis (short-lived tokens)
  • Cryptography: PyCA cryptography (Ed25519, SHA-3)
  • Deployment: Docker + Cloudflare Tunnel (Oracle ARM)

Use Cases

  • Privileged Access Monitoring: Track every action taken by privileged users (admins, superusers) with cryptographic proof. Detect and alert on unauthorized changes.
  • Data Access Auditing: Log every access to sensitive data (PII, financial records, intellectual property). Generate reports for compliance or legal discovery.
  • Configuration Change Tracking: Monitor changes to security-critical configurations (firewall rules, IAM policies, network settings). Detect and roll back unauthorized changes.
  • Incident Response: Use ledger trails to reconstruct the timeline of a security incident. Export trails as signed documents for legal proceedings or regulatory reporting.
  • Third-Party Verification: Provide auditors, regulators, or legal teams with cryptographically signed audit trails. Prove the integrity and authenticity of your data.

Security & Compliance

  • Cryptographic Integrity: Every entry is signed and linked to the previous state. Tampering breaks the chain and is immediately detectable.
  • Role-Based Access Control (RBAC): Fine-grained permissions for users, roles, and resources. Supports custom roles and attribute-based policies.
  • Multi-Factor Authentication (MFA): Enforce MFA for all users or specific roles. Integrate with TOTP, WebAuthn, or hardware tokens.
  • Session Management: Track active sessions, enforce session timeouts, and log session activity.
  • Rate Limiting: Protect the API from abuse with rate limiting (100 requests/minute per IP).
  • CORS & CSRF Protection: Restrict API access to trusted origins and enforce CSRF protection.
  • Data Encryption: All data is encrypted at rest (PostgreSQL TDE) and in transit (TLS 1.3).

Development Status

  • Current Phase: Live and customer-ready at ledger.0rce.com
  • Next Milestones:
    • AI-powered anomaly detection (LLM integration)
    • Custom compliance templates (HIPAA, PCI-DSS)
    • Mobile app (React Native)